General
- Target 290d70472f4b00a1cf01f5c1311aacffaa39057bb1c826c99419999ccef7ae53.apk
- Size 1.7MB
- Sample221027-tgl27scff7
- SHA256 290d70472f4b00a1cf01f5c1311aacffaa39057bb1c826c99419999ccef7ae53
- MD5 c4951ce5e946596e0356979341e6f240
- SHA1 530e602b959009f80b5161aeb0eaec7c75dfd826
- SHA512 dd4a04c5875319432b60a5f8ee5054503b68cacb72966f1dedb71af6a41dfcc8c2ebff54a865d08a043bba46989f05239bbcb77f59419e2552e227ef415c6f48
- SSDEEP 24576:Y/sKffJ6jKuJjE62OdFTeLNFVMV40UfVkaVBRm1LMX9xfZvYQaFe:FKffJmKojE6DwNFC4PdkKmGXdae
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
290d70472f4b00a1cf01f5c1311aacffaa39057bb1c826c99419999ccef7ae53.apk
Resource
android-x86-arm-20220823-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
290d70472f4b00a1cf01f5c1311aacffaa39057bb1c826c99419999ccef7ae53.apk
Resource
android-x64-20220823-en
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
290d70472f4b00a1cf01f5c1311aacffaa39057bb1c826c99419999ccef7ae53.apk
Resource
android-x64-arm64-20220823-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
furball
C2
-
http://www.firmwaresystemupdate.com/mmh
Targets
-
- Target 290d70472f4b00a1cf01f5c1311aacffaa39057bb1c826c99419999ccef7ae53.apk
- Size 1.7MB
- SHA256 290d70472f4b00a1cf01f5c1311aacffaa39057bb1c826c99419999ccef7ae53
- MD5 c4951ce5e946596e0356979341e6f240
- SHA1 530e602b959009f80b5161aeb0eaec7c75dfd826
- SHA512 dd4a04c5875319432b60a5f8ee5054503b68cacb72966f1dedb71af6a41dfcc8c2ebff54a865d08a043bba46989f05239bbcb77f59419e2552e227ef415c6f48
- SSDEEP 24576:Y/sKffJ6jKuJjE62OdFTeLNFVMV40UfVkaVBRm1LMX9xfZvYQaFe:FKffJmKojE6DwNFC4PdkKmGXdae
- MD5 SHA1 SHA512 SSDEEP
Score7/10-
Acquires the wake lock.
-
Reads information about phone network operator.
-
Uses Crypto APIs (Might try to encrypt user data).