pegasus | 469b3ac4ca633139f43b33a7d2761e354288b68dfac4165dad16915733da2c8c

Sharing

Copy URL

Twitter E-mail

General

Target

JaffaCakes118_d65343874d6e9de7e40dc495594ed0ef
Size

15.8MB
Sample

250210-c4h6dsynhp
MD5

d65343874d6e9de7e40dc495594ed0ef
SHA1

b2927bb1630cd826a5788dc1ea9b2596dc6fa860
SHA256

469b3ac4ca633139f43b33a7d2761e354288b68dfac4165dad16915733da2c8c
SHA512

e06375259dccbdfc48d29892c8bd21d5c419e8dfff3b53f65a3f87ea96cee25ef20e1a19efd484c4df7913ba1afae88f864627704f1853320f68b0c07dc9c73b
SSDEEP

393216:57VxC17fc0eMP6L0iu0UYnvXhm/UTsl+nV4G:TxC1DcaUu0U4hm/UT8+V4G

Score

10^/10

Malware Config

Targets

- Target
  
  Root·/AdbWinApi.dll
- Size
  
  94KB
- MD5
  
  47a6ee3f186b2c2f5057028906bac0c6
- SHA1
  
  fde9c22a2cfcd5e566cec2e987d942b78a4eeae8
- SHA256
  
  14a51482aa003db79a400f4b15c158397fe6d57ee6606b3d633fa431a7bfdf4b
- SHA512
  
  6a2675de0c445c75f7d5664ebe8f0e2f69c3312c50156161e483927e40235140d5e28e340112ac552d6462366143890a8ce32dbf65bd37e27cb1ea290fe14584
- SSDEEP
  
  1536:npCxybY0FS6MqS6WvgD9xj03TabrFvY5J6sCGt:npo0k6ZWVTaif6sCG
Score

8^/10

discovery
- Downloads MZ/PE file
behavioral1 behavioral2
- Target
  
  Root·/AdbWinUsbApi.dll
- Size
  
  59KB
- MD5
  
  5f23f2f936bdfac90bb0a4970ad365cf
- SHA1
  
  12e14244b1a5d04a261759547c3d930547f52fa3
- SHA256
  
  041c6859bb4fc78d3a903dd901298cd1ecfb75b6be0646b74954cd722280a407
- SHA512
  
  49a7769d5e6cb2fda9249039d90465f7a4e612805bba48b7036456a3bbd230e4d13da72e4ade5155ddc08fe460735ec8d6df3bb11b72ff28e1149221e2fc3048
- SSDEEP
  
  768:HLNk0yiFYWkgALpW+QvSugX0wUepQNXTQXdF+Q+An70edrqqOkIW:+yY8wugEwOVEXdz70e4gI
Score

8^/10

discovery
- Downloads MZ/PE file
behavioral3 behavioral4
- Target
  
  Root·/CallMaster_V4.1.2.26_Android_pf145_bi800_(Build12073017).apk
- Size
  
  5.1MB
- MD5
  
  2d92f4cf0b911f01429d25022e4fb351
- SHA1
  
  1f62e59ded4b7ce875e7bc44bdc6e3f604c4009d
- SHA256
  
  38a935b4e8d2fe286af48c6dd7bf20f1df2c503584f07f23b21037e484799a1c
- SHA512
  
  e8fe7238af4985a80d73da1e20d67c421af987becdf0bee8ece63dd25cd61963b73bf41ec1d9173b27e94f1340ef76704a2dd7562ef6549183ab1dccde7071cc
- SSDEEP
  
  98304:GADZ3lk9Ce7HIXT0/3AvyoncDstctO418arXqZjI4dCAIvFNx12My:GsZ1k0e/AvBcDstcZ1We4dy3OMy
Score

