pegasus | 5f9b299b71fcc639689e9906509b0dfded9e813c0a65b76b41bcfe7e01c3af86

Sharing

Copy URL Twitter E-mail

General

Target
ca29594031da800dd205f8b05825274b
Size 7.7MB
Sample240315-b57ppsfe69
SHA256 5f9b299b71fcc639689e9906509b0dfded9e813c0a65b76b41bcfe7e01c3af86
MD5 ca29594031da800dd205f8b05825274b
SHA1 fa6240109a4d0404ca9dcc28095624de955e7dd2
SHA512 81381d201f741572f4b3f701c1ad886cba9a2f0364a8694b432cd9e24f3f29bed209d89ab043b88437d0af6ba12c2357f0af62f75619a5c0aecfd72985497974
SSDEEP 196608:oYBN6Ayd1LTgfA1wCKhgxtBOgbQj8wKIvm/RUFmn/IT:LGvddTg4ogxtBEHKqm/RAqAT
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

Malware Config

Targets

- Target
  144778790d4a43a1d93dff6b660a6acb3a6d37a19e6a6f0a6bf1ef47e919648e.apk
- Size 7.0MB
- SHA256 144778790d4a43a1d93dff6b660a6acb3a6d37a19e6a6f0a6bf1ef47e919648e
- MD5 29183814f45616d831fdc139e3113718
- SHA1 aa47b601dd3a01cf0ec5e2e6da5c4f90c49ba71d
- SHA512 c255f6751e97692b4517c9a4d240393098c58e626e09b0d0189b81a8f6cd20967a2f15ce9d793fa8aec76246cafc7d9b2326bf06f6adbd547f458a7d04b17d1d
- SSDEEP 196608:pJVfGouCB8oMxqANNjYYUMLRoCRMggq2k+E9p+o3k:prf7uC/Mxq4YSLRowMPqj+E9Io3k
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral1
- Target
  LenovoSafeBox455.apk
- Size 927KB
- SHA256 e0a9bdf5dc4481d913038e6509635b12d12016e820ecc58a5971be3bb72dcb2b
- MD5 02297e27886d758b1f6892b5047ff9ff
- SHA1 bf03f835c42a8734d9d862741a235ea3491036ea
- SHA512 d9784281450f91cc32b4feadc0dbf8d76b10bbcf35e7dcd362bc940103317b4e8fafba9fa9dbe0b954d20478d700b92df4f661f53edc6022d67f3bcd85276c8d
- SSDEEP 24576:wtMiI2b4apsiko9W8C/2htK3JdFgdXlQ53RJ3J:5iD5pUoW8e0tqVgdXGhJ
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral2 behavioral3 behavioral4
- Target
  LenovoSafeWidget115.apk
- Size 123KB
- SHA256 6972ef902f648ec405adec1a8ac2843048fe269e0570cfa71379545d9b0fbe77
- MD5 12c89f415f86784edddeb18072f5113f
- SHA1 135c18ae3ca1878895391abe5bd69f858b73fb8c
- SHA512 8c4e31290a966db551ae53ca720247779929f2e6ab93166bdd11ba46d6872d328e2670ce2ebd56f95bcbe225f821a4c07856aed9f5ccf677b2876bec1c3cbff0
- SSDEEP 3072:znyleVG+yjnp0qWhjKJE0hil5uBl1n8HFZAhCWij:IeM+y7iXWJEyvIz
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral5 behavioral6 behavioral7
- Target
  nb.jar
- Size 3KB
- SHA256 d31f20333a7eec385e5142196ee67ff5aaf44130b536e317a998507659ea3d15
- MD5 3c70f55ea42070b6e646c590d2101106
- SHA1 9ed7c23fabc5d7477cb9d2900bb4e321566ae9e2
- SHA512 288528f8af46e5d182c9916346ddd17b5a1c2002de0e3edf205153a4b3b129bb253ba39ee151eb56a76bc1ea82a41376dd830578e330c9fc472ad2bcdcd720d0
- MD5 SHA1 SHA512
Score

