General
- Target Quick PDF Scanner.apk
- Size 10.6MB
- Sample230115-e8nmsaaa97
- SHA256 eb46541e2991a20c20fca66e51a705a309e6576296c435126ac369ba41e6bff5
- MD5 1e288142a45ebe7244ab899798cea643
- SHA1 078295d1cda8319ed69f64b5443e4d89705d8523
- SHA512 0509d443761eb56aa9f53ca552f06ea1202917fa5daf8b0475da247b031677d363ad95e381065a09939bc2681aaf77abf82869c3d0256afea55f3d145e056d7b
- SSDEEP 196608:+Ubrdcg+Cnp2yJqiHLu5OOERwQDAvpilOV8YJ/ywk3muPFoeDb7uYoeDzGOjCx:+UbJcg++p2yJ5Ligw0CswBCmuP2eLuvn
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Quick PDF Scanner.apk
Resource
android-x86-arm-20220823-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
Quick PDF Scanner.apk
Resource
android-x64-20220823-en
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
Quick PDF Scanner.apk
Resource
android-x64-arm64-20220823-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
joker
C2
-
https://weco.oss-eu-central-1.aliyuncs.com/simple
-
https://weco.oss-eu-central-1.aliyuncs.com/test_kbnt
Targets
-
- Target Quick PDF Scanner.apk
- Size 10.6MB
- SHA256 eb46541e2991a20c20fca66e51a705a309e6576296c435126ac369ba41e6bff5
- MD5 1e288142a45ebe7244ab899798cea643
- SHA1 078295d1cda8319ed69f64b5443e4d89705d8523
- SHA512 0509d443761eb56aa9f53ca552f06ea1202917fa5daf8b0475da247b031677d363ad95e381065a09939bc2681aaf77abf82869c3d0256afea55f3d145e056d7b
- SSDEEP 196608:+Ubrdcg+Cnp2yJqiHLu5OOERwQDAvpilOV8YJ/ywk3muPFoeDb7uYoeDzGOjCx:+UbJcg++p2yJ5Ligw0CswBCmuP2eLuvn
- MD5 SHA1 SHA512 SSDEEP
Score10/10Checks Android system properties for emulator presence.
Loads dropped Dex/Jar
Runs executable file dropped to the device during analysis.
Reads information about phone network operator.
Removes a system notification.
Uses Crypto APIs (Might try to encrypt user data).