7966c8f8323c5f2e4bfb8ee266b6bfc0685a4d6ac2478479a073f0c387de9aa1

General

Target
965e2ddcfca5ae8afecbc8883a2ab29f.bin
Size 9.9MB
Sample240606-dbfegafb2t
SHA256 7966c8f8323c5f2e4bfb8ee266b6bfc0685a4d6ac2478479a073f0c387de9aa1
MD5 965e2ddcfca5ae8afecbc8883a2ab29f
SHA1 0147bf4d6bae974c6cd7424ed4d4f17b179fb2ea
SHA512 25314be76ab1b99e1d36b8dbb87cb8ef4400f0d3c5b6631433213a3daf91b986c41617a8cca3d4b37217410d5013397bd50e013aafe354c33ef0cd1b1575b7d6
SSDEEP 196608:BNY9bPdGy9/P75K7HpRlq8LuT9g6c17c99KMljxgQwMljxgg34yTstIiN:bC5/eJCxT8MXbZb1IEuR
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Malware Config

Targets

- Target
  965e2ddcfca5ae8afecbc8883a2ab29f.bin
- Size 9.9MB
- SHA256 7966c8f8323c5f2e4bfb8ee266b6bfc0685a4d6ac2478479a073f0c387de9aa1
- MD5 965e2ddcfca5ae8afecbc8883a2ab29f
- SHA1 0147bf4d6bae974c6cd7424ed4d4f17b179fb2ea
- SHA512 25314be76ab1b99e1d36b8dbb87cb8ef4400f0d3c5b6631433213a3daf91b986c41617a8cca3d4b37217410d5013397bd50e013aafe354c33ef0cd1b1575b7d6
- SSDEEP 196608:BNY9bPdGy9/P75K7HpRlq8LuT9g6c17c99KMljxgQwMljxgg34yTstIiN:bC5/eJCxT8MXbZb1IEuR
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

discovery impact persistence
- Queries the phone number (MSISDN for GSM devices)
  discovery
- Queries the mobile country code (MCC)
  discovery
- Reads information about phone network operator.
  discovery
behavioral1
- Target
  com.alipay.android.app.apk
- Size 354KB
- SHA256 e86f24838e0aa5527adf3d129652bf70b67990989bf7e8c8d61c3356231ce1ac
- MD5 7b3353b143078dbafd37485f8136728e
- SHA1 f2d312754bb2c4854849381997561d09a90b4fb9
- SHA512 0f326957abeebaed130da1f6ec7a53de5dd9671d6ae7d975f2b6172af4c323df81efd0f6d4b8a1e4197d5dd35d4419c658f1c936a404bbf9d7e73ee71a5e06f8
- SSDEEP 6144:Iv8DL7okgHi/BBs3dWcfihtB7+Y3Ju4g2Tf5C8EcPK+WvyQcy2fny43:Iv67gC/BBsNWfh3VcG5CLE8Rcy2fny43
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

collection discovery evasion
- Requests cell location
  Uses Android APIs to to get current cell location.
  collection discovery evasion
- Queries information about active data network
  discovery
- Queries information about the current Wi-Fi connection
  Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
  discovery
behavioral2