General

  • Target

    yssaas-release_104.apk

  • Size

    10.0MB

  • Sample

    240523-pgln8agh2w

  • MD5

    0345baf80b07c40cfc31b9071dea18fc

  • SHA1

    91bf2dbeb8398a77e8b2ade63f5d8cd7ab84270b

  • SHA256

    86f93ef3367f00d04baf81b225793af79c2e68cc3ced0235330f37d6bc836395

  • SHA512

    33b795a12a1ddd585f0dc59185519f0c473ae30ed7de919cea48aec98ca85803990d20524c1cff33c6fa0a11a883452d6a9efa911526a4146d81f28c80399b6f

  • SSDEEP

    196608:tAjwNCz+VZUI+dvEABMNI6m/wXCaRFdLJdk1Elm4RkhYveR4kVJQ9WTyS7Vyt+nf:tAjwJUIlNN+4XCa/d2Elm4RkhYE4kVJj

Malware Config

Targets

    • Target

      yssaas-release_104.apk

    • Size

      10.0MB

    • MD5

      0345baf80b07c40cfc31b9071dea18fc

    • SHA1

      91bf2dbeb8398a77e8b2ade63f5d8cd7ab84270b

    • SHA256

      86f93ef3367f00d04baf81b225793af79c2e68cc3ced0235330f37d6bc836395

    • SHA512

      33b795a12a1ddd585f0dc59185519f0c473ae30ed7de919cea48aec98ca85803990d20524c1cff33c6fa0a11a883452d6a9efa911526a4146d81f28c80399b6f

    • SSDEEP

      196608:tAjwNCz+VZUI+dvEABMNI6m/wXCaRFdLJdk1Elm4RkhYveR4kVJQ9WTyS7Vyt+nf:tAjwJUIlNN+4XCa/d2Elm4RkhYE4kVJj

    • Requests cell location

      Uses Android APIs to to get current cell location.

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Queries information about the current nearby Wi-Fi networks

      Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

    • Checks if the internet connection is available

    • Reads information about phone network operator.

MITRE ATT&CK Matrix

Tasks