General
-
Target
0759a60e09710321dfc42b09518516398785f60e150012d15be88bbb2ea788db
-
Size
3.2MB
-
Sample
240410-leprbaae54
-
MD5
bb98d68156b619928db5122ffbd9dce5
-
SHA1
b1dfb2be760d209846f2147ce32560954d2f71b5
-
SHA256
0759a60e09710321dfc42b09518516398785f60e150012d15be88bbb2ea788db
-
SHA512
c138e74c1ef6c9da94c1a1240cf590dffad9e7656fadcdf934ee313c4b4e0a1c9ee2a11661a4fa96251d1459fc460f4650200b83d8af69b34bcf87aea6c84cb3
-
SSDEEP
49152:24TUQniX10zo7/iiZJm1hNvlpAj/4p76JWYqojqyJnCcW:eF0EdsFyrymJWYDjLJn1W
Malware Config
Targets
-
-
Target
0759a60e09710321dfc42b09518516398785f60e150012d15be88bbb2ea788db
-
Size
3.2MB
-
MD5
bb98d68156b619928db5122ffbd9dce5
-
SHA1
b1dfb2be760d209846f2147ce32560954d2f71b5
-
SHA256
0759a60e09710321dfc42b09518516398785f60e150012d15be88bbb2ea788db
-
SHA512
c138e74c1ef6c9da94c1a1240cf590dffad9e7656fadcdf934ee313c4b4e0a1c9ee2a11661a4fa96251d1459fc460f4650200b83d8af69b34bcf87aea6c84cb3
-
SSDEEP
49152:24TUQniX10zo7/iiZJm1hNvlpAj/4p76JWYqojqyJnCcW:eF0EdsFyrymJWYDjLJn1W
Score8/10-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
-
Removes its main activity from the application launcher
-
Requests cell location
Uses Android APIs to to get current cell location.
-
Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.
-
Queries information about running processes on the device.
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Acquires the wake lock
-
Reads information about phone network operator.
-
Requests disabling of battery optimizations (often used to enable hiding in the background).
-