redhook | 85fd7f02683a3e426e11d1fc63c7b8595fd48e52a81cdf5fdd3b49f1428cc7ff

General

Target
a_2002824_427380_8.apk
Size 503.8MB
Sample260609-rtqj2sbz4s
SHA256 85fd7f02683a3e426e11d1fc63c7b8595fd48e52a81cdf5fdd3b49f1428cc7ff
MD5 638fe25cc133ad603831047f7ad6a4fe
SHA1 6fa3b2ac14c21e33396e10f99ba065b6d860d02c
SHA512 048098bf926151220f22961d7a799c8288d3542c8e49e6a4161c3f465725e8e4d5cd5e843d79920e907e080a8bbbed651186dde43a87978c55181e296c198fa7
SSDEEP 12582912:S6XFvyJcBUcGBkHEK5pmZ4mfo2LF/ATeHNbE/CYRdfLf:S6XUcGBkHEU6giFoyK/CadD
TLSH
T1404933BA4A4CE79AD5B0D033C7DD5A4CF920C15567C3DDEEA0C3621562B3E50288EBB9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Extracted

Family

redhook

C2

tablet

Targets

- Target
  a_2002824_427380_8.apk
- Size 503.8MB
- SHA256 85fd7f02683a3e426e11d1fc63c7b8595fd48e52a81cdf5fdd3b49f1428cc7ff
- MD5 638fe25cc133ad603831047f7ad6a4fe
- SHA1 6fa3b2ac14c21e33396e10f99ba065b6d860d02c
- SHA512 048098bf926151220f22961d7a799c8288d3542c8e49e6a4161c3f465725e8e4d5cd5e843d79920e907e080a8bbbed651186dde43a87978c55181e296c198fa7
- SSDEEP 12582912:S6XFvyJcBUcGBkHEK5pmZ4mfo2LF/ATeHNbE/CYRdfLf:S6XUcGBkHEU6giFoyK/CadD
- TLSH
  T1404933BA4A4CE79AD5B0D033C7DD5A4CF920C15567C3DDEEA0C3621562B3E50288EBB9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

banker discovery
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
  banker discovery
- Queries information about running processes on the device
  Application may abuse the framework's APIs to collect information about running processes on the device.
  discovery
- Queries information about active data network
  discovery
- Reads information about phone network operator.
  discovery
behavioral1
- Target
  updateApk.apk
- Size 17.5MB
- SHA256 805dfd5f6fff9bedb939018c57862cea14abbf2834dbf5d47a4783f629c27767
- MD5 63cb96b3f0655d97f60721639a99c5bd
- SHA1 56265bb8aa4d1b944eb5337778fb77737922aa38
- SHA512 92f669e8ae0af2efcd4ee3d822112c68a8ef1660694906bfcee4223a9c89d1d61ca7c51a9d530689439d4c17367b6a3bd057aa64e805e540d54803a3b94dc4ae
- SSDEEP 393216:bMsZiAbFU8+Xqt8pCVMg695MipJ+dqXXzB+iZjLsSw2XXxL4Y4yMhq4gt4XAf527:gsNRwXqcgkgq9bsPMXx8YftgiYlB
- TLSH
  T14A073394F33D428EDD60E0729930623BE8E8051887954BEDDE4BB7ED477619F0A44ACE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  updateApkV2.apk
- Size 8.8MB
- SHA256 ca3220da80811bca683065524acd55057a003eec395ad89679da84d52a9e1f6d
- MD5 a95e2802847a540cdedfabbe1db92fa8
- SHA1 242db3918df6f9e4fc99a6ea7b360d448a7eda05
- SHA512 c7fef0661d9ff51b4f57d5f279ad1b6eadd9daa389e82b79640054680b4e1d84effac587fe3d37ecf6931b6d0b61534b86d54706cd1b0f88e998ee8586ce43af
- SSDEEP 196608:rUFhyANzsW+ieBw8FUuH5+XqQTgouy7dCm6Pz5MpUtH5OkJVjOlFbW:rUFhyANzz+iOFU8+XqQTgCpCm6L5MGBn
- TLSH
  T1599633A5B72CD2CBDD92D1394930712AF4E509188662CBDFDE0773CD0B739EA0A4598E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3