ac66b10b91edd97a66d9961e4fb13d3e01cc4630dbd882caa7e7a5711ca18cc0

General

Target
TikTok18z.apk
Size 16.1MB
Sample260312-rlw2vshw9j
SHA256 ac66b10b91edd97a66d9961e4fb13d3e01cc4630dbd882caa7e7a5711ca18cc0
MD5 e3800eff18cb3bc5994a4294a7bb9e09
SHA1 a56f8d687bf0b6a18bd2617db5c9aaa829598706
SHA512 26bd9af44bdea8fd1d2eb4f470c3b0c8968a55ff29ea2534b22239dd0ac6e51d229ff324c8f4737cf7c2af4ef14d794c13824e2339f513b4c60635635b1e57ec
SSDEEP 393216:tAw0G4zLU9Nw88VabolB4PmWBrFJejCYBD51:tLZm4925BHTkrFvYFn
TLSH
T1FC07E11526704F2BE72D1436B04E0E264197BE051E5362F6D8B7F00BDB3EB6626E3B46
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  TikTok18z.apk
- Size 16.1MB
- SHA256 ac66b10b91edd97a66d9961e4fb13d3e01cc4630dbd882caa7e7a5711ca18cc0
- MD5 e3800eff18cb3bc5994a4294a7bb9e09
- SHA1 a56f8d687bf0b6a18bd2617db5c9aaa829598706
- SHA512 26bd9af44bdea8fd1d2eb4f470c3b0c8968a55ff29ea2534b22239dd0ac6e51d229ff324c8f4737cf7c2af4ef14d794c13824e2339f513b4c60635635b1e57ec
- SSDEEP 393216:tAw0G4zLU9Nw88VabolB4PmWBrFJejCYBD51:tLZm4925BHTkrFvYFn
- TLSH
  T1FC07E11526704F2BE72D1436B04E0E264197BE051E5362F6D8B7F00BDB3EB6626E3B46
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery evasion persistence collection credential_access defense_evasion impact
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Obtains sensitive information copied to the device clipboard
  Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
  collection credential_access impact
- Checks the application is allowed to request package installs through the package installer
  Checks the application is allowed to install additional applications (Might try to install applications from unknown sources).
  defense_evasion
- Queries the mobile country code (MCC)
  discovery
behavioral1 behavioral2 behavioral3
- Target
  wekuzi
- Size 9.8MB
- SHA256 1c20550e272f794978302ce46ff79f6cc392289b5c01862e2648969fddf5bf88
- MD5 9258348335dab56a8dcb0854c046c7e1
- SHA1 878da848e2ac3ed5693521966a4146189cb9c8a2
- SHA512 7ecbd7a9ceb0c05bcf31118377e9d20a32f966e5ccda2628240857126065a51f56a6a180bc64bc1bc45bb25439d73dc18b6ea50b6f902bc980c5674ed5654a3c
- SSDEEP 196608:g65DHSvzv1qn/gerDw6vvn7KE3eh2ikZffGbNwJQVf+h4yhqCwLF92wopy:gcDHGzd2PDwLvh2v2xwJQ5+Lh89os
- TLSH
  T13AA67BEF1681DB28E72D1432804E0E174277BE051BB371995DBBF019DB3DB2E25E2986
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

collection credential_access defense_evasion discovery evasion execution impact persistence
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Makes use of the framework's Accessibility service
  Retrieves information displayed on the phone screen using AccessibilityService.
  collection defense_evasion credential_access
- Obtains sensitive information copied to the device clipboard
  Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
  collection credential_access impact
- Performs UI accessibility actions on behalf of the user
  Application may abuse the accessibility service to prevent their removal.
  evasion
- Queries the mobile country code (MCC)
  discovery
- Requests disabling of battery optimizations (often used to enable hiding in the background).
  defense_evasion
behavioral4 behavioral5 behavioral6