Extracted

• • Target
    35fc8d052210b699657e5e97fb0063adee49505e33eea5806cb7e142257d0784.apk
  • Size 10.9MB
  • SHA256 35fc8d052210b699657e5e97fb0063adee49505e33eea5806cb7e142257d0784
  • MD5 71c6e6a237d34441316096348991dede
  • SHA1 e88e728716166b0978219f17edd7aa568014ef42
  • SHA512 fcc3d2e2073fe844ae34fb082223a3d6b4353b29dccb162e7512e0ca7da87bb3272dbe9e7b6c9138fc8c01211f39e192fa3d3810767dfd2d34d2f00ebdb6d335
  • SSDEEP 196608:uavXX2LthRaFOd7ZGZF/mirbNg4dbMYZZNV53GTgb:JotjaFOd7ZGZFOsbNgejr53GQ
  • TLSH
    T1C5B612D6FBC4492AC4778072C96A52F1165B4D528B839F877904360C38B7AE84F9EBDC
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  6^/10

  • Requests dangerous framework permissions

  behavioral1behavioral2behavioral3
• • Target
    5d3ff202f20af915863eee45916412a271bae1ea3a0e20988309c16723ce4da5.apk
  • Size 11.8MB
  • SHA256 5d3ff202f20af915863eee45916412a271bae1ea3a0e20988309c16723ce4da5
  • MD5 8a847b0f466b3174741aac734989aa73
  • SHA1 03eadb4ab93a1a0232cb40b7d2ef179a1cd0174d
  • SHA512 85f2f3769087d92fcc69f047f2d5b5e7bb31e8342fb301bc5800110341d10904afdb9d225de0c5af13709977a0ec10a5ed41d803f17545645e10e32c3a91defd
  • SSDEEP 196608:0/ruFMnjielhXAzLekMhH6rHVFIA2+7zWc7yi0UWsGZaHlgcm+2YplVl2toTkUmc:0/ruqnjiNPqhiF2+Z2x9taFgspDl2to1
  • TLSH
    T178C62383F708E52FC537C0338EA2463A66474C4586539B176568B32C5EBBAC45F9AFC8
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  6^/10

  discovery

  • Queries information about active data network

    discovery
  behavioral4
• • Target
    6579911139e98308a43532055bf4bd1b989d13163537c8267c303348b4963ba6.apk
  • Size 8.6MB
  • SHA256 6579911139e98308a43532055bf4bd1b989d13163537c8267c303348b4963ba6
  • MD5 cef87f9b2c12c03fc59407fb2ac07bab
  • SHA1 de38d08c37ccdb17f03dd2af6794bdf863a33d1e
  • SHA512 2eee86ba0994477d756fb9628898dbd736c34b9f09a806a252009de36ac28ecd000397329e448c642216ac1d99b9864dcc1020acd7bd545fff8ddb3af1f34e9f
  • SSDEEP 196608:p57hn/DLRYLXjEcvdVQCVQIVQUVQsVQsP:pxhn/DLR6I4diCiIiUisis
  • TLSH
    T123962382FB99DCA7C1A38A358636855966035C1ACB63D2831B51B73C1DB7AC04FD9FC8
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  8^/10

  defense_evasiondiscoverypersistencecollectioncredential_accessimpact

  • Checks if the Android device is rooted.

    defense_evasion

  • Obtains sensitive information copied to the device clipboard

    Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    collectioncredential_accessimpact

  • Contacts third-party web service commonly abused for C2

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  • Makes use of the framework's foreground persistence service

    Application may abuse the framework's foreground service to continue running in the foreground.

    defense_evasionpersistence

  • Queries the mobile country code (MCC)

    discovery

  • Reads information about phone network operator.

    discovery

  • Requests accessing notifications (often used to intercept notifications before users become aware).

    collectioncredential_access
  behavioral5behavioral6behavioral7
• • Target
    b7dfef717c500fe8539630c092ccf0449538547d11cd227b79384bfca9949d8f.apk
  • Size 11.4MB
  • SHA256 b7dfef717c500fe8539630c092ccf0449538547d11cd227b79384bfca9949d8f
  • MD5 0c37d2a22018a800d26191326825d881
  • SHA1 2fdb4d4dc81644f9f436711fb5c5b32b6e4083d4
  • SHA512 4aad28ebb784ed3546f07df0599cd769f4daba8ea7267c6372d7d89ce770fa8ba9946add8a6c9f1872f2020074cd17a7a9f73fa0ce1e94e881bef51cd322c23a
  • SSDEEP 196608:uavXX2LthRaFOd7Zf2GD4GDB5Z1PzIgP75nZZbCptfOLdxFaZp:JotjaFOd7ZuBGDD575nZVafIxFG
  • TLSH
    T1ECC612D6FBD4492AD4778072C96E22F1265B4D528B839F877504360C38B76E80F9ABDC
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  6^/10

  • Requests dangerous framework permissions

  behavioral10behavioral8behavioral9