1^/10
behavioral5
- Target
  
  CallMasterNotification.apk
- Size
  
  40KB
- MD5
  
  fe1b07d802266f62ab32e1d1b5aef259
- SHA1
  
  f097059ce924114043db4f51b02d847bb14118e8
- SHA256
  
  895a85d7d6d4f94a7594a4167851ef7c5213e925f6c9d42ecf3f4a7833b94fb5
- SHA512
  
  43fd641c2a8af688aa2c3d2b6e0d944c2fbbba9e704f2988a88b61dee71cc717bb676dd41c4df82cb02765f0b59890b87bb58810501a0666658fbf7eca79b66a
- SSDEEP
  
  768:i0TZruOrXFWLKxe7X+Fu9LgRv6Xf3tpD+X7aFkuzRVV35:OObgLKxe7wuit6X/yLaFR5
Score

1^/10
behavioral6 behavioral7 behavioral8
- Target
  
  Root·/RootExplorer.apk
- Size
  
  266KB
- MD5
  
  bbb4dbe120b2458742662262c46414e5
- SHA1
  
  e32441c58dc8860044589e219722e262b0d7b515
- SHA256
  
  f2b6c42ae1ec9b43196a4177c38f1f983ef83a66e36d85f1a6ff8523c33dc784
- SHA512
  
  3d17f8ecc5c17201de4259a5df8e1ebcfe65054725aec682c1cc7407631874c53002465ea7fa88ed943b23a98b98277a9e817be74451dcc5eebdb1bedf78bc73
- SSDEEP
  
  6144:xPu3N6nxUbPGopBhAeLDT8/FjVqH2t2YNf7i:J06noPrvtLDT8/FjwH2t/W
Score

1^/10
behavioral10 behavioral11 behavioral9
- Target
  
  Root·/Superuser.apk
- Size
  
  488KB
- MD5
  
  2b0841691802d36cb915b5f6f613f8d0
- SHA1
  
  01efd9bd56a329f40547f456e62c540ca10bb679
- SHA256
  
  03a7e6999e5f8759f08cf658caffcb0f747c123c3dd850449572b108a6f984ca
- SHA512
  
  d1bd21528865ac09efe620ea6c4c278a45a16d0e732f8d57462cca85ae37e5963b6ef6645ac6e15638ec4742faf9bf643729881e5baf69164c9fdab3b285fd24
- SSDEEP
  
  12288:PXTg8njYldQ0508rHL/d5/TBxjfwCfLetjfohZcvMsWtww/iSP08e:PskMs/608e
Score

1^/10
behavioral12 behavioral13 behavioral14
- Target
  
  Root·/SuperuserElite.apk
- Size
  
  143KB
- MD5
  
  344ec8c455ac2588b3fb6fe55f193dc1
- SHA1
  
  dc6cc31c8a57763830dff0091b0a55e144b87d1e
- SHA256
  
  a1b7fcb40e285c2b03b4ee0b711786b4051a5bee81671ffb271995e82e154936
- SHA512
  
  925b31fa3c6a4d383b44926f8c85e216ef39377a74241df5c7b9a81d5243b929ccb5bad928c3d931c7038bd8d56ec85defe8ed126e423c240daae5af8eef3038
- SSDEEP
  
  3072:T3BTjnMkTxofh5+ZwyjZwqyTayosQbQq8uWtPTK4kMfaOx:T3XGfh56wAtIQUNuW51kMfrx
Score

1^/10
behavioral15 behavioral16 behavioral17
- Target
  
  Root·/USBFlash.dll
- Size
  
  99KB
- MD5
  
  bdf145830abe393f0b9b96dfaf335315
- SHA1
  
  9aae0645b33c06d5657b56a697c534525dd40019
- SHA256
  
  6f28c17741a5dc0e1cf6af7f00b6daa2bd7e3fc3de776dd53c1ea26691aa75e3
- SHA512
  
  a521d5b2f0b25612cc0f5d984f79dfd6e15f4057e799cc2d3f89e30e45432f73f0b1778f679669bc6959c7b32dd8b89cba03f42f32a158d7a1065e676c0ec279
- SSDEEP
  
