pegasus | 469b3ac4ca633139f43b33a7d2761e354288b68dfac4165dad16915733da2c8c

Sharing

Copy URL Twitter E-mail

General

Target
JaffaCakes118_d65343874d6e9de7e40dc495594ed0ef
Size 15.8MB
Sample250210-c4h6dsynhp
SHA256 469b3ac4ca633139f43b33a7d2761e354288b68dfac4165dad16915733da2c8c
MD5 d65343874d6e9de7e40dc495594ed0ef
SHA1 b2927bb1630cd826a5788dc1ea9b2596dc6fa860
SHA512 e06375259dccbdfc48d29892c8bd21d5c419e8dfff3b53f65a3f87ea96cee25ef20e1a19efd484c4df7913ba1afae88f864627704f1853320f68b0c07dc9c73b
SSDEEP 393216:57VxC17fc0eMP6L0iu0UYnvXhm/UTsl+nV4G:TxC1DcaUu0U4hm/UT8+V4G
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

Malware Config

Targets

- Target
  Root·/AdbWinApi.dll
- Size 94KB
- SHA256 14a51482aa003db79a400f4b15c158397fe6d57ee6606b3d633fa431a7bfdf4b
- MD5 47a6ee3f186b2c2f5057028906bac0c6
- SHA1 fde9c22a2cfcd5e566cec2e987d942b78a4eeae8
- SHA512 6a2675de0c445c75f7d5664ebe8f0e2f69c3312c50156161e483927e40235140d5e28e340112ac552d6462366143890a8ce32dbf65bd37e27cb1ea290fe14584
- SSDEEP 1536:npCxybY0FS6MqS6WvgD9xj03TabrFvY5J6sCGt:npo0k6ZWVTaif6sCG
- MD5 SHA1 SHA512 SSDEEP
Score

8^/10

discovery
- Downloads MZ/PE file
behavioral1 behavioral2
- Target
  Root·/AdbWinUsbApi.dll
- Size 59KB
- SHA256 041c6859bb4fc78d3a903dd901298cd1ecfb75b6be0646b74954cd722280a407
- MD5 5f23f2f936bdfac90bb0a4970ad365cf
- SHA1 12e14244b1a5d04a261759547c3d930547f52fa3
- SHA512 49a7769d5e6cb2fda9249039d90465f7a4e612805bba48b7036456a3bbd230e4d13da72e4ade5155ddc08fe460735ec8d6df3bb11b72ff28e1149221e2fc3048
- SSDEEP 768:HLNk0yiFYWkgALpW+QvSugX0wUepQNXTQXdF+Q+An70edrqqOkIW:+yY8wugEwOVEXdz70e4gI
- MD5 SHA1 SHA512 SSDEEP
Score

