General

  • Target

    yssaas-release_102.apk

  • Size

    10.0MB

  • Sample

    240523-nwbl5aeh88

  • MD5

    820a951972ad336749cb5f77589e0a3d

  • SHA1

    1a69f791b55fd08d0f80e8c7e09a4b313c3b24c9

  • SHA256

    f19d1f97998e855b533cc70f7eccae4b74a540e52d121e77d78851e8398a427b

  • SHA512

    5c054f8a39b141df472a8e5916af2e62fd0234399550ef60d6c1260cb69c60f2a4c0488bf2d12f3a67c75976b49ad89159fcd179430e865d3b90b1bbde3723ea

  • SSDEEP

    196608:EXVW07xHHtTQZ5DqLRlvPABMNI6m/wXCOVFdLtdgpElScRkhsfWR40VJQ9WvWS79:EXVWmJQZ52LPNNe4XCOLdeElScRkhsMt

Malware Config

Targets

    • Target

      yssaas-release_102.apk

    • Size

      10.0MB

    • MD5

      820a951972ad336749cb5f77589e0a3d

    • SHA1

      1a69f791b55fd08d0f80e8c7e09a4b313c3b24c9

    • SHA256

      f19d1f97998e855b533cc70f7eccae4b74a540e52d121e77d78851e8398a427b

    • SHA512

      5c054f8a39b141df472a8e5916af2e62fd0234399550ef60d6c1260cb69c60f2a4c0488bf2d12f3a67c75976b49ad89159fcd179430e865d3b90b1bbde3723ea

    • SSDEEP

      196608:EXVW07xHHtTQZ5DqLRlvPABMNI6m/wXCOVFdLtdgpElScRkhsfWR40VJQ9WvWS79:EXVWmJQZ52LPNNe4XCOLdeElScRkhsMt

    • Requests cell location

      Uses Android APIs to to get current cell location.

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Queries information about the current nearby Wi-Fi networks

      Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

    • Checks if the internet connection is available

    • Queries the unique device ID (IMEI, MEID, IMSI)

    • Reads information about phone network operator.

MITRE ATT&CK Matrix

Tasks