2877d62c33506507769aa8f2dd5961e0c05b0d2a720f915e46fdb265b72cad0d

General

Target
Фото (5шт).apk
Size 14.3MB
Sample260626-3czbeaf13p
SHA256 2877d62c33506507769aa8f2dd5961e0c05b0d2a720f915e46fdb265b72cad0d
MD5 6c4363d94b1e67e99e84cf07957f98ef
SHA1 576f1a9ba177f25d27a0db3b0606f813344e8f97
SHA512 4ca5d96e28ad8d35a4d2c22d1f74d285fd9ba6f80bbe5984164e1716b0a26826a8ed4cfcfcfbacf248a90cdb35229d6a2a8b36453a8dd81cfdb8c8bbce397773
SSDEEP 196608:jimC/jmHH2IpOyys8FaaMn0zreOAstbU/tOMRY9b53d9l/fIG0ehQy4Z2kv:2mwm2e860zyOACUlHQ5ZfI9eQ2kv
TLSH
T12EE62387F798A52FC87710B2457E223215874C168A838B876D59321C6DBB6D43F6EFC8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  Фото (5шт).apk
- Size 14.3MB
- SHA256 2877d62c33506507769aa8f2dd5961e0c05b0d2a720f915e46fdb265b72cad0d
- MD5 6c4363d94b1e67e99e84cf07957f98ef
- SHA1 576f1a9ba177f25d27a0db3b0606f813344e8f97
- SHA512 4ca5d96e28ad8d35a4d2c22d1f74d285fd9ba6f80bbe5984164e1716b0a26826a8ed4cfcfcfbacf248a90cdb35229d6a2a8b36453a8dd81cfdb8c8bbce397773
- SSDEEP 196608:jimC/jmHH2IpOyys8FaaMn0zreOAstbU/tOMRY9b53d9l/fIG0ehQy4Z2kv:2mwm2e860zyOACUlHQ5ZfI9eQ2kv
- TLSH
  T12EE62387F798A52FC87710B2457E223215874C168A838B876D59321C6DBB6D43F6EFC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

defense_evasion discovery evasion persistence stealth trojan
- Checks if the Android device is rooted.
  defense_evasion
- Removes its main activity from the application launcher
  stealth trojan evasion
- Acquires the wake lock
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
- Makes use of the framework's foreground persistence service
  Application may abuse the framework's foreground service to continue running in the foreground.
  defense_evasion persistence
- Queries information about the current Wi-Fi connection
  Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
  discovery
- Queries the mobile country code (MCC)
  discovery
behavioral1
- Target
  base.apk
- Size 7.6MB
- SHA256 3189fedbe043869dcf2d91888147d541f53ba38a69ecc5701e614439607d5eee
- MD5 eb1e389086a83192eb7889bf632e55d7
- SHA1 ffaccf5594a1f379acdd613c5b92a5f96896ebfc
- SHA512 e89cad11041c9b08e02b0bc03b9960208a0d5084daa825e74a1c5fc03afa581764732b4ac68b4f6aa4307c1071649f9833aff17112be1b460b1e26f5b2070966
- SSDEEP 196608:AAstbU/uEMOMRY9b53d9l/fIG0ehQy4Z2k9:AACUVMHQ5ZfI9eQ2k9
- TLSH
  T1EE860187F798A52FC87750B249BE523211474C168A839B83AD58321C6DBB6D43F5EFC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

defense_evasion discovery persistence
- Checks if the Android device is rooted.
  defense_evasion
- Acquires the wake lock
- Makes use of the framework's foreground persistence service
  Application may abuse the framework's foreground service to continue running in the foreground.
  defense_evasion persistence
- Queries information about the current Wi-Fi connection
  Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
  discovery
behavioral2