8^/10

discovery
- Downloads MZ/PE file
behavioral3 behavioral4
- Target
  Root·/CallMaster_V4.1.2.26_Android_pf145_bi800_(Build12073017).apk
- Size 5.1MB
- SHA256 38a935b4e8d2fe286af48c6dd7bf20f1df2c503584f07f23b21037e484799a1c
- MD5 2d92f4cf0b911f01429d25022e4fb351
- SHA1 1f62e59ded4b7ce875e7bc44bdc6e3f604c4009d
- SHA512 e8fe7238af4985a80d73da1e20d67c421af987becdf0bee8ece63dd25cd61963b73bf41ec1d9173b27e94f1340ef76704a2dd7562ef6549183ab1dccde7071cc
- SSDEEP 98304:GADZ3lk9Ce7HIXT0/3AvyoncDstctO418arXqZjI4dCAIvFNx12My:GsZ1k0e/AvBcDstcZ1We4dy3OMy
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral5
- Target
  CallMasterNotification.apk
- Size 40KB
- SHA256 895a85d7d6d4f94a7594a4167851ef7c5213e925f6c9d42ecf3f4a7833b94fb5
- MD5 fe1b07d802266f62ab32e1d1b5aef259
- SHA1 f097059ce924114043db4f51b02d847bb14118e8
- SHA512 43fd641c2a8af688aa2c3d2b6e0d944c2fbbba9e704f2988a88b61dee71cc717bb676dd41c4df82cb02765f0b59890b87bb58810501a0666658fbf7eca79b66a
- SSDEEP 768:i0TZruOrXFWLKxe7X+Fu9LgRv6Xf3tpD+X7aFkuzRVV35:OObgLKxe7wuit6X/yLaFR5
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral6 behavioral7 behavioral8
- Target
  Root·/RootExplorer.apk
- Size 266KB
- SHA256 f2b6c42ae1ec9b43196a4177c38f1f983ef83a66e36d85f1a6ff8523c33dc784
- MD5 bbb4dbe120b2458742662262c46414e5
- SHA1 e32441c58dc8860044589e219722e262b0d7b515
- SHA512 3d17f8ecc5c17201de4259a5df8e1ebcfe65054725aec682c1cc7407631874c53002465ea7fa88ed943b23a98b98277a9e817be74451dcc5eebdb1bedf78bc73
- SSDEEP 6144:xPu3N6nxUbPGopBhAeLDT8/FjVqH2t2YNf7i:J06noPrvtLDT8/FjwH2t/W
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral10 behavioral11 behavioral9
- Target
  Root·/Superuser.apk
- Size 488KB
- SHA256 03a7e6999e5f8759f08cf658caffcb0f747c123c3dd850449572b108a6f984ca
- MD5 2b0841691802d36cb915b5f6f613f8d0
- SHA1 01efd9bd56a329f40547f456e62c540ca10bb679
- SHA512 d1bd21528865ac09efe620ea6c4c278a45a16d0e732f8d57462cca85ae37e5963b6ef6645ac6e15638ec4742faf9bf643729881e5baf69164c9fdab3b285fd24
- SSDEEP 12288:PXTg8njYldQ0508rHL/d5/TBxjfwCfLetjfohZcvMsWtww/iSP08e:PskMs/608e
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral12 behavioral13 behavioral14
- Target
  Root·/SuperuserElite.apk
- Size 143KB
- SHA256 a1b7fcb40e285c2b03b4ee0b711786b4051a5bee81671ffb271995e82e154936
- MD5 344ec8c455ac2588b3fb6fe55f193dc1
- SHA1 dc6cc31c8a57763830dff0091b0a55e144b87d1e
- SHA512 925b31fa3c6a4d383b44926f8c85e216ef39377a74241df5c7b9a81d5243b929ccb5bad928c3d931c7038bd8d56ec85defe8ed126e423c240daae5af8eef3038
- SSDEEP 3072:T3BTjnMkTxofh5+ZwyjZwqyTayosQbQq8uWtPTK4kMfaOx:T3XGfh56wAtIQUNuW51kMfrx
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral15 behavioral16 behavioral17
- Target
  Root·/USBFlash.dll
- Size 99KB
- SHA256 6f28c17741a5dc0e1cf6af7f00b6daa2bd7e3fc3de776dd53c1ea26691aa75e3
- MD5 bdf145830abe393f0b9b96dfaf335315
- SHA1 9aae0645b33c06d5657b56a697c534525dd40019
- SHA512 a521d5b2f0b25612cc0f5d984f79dfd6e15f4057e799cc2d3f89e30e45432f73f0b1778f679669bc6959c7b32dd8b89cba03f42f32a158d7a1065e676c0ec279
- SSDEEP 1536:I6Yu3CbGL1QoD/v9d/dD3FYKWAZEtUqkxXnN2TBAsmmXc:PYu3CbGL1rdJF9uAsmm
- MD5 SHA1 SHA512 SSDEEP
Score

8^/10

discovery
- Downloads MZ/PE file
behavioral18 behavioral19
- Target
  Root·/adb
- Size 334KB
- SHA256 d7d5d247fbf8b13f1252431ece37369a5e7ca27fb2806dc83001cf4dc3cf1e7c
- MD5 a02369cc66fd1ddb2e7766f6faf14c12
- SHA1 8c3236cabea8b21e7d0e84ce98698e04bfd8ed7d
- SHA512 1367d458700df19b16e83e08e61c521212bcddfae1a8604a9f3cfa02828810421faeb4e3d83d97e3812ef068ccfdfba372bbb7578229281c533dcae29e48ac40
- SSDEEP 6144:k/LfrBYG73L94DnC38QqWLTB35d1H6CeEqXAsMmDJNa6uKofOFIpkGqcE:kxYGn+nw8QqWLTB5iXEqHMmDJTuKo2iY
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral20
- Target
  Root·/adb.exe
- Size 401KB
- SHA256 e2891042c110b2057d77af9383ae379d205abbd92ef5481b1a87047ee95f3bf5
- MD5 0717be6b32a22d03fe020d6632a72254
- SHA1 88455686faee52779e30d8ef17717075bc50e7ae
- SHA512 16a6cda40b339aa2e696f4c20266be123e6c071475409cc5ae3bf5d8724bc818fb77d2b98a7945d63fdd9750de681f4c36a31d2d3e37991e48160a298613a91b
- SSDEEP 12288:15aUajz9j0rThRjGesX9a1oAKmTqU/phLdsGsrU:6bIThf4sL
- MD5 SHA1 SHA512 SSDEEP
Score

