General

  • Target

    yssaas-release_110.apk

  • Size

    10.1MB

  • Sample

    240523-pxssgaaf66

  • MD5

    6ab9f98c7357022214513c80f683bf06

  • SHA1

    2e68045b774ad7485d95d529ae7d152fc8ccb2f6

  • SHA256

    ac9c860be3d64ddef814883ea72c5d7d8b5062251725d2f3ceb231d05c821ed4

  • SHA512

    3c4d007241741fa579d366de81b5eb46c7e4f36a4cf47ffb6399babf07d00a84f5cf888b5401dbc9857eb74dff5ee4e85db0abdfd831f830121fd057a71b1525

  • SSDEEP

    196608:uZdITUIpv1vTTeABMNI6a/wXCr6FdLTdVoElHZRkhL93R4YVJQ9WyPS7Jyt+n+:uZdI7pvtTaNNS4XCr2d4ElHZRkhLH4Yw

Malware Config

Targets

    • Target

      yssaas-release_110.apk

    • Size

      10.1MB

    • MD5

      6ab9f98c7357022214513c80f683bf06

    • SHA1

      2e68045b774ad7485d95d529ae7d152fc8ccb2f6

    • SHA256

      ac9c860be3d64ddef814883ea72c5d7d8b5062251725d2f3ceb231d05c821ed4

    • SHA512

      3c4d007241741fa579d366de81b5eb46c7e4f36a4cf47ffb6399babf07d00a84f5cf888b5401dbc9857eb74dff5ee4e85db0abdfd831f830121fd057a71b1525

    • SSDEEP

      196608:uZdITUIpv1vTTeABMNI6a/wXCr6FdLTdVoElHZRkhL93R4YVJQ9WyPS7Jyt+n+:uZdI7pvtTaNNS4XCr2d4ElHZRkhLH4Yw

    • Requests cell location

      Uses Android APIs to to get current cell information.

    • Requests cell location

      Uses Android APIs to to get current cell location.

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Queries information about the current nearby Wi-Fi networks

      Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

    • Registers a broadcast receiver at runtime (usually for listening for system events)

    • Checks if the internet connection is available

    • Queries the unique device ID (IMEI, MEID, IMSI)

    • Reads information about phone network operator.

    • Listens for changes in the sensor environment (might be used to detect emulation)

MITRE ATT&CK Matrix

Tasks