4c88cc29fd64b7302fa3fcec3a9f03a66d5644fab8b3418db2a0b1d7921139ee | Triage

Sharing

General

Target

jdcdevAndroidFinalNetease1104_160853_13274_netease_8_mau_9_20161104_165444.apk
Size

76.6MB
Sample

241011-2anlfsxcnb
MD5

5e1da7c8c773483edc362dc6ab181b28
SHA1

c53cea1a3a48bcb4037ff7a76bd344e7bf265bc4
SHA256

4c88cc29fd64b7302fa3fcec3a9f03a66d5644fab8b3418db2a0b1d7921139ee
SHA512

78c644986dad6639cde8d3838df8d816269a1a238c0cc33938e9385f75c6df485051be2deae98e3fc1384be60c392ad4c60862fb3eca4720a59d8c64b645075e
SSDEEP

1572864:fhfTnZJyfuVxwYm4pda+dpQhWW+1eGS00P++jXTxiasQyBQSI:VVEw9a+dpQhWW+a/fjXTxAQSI

Score

8^/10

android collection discovery evasion impact persistence

Malware Config

Targets

- Target
  
  jdcdevAndroidFinalNetease1104_160853_13274_netease_8_mau_9_20161104_165444.apk
- Size
  
  76.6MB
- MD5
  
  5e1da7c8c773483edc362dc6ab181b28
- SHA1
  
  c53cea1a3a48bcb4037ff7a76bd344e7bf265bc4
- SHA256
  
  4c88cc29fd64b7302fa3fcec3a9f03a66d5644fab8b3418db2a0b1d7921139ee
- SHA512
  
  78c644986dad6639cde8d3838df8d816269a1a238c0cc33938e9385f75c6df485051be2deae98e3fc1384be60c392ad4c60862fb3eca4720a59d8c64b645075e
- SSDEEP
  
  1572864:fhfTnZJyfuVxwYm4pda+dpQhWW+1eGS00P++jXTxiasQyBQSI:VVEw9a+dpQhWW+a/fjXTxAQSI
Score

8^/10

collection discovery evasion impact persistence
- Checks if the Android device is rooted.
  evasion
- Reads the content of photos stored on the user's device.
  collection
- Queries information about active data network
  discovery
- Queries information about the current Wi-Fi connection
  Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
  discovery
behavioral1
- Target
  
  WeixinPayPlugin_1.0.apk
- Size
  
  70KB
- MD5
  
  759aebf9e02c24ae8338257e758975fc
- SHA1
  
  b039b59a65f07e7da8126e36f877f6d5a0a929ec
- SHA256
  
  9249294c9a0f9bf2376f06ca4d14db4a9af3a202e0c1d363bd3c2702306c7592
- SHA512
  
  7e9fcb15c3c3456c456d240470da6a2fefcf1cd2c6d9310a73507a066ebfd04623ec2dcdaabba011dec142376b608d29fa2fde33b243ede3c5072d2358a91948
- SSDEEP
  
  1536:VSwSrSVSUGFVPhxTkRMkeV1MikfC2C021Qyp48/VP0A3F:Vx6ySUCVwCkEotl21lp6A3F
Score

1^/10
behavioral2

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

Broadcast Receivers

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Discovery

System Information Discovery

System Network Connections Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

Tasks

static1

behavioral1

collectiondiscoveryevasionimpactpersistence

behavioral2