pegasus | 316fac5ae2d4e250b1c0f10b4388fa2c6c3407b118e539a7d865613e373628d9

Sharing

Copy URL Twitter E-mail

General

Target
Pegasus.zip
Size 7.7MB
Sample260323-n1cd8agy8s
SHA256 316fac5ae2d4e250b1c0f10b4388fa2c6c3407b118e539a7d865613e373628d9
MD5 4261312a1666ccaeb48d55ddd1d64559
SHA1 620947ef46f8e8f7efbf9442845b81901c8034b6
SHA512 e0677d4202c94df0bf67f24b2f49cfe4a301a2a724282769e22e47c245233670ccf3ce14e5aa2c3535d3dd00b603560e399f521c0ba7232b71a84d27acfc50c8
SSDEEP 196608:NeX/gzDmUkWxyaB/VDM2tR+vI6FXu7VkpU54rbfKEqedf:NC/+oWxf/tRc3peG9Xqedf
TLSH
T186863311B3BB67AAD451303551D3712B7A748C073A13DFE20E9A9C43AD33DAA1A5FB09
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  Pegasus/144778790d4a43a1d93dff6b660a6acb3a6d37a19e6a6f0a6bf1ef47e919648e
- Size 7.0MB
- SHA256 144778790d4a43a1d93dff6b660a6acb3a6d37a19e6a6f0a6bf1ef47e919648e
- MD5 29183814f45616d831fdc139e3113718
- SHA1 aa47b601dd3a01cf0ec5e2e6da5c4f90c49ba71d
- SHA512 c255f6751e97692b4517c9a4d240393098c58e626e09b0d0189b81a8f6cd20967a2f15ce9d793fa8aec76246cafc7d9b2326bf06f6adbd547f458a7d04b17d1d
- SSDEEP 196608:pJVfGouCB8oMxqANNjYYUMLRoCRMggq2k+E9p+o3k:prf7uC/Mxq4YSLRowMPqj+E9Io3k
- TLSH
  T1777612B3F749E8A5D0E3A2339671521660224C708F13EAA33E5EB5341FF7EC45689E85
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  LenovoSafeBox455.apk
- Size 927KB
- SHA256 e0a9bdf5dc4481d913038e6509635b12d12016e820ecc58a5971be3bb72dcb2b
- MD5 02297e27886d758b1f6892b5047ff9ff
- SHA1 bf03f835c42a8734d9d862741a235ea3491036ea
- SHA512 d9784281450f91cc32b4feadc0dbf8d76b10bbcf35e7dcd362bc940103317b4e8fafba9fa9dbe0b954d20478d700b92df4f661f53edc6022d67f3bcd85276c8d
- SSDEEP 24576:wtMiI2b4apsiko9W8C/2htK3JdFgdXlQ53RJ3J:5iD5pUoW8e0tqVgdXGhJ
- TLSH
  T1C1151275FB9AEC26D977C033469242867614CC504782DBA31716B4181DBFE988BCBECC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2 behavioral3 behavioral4
- Target
  LenovoSafeWidget115.apk
- Size 123KB
- SHA256 6972ef902f648ec405adec1a8ac2843048fe269e0570cfa71379545d9b0fbe77
- MD5 12c89f415f86784edddeb18072f5113f
- SHA1 135c18ae3ca1878895391abe5bd69f858b73fb8c
- SHA512 8c4e31290a966db551ae53ca720247779929f2e6ab93166bdd11ba46d6872d328e2670ce2ebd56f95bcbe225f821a4c07856aed9f5ccf677b2876bec1c3cbff0
- SSDEEP 3072:znyleVG+yjnp0qWhjKJE0hil5uBl1n8HFZAhCWij:IeM+y7iXWJEyvIz
- TLSH
  T1BAC3E0C0FB60E436C8739B32D2E59702BE19C8619249B773211DB1944EFBE68778A7D1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery persistence
- Queries the phone number (MSISDN for GSM devices)
  discovery
- Queries information about active data network
  discovery
- Queries information about the current Wi-Fi connection
  Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
  discovery
- Queries the unique device ID (IMEI, MEID, IMSI)
  discovery
