pegasus | ade8bef0ac29fa363fc9afd958af0074478aef650adeb0318517b48bd996d5d5 | Triage

Sharing

General

Target

i6Dvnpc68OqGVFdMWyc1rTEeVbKR6J6d.apk
Size

257KB
Sample

240829-h61q4s1hlj
MD5

7c3ad8fec33465fed6563bbfabb5b13d
SHA1

e5920f3723e62e1850157f09baf556006bf80f74
SHA256

ade8bef0ac29fa363fc9afd958af0074478aef650adeb0318517b48bd996d5d5
SHA512

75da7c118879d9430fb13c5a51d76e1278f0c1474d5cc25c4b9684b7d8c0f93b2e44584eee0f8b0d12016bc1efad367b45ff9ca5609853ae345b6d802ff63d10
SSDEEP

6144:OiJF1SCwcTjQGPihLcfUmu9XuS0nbkDIyTkRJ0P1d41RiFV1iFuU:OqF1VHzqLcfIJ4bqIeP9d4jkKFuU

Score

10^/10

pegasus android collection discovery infostealer persistence trojan

Malware Config

Targets

- Target
  
  i6Dvnpc68OqGVFdMWyc1rTEeVbKR6J6d.apk
- Size
  
  257KB
- MD5
  
  7c3ad8fec33465fed6563bbfabb5b13d
- SHA1
  
  e5920f3723e62e1850157f09baf556006bf80f74
- SHA256
  
  ade8bef0ac29fa363fc9afd958af0074478aef650adeb0318517b48bd996d5d5
- SHA512
  
  75da7c118879d9430fb13c5a51d76e1278f0c1474d5cc25c4b9684b7d8c0f93b2e44584eee0f8b0d12016bc1efad367b45ff9ca5609853ae345b6d802ff63d10
- SSDEEP
  
  6144:OiJF1SCwcTjQGPihLcfUmu9XuS0nbkDIyTkRJ0P1d41RiFV1iFuU:OqF1VHzqLcfIJ4bqIeP9d4jkKFuU
Score

10^/10

pegasus collection discovery infostealer persistence trojan
- Pegasus
  Pegasus is a commercial Android spyware first seen in 2016.
  infostealer trojan pegasus
- Reads the contacts stored on the device.
  collection
- Reads the content of the browser bookmarks.
  collection
- Reads the content of the call log.
  collection
- Queries information about active data network
  discovery
behavioral1

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

Broadcast Receivers

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Connections Discovery

Lateral Movement

Collection

Data from Local System

Protected User Data

Call Log

Contact List

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

pegasuscollectiondiscoveryinfostealerpersistencetrojan