55ceb9af64d983c885c699a3ec54162a9b6348c2e2bbd623234e801296abf8bc

General

Target
HappyMod-3-1-0.apk
Size 17.3MB
Sample240607-xc951sca5s
SHA256 55ceb9af64d983c885c699a3ec54162a9b6348c2e2bbd623234e801296abf8bc
MD5 d5c5a6d209b84d340869af5c5cef2ad9
SHA1 0e4730a0cfb5c04d525acc332d0bf13b60ab2d5f
SHA512 1e82554c761534c0a12ecd4ecf3144f8af1a52135059d06ecb93e0e8c455c46d586866cc59f98659413acb4bb7b5bb8c6f958e94e85b76e37368768318ad5ee8
SSDEEP 393216:6p0TcbMT8xhcEb7Nv+tiqToCtPaVX07lVlwWpmgW2:6acQTOcE5+Q8tiX2VyPgf
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

Malware Config

Targets

- Target
  HappyMod-3-1-0.apk
- Size 17.3MB
- SHA256 55ceb9af64d983c885c699a3ec54162a9b6348c2e2bbd623234e801296abf8bc
- MD5 d5c5a6d209b84d340869af5c5cef2ad9
- SHA1 0e4730a0cfb5c04d525acc332d0bf13b60ab2d5f
- SHA512 1e82554c761534c0a12ecd4ecf3144f8af1a52135059d06ecb93e0e8c455c46d586866cc59f98659413acb4bb7b5bb8c6f958e94e85b76e37368768318ad5ee8
- SSDEEP 393216:6p0TcbMT8xhcEb7Nv+tiqToCtPaVX07lVlwWpmgW2:6acQTOcE5+Q8tiX2VyPgf
- MD5 SHA1 SHA512 SSDEEP
Score

8^/10

evasion banker collection credential_access discovery execution impact persistence
- Checks if the Android device is rooted.
  evasion
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Obtains sensitive information copied to the device clipboard
  Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
  collection credential_access impact
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
  banker discovery
- Queries information about running processes on the device
  Application may abuse the framework's APIs to collect information about running processes on the device.
  discovery
- Makes use of the framework's foreground persistence service
  Application may abuse the framework's foreground service to continue running in the foreground.
  evasion persistence
- Queries information about active data network
  discovery
- Queries the mobile country code (MCC)
  discovery
- Checks the presence of a debugger
  evasion
- Listens for changes in the sensor environment (might be used to detect emulation)
  evasion
behavioral1 behavioral2