Resubmissions

26-04-2024 04:54

240426-fjvkgaab47 10

05-01-2024 01:07

240105-bg639sfhh5 10

General

  • Target

    4261312a1666ccaeb48d55ddd1d64559

  • Size

    7.7MB

  • MD5

    4261312a1666ccaeb48d55ddd1d64559

  • SHA1

    620947ef46f8e8f7efbf9442845b81901c8034b6

  • SHA256

    316fac5ae2d4e250b1c0f10b4388fa2c6c3407b118e539a7d865613e373628d9

  • SHA512

    e0677d4202c94df0bf67f24b2f49cfe4a301a2a724282769e22e47c245233670ccf3ce14e5aa2c3535d3dd00b603560e399f521c0ba7232b71a84d27acfc50c8

  • SSDEEP

    196608:NeX/gzDmUkWxyaB/VDM2tR+vI6FXu7VkpU54rbfKEqedf:NC/+oWxf/tRc3peG9Xqedf

Score
10/10

Malware Config

Signatures

  • Pegasus family
  • Pegasus payload 2 IoCs
  • Requests dangerous framework permissions 23 IoCs

Files

  • 4261312a1666ccaeb48d55ddd1d64559
    .zip
  • Pegasus/144778790d4a43a1d93dff6b660a6acb3a6d37a19e6a6f0a6bf1ef47e919648e
    .apk android arch:arm

    com.lenovo.safecenter

    .MainTab.SplashActivity


  • LenovoSafeBox455.apk
    .apk android

    com.lenovo.safebox

    com.lenovo.lps.sus.control.SUSPromptActivity


  • LenovoSafeWidget115.apk
    .apk android

    com.lenovo.safecenterwidget

    .DownloadLeSafeActivity


  • nb.jar
    .apk android
  • Pegasus/530b4f4d139f3ef987d661b2a9f74f5f
  • Pegasus/bd8cda80aaee3e4a17e9967a1c062ac5c8e4aefd7eaa3362f54044c2c94db52a
    .apk android

    seC.dujmehn.qdtheyt

    seC.dujmehn.qdtheyt.Dujmehnpqyd


  • Pegasus/cc9517aafb58279091ac17533293edc1
    .apk android

    com.binary.sms.receiver

    com.binary.sms.receiver.SkeletonActivity


  • Pegasus/d257cfde7599f4e20ee08a62053e6b3b936c87d373e6805f0e0c65f1d39ec320
    .apk android arch:arm

    com.xxGameAssistant.pao

    com.xxGameAssistant.pao.SplashActivity