  1536:I6Yu3CbGL1QoD/v9d/dD3FYKWAZEtUqkxXnN2TBAsmmXc:PYu3CbGL1rdJF9uAsmm
Score

8^/10

discovery
- Downloads MZ/PE file
behavioral18 behavioral19
- Target
  
  Root·/adb
- Size
  
  334KB
- MD5
  
  a02369cc66fd1ddb2e7766f6faf14c12
- SHA1
  
  8c3236cabea8b21e7d0e84ce98698e04bfd8ed7d
- SHA256
  
  d7d5d247fbf8b13f1252431ece37369a5e7ca27fb2806dc83001cf4dc3cf1e7c
- SHA512
  
  1367d458700df19b16e83e08e61c521212bcddfae1a8604a9f3cfa02828810421faeb4e3d83d97e3812ef068ccfdfba372bbb7578229281c533dcae29e48ac40
- SSDEEP
  
  6144:k/LfrBYG73L94DnC38QqWLTB35d1H6CeEqXAsMmDJNa6uKofOFIpkGqcE:kxYGn+nw8QqWLTB5iXEqHMmDJTuKo2iY
Score

1^/10
behavioral20
- Target
  
  Root·/adb.exe
- Size
  
  401KB
- MD5
  
  0717be6b32a22d03fe020d6632a72254
- SHA1
  
  88455686faee52779e30d8ef17717075bc50e7ae
- SHA256
  
  e2891042c110b2057d77af9383ae379d205abbd92ef5481b1a87047ee95f3bf5
- SHA512
  
  16a6cda40b339aa2e696f4c20266be123e6c071475409cc5ae3bf5d8724bc818fb77d2b98a7945d63fdd9750de681f4c36a31d2d3e37991e48160a298613a91b
- SSDEEP
  
  12288:15aUajz9j0rThRjGesX9a1oAKmTqU/phLdsGsrU:6bIThf4sL
Score

8^/10

discovery
- Downloads MZ/PE file
behavioral21 behavioral22
- Target
  
  Root·/kBatteryDoctor_2.9_2000290_14824_20120914_125957_40000018_40000018.apk
- Size
  
  3.3MB
- MD5
  
  9fc194a858aff88d2561189713870f56
- SHA1
  
  61ca381b1d1d7263b6cb5fadca00b2f37678a976
- SHA256
  
  d0f4c45eb21af24de102472e8706a87a30bafe6ae56f65d2e3873a1e8fe9dca8
- SHA512
  
  7e934f289e8d25037ac21131e78bf4ac40ae9de4ee5dbc044fa9c70fdc957cac46881a1475f56b8da99a67529c0cc795b69ebd1606bc0d3a4058663fee159313
- SSDEEP
  
  49152:5fBXNoN9VRVPf01f+xsyEMA6l06L4PhCPfRysQ7zGjbuCVEZ:zNonVnf01VyrA6lZ450fst7WwZ
Score

1^/10
behavioral23 behavioral24 behavioral25
- Target
  
  Root·/oupeng-1_1785_1785111_15_1.apk
- Size
  
  1.3MB
- MD5
  
  bbe38cfcef0a376b6a0cc0f42e4992e7
- SHA1
  
  f28205d4f9bb6e885ec29e3967544fe2e22c589c
- SHA256
  
  a7fa7a23fe83ae41b57bd81e64d239b1b29f1e784dc884bb8bebfd7b58dbfb8b
- SHA512
  
  cab2de518f1b585d555c1461be4e7f51b63a4d714a9bce44e21ad82ed7a381d6d29ff72693bfb48e032c0cd0a8a05e2089a20a040b1b3d13465dd37e6f9609eb
- SSDEEP
  
  24576:28RnifyOJQWfikgIQh4pLF8anYSuwwB6EeOF8XCy2qsbkbxHivQyO25RAnrQO:pG3JvfiPIlFF8anTu/BheOSTPsvvtIsO
Score