1^/10
behavioral10 behavioral8 behavioral9
- Target
  530b4f4d139f3ef987d661b2a9f74f5f.apk
- Size 27KB
- SHA256 fa538fc20af8aa198db5e932b2afaf9710633a49cf3e19b7465175520e3e8b47
- MD5 530b4f4d139f3ef987d661b2a9f74f5f
- SHA1 cf1267119890c3b663fbffe5fbf4d8116316d88c
- SHA512 bc86a69e2a525bcd951d336b97e5ed99a75223f969b5ef4c77293b9a04f746263eaeb4f164e0c31389801c294776d30bee8df6584ac102196902d09d5f100eb4
- SSDEEP 768:20gSC730q3+QRzjuBR8zlZtkDd1BKgTeawda6I6X6l64vfiobQTbv3yHtAN8a1LY:2Be/c/ShUWaRW7
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral11 behavioral12
- Target
  bd8cda80aaee3e4a17e9967a1c062ac5c8e4aefd7eaa3362f54044c2c94db52a.apk
- Size 1.1MB
- SHA256 bd8cda80aaee3e4a17e9967a1c062ac5c8e4aefd7eaa3362f54044c2c94db52a
- MD5 8d4b77fa3546149f25bd17357d41fbf0
- SHA1 7289737c1dc462726abbe89335a7702c130bbdcc
- SHA512 a9a10115072a66d89158a09649ace3702bee021a47195aec0d6046bdf8fae8927b3d36d0a6d7a7302125b5f06d711419390edf2da3c3fbd11a5a3228e6abd9ff
- SSDEEP 24576:RkVMvDz5Q6P8aJnB94XqMOkkXLjD+F5VCq7ncRL4GchuT:qKvDlhP8aj9bMvk7jDJqTmsGch0
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral13 behavioral14 behavioral15
- Target
  cc9517aafb58279091ac17533293edc1.apk
- Size 57KB
- SHA256 9fae5d148b89001555132c896879652fe1ca633d35271db34622248e048c78ae
- MD5 cc9517aafb58279091ac17533293edc1
- SHA1 28f570754274db96bffa7ac4a53a5ede3508d82c
- SHA512 2fb55d4ceb8da9a01d5bf0a9725ee601a252b541f29186311bbc3c515b4cfa3e52107f856f381cfb643b1d2398099c6c0747f1b01baf37e68fd273684fc93fe5
- SSDEEP 1536:kdJw+W4W0bQjcK2eZk7A6loQ17y23V9zEj:n/sQQK2mkE6l5I2Fxw
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral16 behavioral17 behavioral18
- Target
  d257cfde7599f4e20ee08a62053e6b3b936c87d373e6805f0e0c65f1d39ec320.apk
- Size 367KB
- SHA256 d257cfde7599f4e20ee08a62053e6b3b936c87d373e6805f0e0c65f1d39ec320
- MD5 4aa966ff0455560a2918b746ada2ed52
- SHA1 4984af24225d3356689585399ef5e49553e6436c
- SHA512 e67061519218f5edc241c9458addf51b05a1bd0de604c973756c02018dddb4a893fbebf9ab9a0194b9fc737c7d479c5949b7d3cf7fa444a8bca88853c2d5ebae
- SSDEEP 6144:1krLrE0XFUxWeau+qEqoh5pFtdiEnVXZrAhk3X2I9FZIqovhFa5Y5jQ5m3wQ54:1L0XFuNau+qsDkwX7xIqwhXML
- MD5 SHA1 SHA512 SSDEEP
Score

8^/10

banker collection discovery
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
  banker discovery
- Requests cell location
  Uses Android APIs to to get current cell location.
  collection discovery
- Reads information about phone network operator.
  discovery
behavioral19

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Location Tracking

T1430

Software Discovery

T1418

Security Software Discovery

T1418.001

System Network Configuration Discovery

T1422

Lateral Movement

Collection

Location Tracking

T1430

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

Requests cell location

Reads information about phone network operator.

MITRE ATT&CK Enterprise v15

MITRE ATT&CK Mobile v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19