behavioral5 behavioral6 behavioral7
- Target
  Pegasus/530b4f4d139f3ef987d661b2a9f74f5f
- Size 27KB
- SHA256 fa538fc20af8aa198db5e932b2afaf9710633a49cf3e19b7465175520e3e8b47
- MD5 530b4f4d139f3ef987d661b2a9f74f5f
- SHA1 cf1267119890c3b663fbffe5fbf4d8116316d88c
- SHA512 bc86a69e2a525bcd951d336b97e5ed99a75223f969b5ef4c77293b9a04f746263eaeb4f164e0c31389801c294776d30bee8df6584ac102196902d09d5f100eb4
- SSDEEP 768:20gSC730q3+QRzjuBR8zlZtkDd1BKgTeawda6I6X6l64vfiobQTbv3yHtAN8a1LY:2Be/c/ShUWaRW7
- TLSH
  T1D6C2544432E8A701F9BD2B758EA9D6D5422A7E90DF51432B3016371D8B726828F73B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8 behavioral9
- Target
  Pegasus/bd8cda80aaee3e4a17e9967a1c062ac5c8e4aefd7eaa3362f54044c2c94db52a
- Size 1.1MB
- SHA256 bd8cda80aaee3e4a17e9967a1c062ac5c8e4aefd7eaa3362f54044c2c94db52a
- MD5 8d4b77fa3546149f25bd17357d41fbf0
- SHA1 7289737c1dc462726abbe89335a7702c130bbdcc
- SHA512 a9a10115072a66d89158a09649ace3702bee021a47195aec0d6046bdf8fae8927b3d36d0a6d7a7302125b5f06d711419390edf2da3c3fbd11a5a3228e6abd9ff
- SSDEEP 24576:RkVMvDz5Q6P8aJnB94XqMOkkXLjD+F5VCq7ncRL4GchuT:qKvDlhP8aj9bMvk7jDJqTmsGch0
- TLSH
  T1FB35330B3523959FF88353B6D50884CB3564A7A70E4F90BB28FDC8BEC6518E26631D4A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral11 behavioral12
- Target
  Pegasus/cc9517aafb58279091ac17533293edc1
- Size 57KB
- SHA256 9fae5d148b89001555132c896879652fe1ca633d35271db34622248e048c78ae
- MD5 cc9517aafb58279091ac17533293edc1
- SHA1 28f570754274db96bffa7ac4a53a5ede3508d82c
- SHA512 2fb55d4ceb8da9a01d5bf0a9725ee601a252b541f29186311bbc3c515b4cfa3e52107f856f381cfb643b1d2398099c6c0747f1b01baf37e68fd273684fc93fe5
- SSDEEP 1536:kdJw+W4W0bQjcK2eZk7A6loQ17y23V9zEj:n/sQQK2mkE6l5I2Fxw
- TLSH
  T1DA43E18187D08726E23F93302AF1655074753C411E9AE72A1181F65B8FABFF89B41B7E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14 behavioral15
- Target
  Pegasus/d257cfde7599f4e20ee08a62053e6b3b936c87d373e6805f0e0c65f1d39ec320
- Size 367KB
- SHA256 d257cfde7599f4e20ee08a62053e6b3b936c87d373e6805f0e0c65f1d39ec320
- MD5 4aa966ff0455560a2918b746ada2ed52
- SHA1 4984af24225d3356689585399ef5e49553e6436c
- SHA512 e67061519218f5edc241c9458addf51b05a1bd0de604c973756c02018dddb4a893fbebf9ab9a0194b9fc737c7d479c5949b7d3cf7fa444a8bca88853c2d5ebae
- SSDEEP 6144:1krLrE0XFUxWeau+qEqoh5pFtdiEnVXZrAhk3X2I9FZIqovhFa5Y5jQ5m3wQ54:1L0XFuNau+qsDkwX7xIqwhXML
- TLSH
  T10284224DCD63F54ED1CEAA32D1A6D17B96210070AB73FCDC110E8C9ABAA2C550B9CED1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Queries the phone number (MSISDN for GSM devices)

Queries information about active data network

Queries information about the current Wi-Fi connection

Queries the unique device ID (IMEI, MEID, IMSI)

MITRE ATT&CK Mobile v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16