Extracted

• • Target

    05373db5a137db1a51131fdc8f1fef981b7c504e816cbf76cb06a7b02f8f66d0.bin

  • Size

    4.7MB

  • MD5

    6ac64c45280441ae30299b1fcf951a55

  • SHA1

    59602192d0ed3a84b577dc7adbb1911a36b44980

  • SHA256

    05373db5a137db1a51131fdc8f1fef981b7c504e816cbf76cb06a7b02f8f66d0

  • SHA512

    e133e15b0569b82f50ce54f69a672753623e660f086b6f265bbef5da81b07f04e15a028a13b3670800d7cba96e9941326a59eb24424082db447a93ef1e49c460

  • SSDEEP

    98304:ZwZa90v+A03qwv9h2UZmBiImbiQdDMqQAChwzvT7idW7E3:6+jJ2LBioqDMqQAChw/No3

  Score

  6^/10

  impact

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1behavioral2behavioral3

• • Target

    i.apk

  • Size

    3.7MB

  • MD5

    74f63d7c8e51f07b83ddc0c09c009d92

  • SHA1

    d005c80d45d759e9a550568f04dfb7d0df227627

  • SHA256

    e0e5bace7224aff2e742b393b572f6de8c425b7deb2fa6397a7445d1127de1fc

  • SHA512

    2c593406dbfb156144cf52db27f63dae48d297a8e010910301e2d3b9c79aa0a3d7df471d8e9130e2046f06bfe4e2710078482d093fb6c5c72c55418c67190402

  • SSDEEP

    98304:nX65cXbElRY6Kt4EBPosjC/SbXIKekoUSWr:nX6aElRYW+PosjC/S8ITSWr

  Score

  7^/10

  evasionimpactpersistence

  • Makes use of the framework's foreground persistence service

    Application may abuse the framework's foreground service to continue running in the foreground.

    evasionpersistence

  • Acquires the wake lock

  behavioral4behavioral5behavioral6