dracarys | 43e3a0b0d5e2f172ff9555897c3d3330f3adc3ac390a52d84cea7045fbae108d

General

Target

43e3a0b0d5e2f172ff9555897c3d3330f3adc3ac390a52d84cea7045fbae108d
Size

21.9MB
Sample

240410-mpdbpscg26
MD5

d9a39c41e9f599766b5527986e807840
SHA1

a35653c3d04aaaa76266db6cd253f086872a5d27
SHA256

43e3a0b0d5e2f172ff9555897c3d3330f3adc3ac390a52d84cea7045fbae108d
SHA512

ccd49932590a89f8ccfddd0d588660942b9e657355456a7bc5f05f36d02b6ddb3f42321b47ab7de03a747c846cca1d3e9f0f02fc0a15f57dc1c0073354a2c300
SSDEEP

393216:5q3TVSn9LXMq4Ynog/N8Cko4g04hQOZeibmUEPZgYlX5oLLIR1pmF8yxilXLGg6a:5qJwBXJ/atbnasiAB3wVF9xwLS4vgfxO

Score

10^/10

Malware Config

Targets

- Target
  
  43e3a0b0d5e2f172ff9555897c3d3330f3adc3ac390a52d84cea7045fbae108d
- Size
  
  21.9MB
- MD5
  
  d9a39c41e9f599766b5527986e807840
- SHA1
  
  a35653c3d04aaaa76266db6cd253f086872a5d27
- SHA256
  
  43e3a0b0d5e2f172ff9555897c3d3330f3adc3ac390a52d84cea7045fbae108d
- SHA512
  
  ccd49932590a89f8ccfddd0d588660942b9e657355456a7bc5f05f36d02b6ddb3f42321b47ab7de03a747c846cca1d3e9f0f02fc0a15f57dc1c0073354a2c300
- SSDEEP
  
  393216:5q3TVSn9LXMq4Ynog/N8Cko4g04hQOZeibmUEPZgYlX5oLLIR1pmF8yxilXLGg6a:5qJwBXJ/atbnasiAB3wVF9xwLS4vgfxO
Score

8^/10

banker collection discovery evasion
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
  banker discovery
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Queries account information for other applications stored on the device.
  Application may abuse the framework's APIs to collect account information stored on the device.
  collection
- Queries information about running processes on the device.
  Application may abuse the framework's APIs to collect information about running processes on the device.
  discovery
- Queries the phone number (MSISDN for GSM devices)
  discovery
- Reads the contacts stored on the device.
  collection
- Reads the content of photos stored on the user's device.
  collection
- Reads the content of the call log.
  collection
- Acquires the wake lock
behavioral1 behavioral2