da027496ba1e962b67d1926c4fe0edf89c7572eda61879787c00789b4381b427

General

Target

angry-birds-2-mod_3.27.2-an1.com.apk
Size

409.8MB
Sample

250221-n76lms1me1
MD5

50dde4bc10de086126cd655d88f62f6f
SHA1

26bf7e255688c80497aa929f2cf4b7dd7212ffb2
SHA256

da027496ba1e962b67d1926c4fe0edf89c7572eda61879787c00789b4381b427
SHA512

8f469dd9fdbd37152700c8bcbe3d7ab3170c9f645f3cb7f0734957e730b2a9e84f04a9cee5f8ded2c4e9598d2b6b7c898701007dc7f36d6be6b1ec1223ca0139
SSDEEP

12582912:I2nu9gISVimCYE1TXmOozzcauZAk/bTsYb:IKu2PCYdSa8Ak/Hb

Score

8^/10

Malware Config

Targets

- Target
  
  angry-birds-2-mod_3.27.2-an1.com.apk
- Size
  
  409.8MB
- MD5
  
  50dde4bc10de086126cd655d88f62f6f
- SHA1
  
  26bf7e255688c80497aa929f2cf4b7dd7212ffb2
- SHA256
  
  da027496ba1e962b67d1926c4fe0edf89c7572eda61879787c00789b4381b427
- SHA512
  
  8f469dd9fdbd37152700c8bcbe3d7ab3170c9f645f3cb7f0734957e730b2a9e84f04a9cee5f8ded2c4e9598d2b6b7c898701007dc7f36d6be6b1ec1223ca0139
- SSDEEP
  
  12582912:I2nu9gISVimCYE1TXmOozzcauZAk/bTsYb:IKu2PCYdSa8Ak/Hb
Score

8^/10

banker collection credential_access defense_evasion discovery evasion execution impact persistence
- Checks if the Android device is rooted.
  defense_evasion
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Obtains sensitive information copied to the device clipboard
  Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
  collection credential_access impact
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
  banker discovery
- Queries information about running processes on the device
  Application may abuse the framework's APIs to collect information about running processes on the device.
  discovery
- Acquires the wake lock
- Queries information about active data network
  discovery
- Queries the mobile country code (MCC)
  discovery
- Reads information about phone network operator.
  discovery
- Checks the presence of a debugger
  defense_evasion
- Listens for changes in the sensor environment (might be used to detect emulation)
  defense_evasion
behavioral1