8^/10

discovery
- Downloads MZ/PE file
behavioral21 behavioral22
- Target
  Root·/kBatteryDoctor_2.9_2000290_14824_20120914_125957_40000018_40000018.apk
- Size 3.3MB
- SHA256 d0f4c45eb21af24de102472e8706a87a30bafe6ae56f65d2e3873a1e8fe9dca8
- MD5 9fc194a858aff88d2561189713870f56
- SHA1 61ca381b1d1d7263b6cb5fadca00b2f37678a976
- SHA512 7e934f289e8d25037ac21131e78bf4ac40ae9de4ee5dbc044fa9c70fdc957cac46881a1475f56b8da99a67529c0cc795b69ebd1606bc0d3a4058663fee159313
- SSDEEP 49152:5fBXNoN9VRVPf01f+xsyEMA6l06L4PhCPfRysQ7zGjbuCVEZ:zNonVnf01VyrA6lZ450fst7WwZ
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral23 behavioral24 behavioral25
- Target
  Root·/oupeng-1_1785_1785111_15_1.apk
- Size 1.3MB
- SHA256 a7fa7a23fe83ae41b57bd81e64d239b1b29f1e784dc884bb8bebfd7b58dbfb8b
- MD5 bbe38cfcef0a376b6a0cc0f42e4992e7
- SHA1 f28205d4f9bb6e885ec29e3967544fe2e22c589c
- SHA512 cab2de518f1b585d555c1461be4e7f51b63a4d714a9bce44e21ad82ed7a381d6d29ff72693bfb48e032c0cd0a8a05e2089a20a040b1b3d13465dd37e6f9609eb
- SSDEEP 24576:28RnifyOJQWfikgIQh4pLF8anYSuwwB6EeOF8XCy2qsbkbxHivQyO25RAnrQO:pG3JvfiPIlFF8anTu/BheOSTPsvvtIsO
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral26
- Target
  Root·/qixiazi_root.apk
- Size 338KB
- SHA256 5973d13f677af8ccc98f611a9118dae47f4f04f81128bc1e7c35e0031ae6c704
- MD5 7ce9b74efca58846a637fae220d98bb7
- SHA1 ade1fa02c079bc0dd2d3b3ebd6b9b224e9364f31
- SHA512 b387aaac098305f19450b49ea0b4ce1785ab8a14bf8c54d480c7b34d634cdf2eedbd55f7c1b76614b28f4aa1f932c463026af0bea58acc63a117415711c1e1ed
- SSDEEP 6144:8wTb9AGeXYhkiW1PIkgqFwQz3AfkxgLpoWvQ91s7xYXuWbjczMsL2A8TVNOOY:pTbmGtbW1PI/qF3HxgLi2Qk7x6b29L2K
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral27 behavioral28 behavioral29
- Target
  Root·/su
- Size 21KB
- SHA256 10addec98f002575324420a4f0cc1511893c70d7f1b5dbe8f77fb1b9bdc72b1b
- MD5 69b9e0a7bb69d59b286e48e17e90dc38
- SHA1 e8ed61a91eca85afa058abab9d1c6283915d3b74
- SHA512 4660cbdc0a0b6b97bec9f122aafdb5840fb1811afb9e3c64ee7ee770c5f9bc1cedf9763be8a014325ddbee7f13eb9bde2bee902d1a44c9e593f63f4a6aced5e8
- SSDEEP 192:0IIHPrGsZNzPVoP5SB9t5M4uc4yNYJvDwKkfqp7rOqa8hXu6S:0dzLzPVq+9t5M4ucVGbYq7qqbhhS
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral30
- Target
  Root·/tencentmobilemanager3.8.5_android_build0599.apk
- Size 6.0MB
- SHA256 8dee250e1ee08071109fb420c3297230161c9bdfd825c30d343fd28c96f76e1b
- MD5 1843355ddaf4b862458fa13a8bc4a176
- SHA1 82b94db3987b6186ce26097c0e4194f49bb0ef35
- SHA512 0c782d86d6f802dec23a39ce6d2ef79fb08bacbd16cb2fe454d9ce7454ff381be10f1df994097c225239ceffb7a4b23e14cb1f82383df31913d5c1d56d627f05
- SSDEEP 98304:n5cdV1A3Vqz+7xLEqpQSk5rjRwqpzZYVEMfj9G9tuNpDA1fkhx/V7mxg5:5cdVWFqz2IqySk3NpzZt0Q9tuWfkmg5
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral31
- Target
  qqwebdisk8.tsp
- Size 205KB
- SHA256 5cd29c226a0bb7a2a3e2ce9a5d1b77840d517af55d9240cc24f3b1b43ae6b7df
- MD5 c6045fc1bea9fb91970cc397f8f4f9d7
- SHA1 eeda3a95675f6745b945fd565086649ed45be4ab
- SHA512 2d10c429d8295019264be059b698b4b318c1c89fd68e4dddfaaa7f300ff0f41336ad2bb42a77b748ee8f80c83620c55564b1d839ab55ce798ee782cf09140540
- SSDEEP 3072:gaqbyj28JkuM+r9Kjb7v9eAi2tUO8gUIvmhqTSHkjKCGMu1ivJ1GII6:CV4iS927Pi2tUO8s+qTSHiG1FIr
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral32

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Downloads MZ/PE file

Downloads MZ/PE file

Downloads MZ/PE file

Downloads MZ/PE file

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32