1^/10
behavioral26
- Target
  
  Root·/qixiazi_root.apk
- Size
  
  338KB
- MD5
  
  7ce9b74efca58846a637fae220d98bb7
- SHA1
  
  ade1fa02c079bc0dd2d3b3ebd6b9b224e9364f31
- SHA256
  
  5973d13f677af8ccc98f611a9118dae47f4f04f81128bc1e7c35e0031ae6c704
- SHA512
  
  b387aaac098305f19450b49ea0b4ce1785ab8a14bf8c54d480c7b34d634cdf2eedbd55f7c1b76614b28f4aa1f932c463026af0bea58acc63a117415711c1e1ed
- SSDEEP
  
  6144:8wTb9AGeXYhkiW1PIkgqFwQz3AfkxgLpoWvQ91s7xYXuWbjczMsL2A8TVNOOY:pTbmGtbW1PI/qF3HxgLi2Qk7x6b29L2K
Score

1^/10
behavioral27 behavioral28 behavioral29
- Target
  
  Root·/su
- Size
  
  21KB
- MD5
  
  69b9e0a7bb69d59b286e48e17e90dc38
- SHA1
  
  e8ed61a91eca85afa058abab9d1c6283915d3b74
- SHA256
  
  10addec98f002575324420a4f0cc1511893c70d7f1b5dbe8f77fb1b9bdc72b1b
- SHA512
  
  4660cbdc0a0b6b97bec9f122aafdb5840fb1811afb9e3c64ee7ee770c5f9bc1cedf9763be8a014325ddbee7f13eb9bde2bee902d1a44c9e593f63f4a6aced5e8
- SSDEEP
  
  192:0IIHPrGsZNzPVoP5SB9t5M4uc4yNYJvDwKkfqp7rOqa8hXu6S:0dzLzPVq+9t5M4ucVGbYq7qqbhhS
Score

1^/10
behavioral30
- Target
  
  Root·/tencentmobilemanager3.8.5_android_build0599.apk
- Size
  
  6.0MB
- MD5
  
  1843355ddaf4b862458fa13a8bc4a176
- SHA1
  
  82b94db3987b6186ce26097c0e4194f49bb0ef35
- SHA256
  
  8dee250e1ee08071109fb420c3297230161c9bdfd825c30d343fd28c96f76e1b
- SHA512
  
  0c782d86d6f802dec23a39ce6d2ef79fb08bacbd16cb2fe454d9ce7454ff381be10f1df994097c225239ceffb7a4b23e14cb1f82383df31913d5c1d56d627f05
- SSDEEP
  
  98304:n5cdV1A3Vqz+7xLEqpQSk5rjRwqpzZYVEMfj9G9tuNpDA1fkhx/V7mxg5:5cdVWFqz2IqySk3NpzZt0Q9tuWfkmg5
Score

1^/10
behavioral31
- Target
  
  qqwebdisk8.tsp
- Size
  
  205KB
- MD5
  
  c6045fc1bea9fb91970cc397f8f4f9d7
- SHA1
  
  eeda3a95675f6745b945fd565086649ed45be4ab
- SHA256
  
  5cd29c226a0bb7a2a3e2ce9a5d1b77840d517af55d9240cc24f3b1b43ae6b7df
- SHA512
  
  2d10c429d8295019264be059b698b4b318c1c89fd68e4dddfaaa7f300ff0f41336ad2bb42a77b748ee8f80c83620c55564b1d839ab55ce798ee782cf09140540
- SSDEEP
  
  3072:gaqbyj28JkuM+r9Kjb7v9eAi2tUO8gUIvmhqTSHkjKCGMu1ivJ1GII6:CV4iS927Pi2tUO8s+qTSHiG1FIr
Score

1^/10
behavioral32

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Downloads MZ/PE file

Downloads MZ/PE file

Downloads MZ/PE file

Downloads MZ/PE file

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32