General
-
Target
WH_Final5065.apk
-
Size
181KB
-
Sample
231018-zn9dzabb3s
-
MD5
45990bb5b26babf7fd4b7ced49217320
-
SHA1
fbfba7b69e56db6a3f60f6f0b588789ddadc4f11
-
SHA256
95cf1b24172243a1813498b865f0c15ea161500bb3f2f79d3d6ff4ff3ca318a5
-
SHA512
f3421cb0558258b63e442d8c0ec0b65671eeb3459e0c2b346bbf67bf4598fbf9f5d8f4443abfe47d371bf90bcafe72a1bc85c44c9704c0079230ae695da1c5c8
-
SSDEEP
3072:Q/YaYgr/TuZCkzYl+0RCm0puu7XFS4iE3vMPoonx85TKP8hBsHYa5raEnTdy:QLzr0RzETRCJBS4iEEnCVRs4aVrTg
Malware Config
Extracted
anubis
https://nl6kaf4.localto.net
Targets
-
-
Target
WH_Final5065.apk
-
Size
181KB
-
MD5
45990bb5b26babf7fd4b7ced49217320
-
SHA1
fbfba7b69e56db6a3f60f6f0b588789ddadc4f11
-
SHA256
95cf1b24172243a1813498b865f0c15ea161500bb3f2f79d3d6ff4ff3ca318a5
-
SHA512
f3421cb0558258b63e442d8c0ec0b65671eeb3459e0c2b346bbf67bf4598fbf9f5d8f4443abfe47d371bf90bcafe72a1bc85c44c9704c0079230ae695da1c5c8
-
SSDEEP
3072:Q/YaYgr/TuZCkzYl+0RCm0puu7XFS4iE3vMPoonx85TKP8hBsHYa5raEnTdy:QLzr0RzETRCJBS4iEEnCVRs4aVrTg
-
Makes use of the framework's Accessibility service.
-
Acquires the wake lock.
-
Reads information about phone network operator.
-