b544d003ee643e85549c436729b963da218e5805991b1a9bf18df791477893f2

General

Target
Фото (5шт)_new.apk
Size 14.4MB
Sample260626-3pt78aft6v
SHA256 b544d003ee643e85549c436729b963da218e5805991b1a9bf18df791477893f2
MD5 7c9ef043fa397245b7570f5a1cf52c4c
SHA1 fa0e66d45b36ae9bf5753448c3267aefd1d5e7e4
SHA512 bcb4116e2480006a4759539d75cd53737622754974976ff4e3978139a7a735d1035ea64300466c9368ea1ea6ba81b2d605dbca651858adc47093cc26349726dc
SSDEEP 196608:jimC/jmHH2IpOyys8FaaMn0zreOAstbU/tOMRY9b53d9l/fIG0ehQy4Z2kQb:2mwm2e860zyOACUlHQ5ZfI9eQ2k2
TLSH
T148E62387F798A52FC87710B2457E227215874C168A838B876D49321C6DBB6D43F6EFC8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  Фото (5шт)_new.apk
- Size 14.4MB
- SHA256 b544d003ee643e85549c436729b963da218e5805991b1a9bf18df791477893f2
- MD5 7c9ef043fa397245b7570f5a1cf52c4c
- SHA1 fa0e66d45b36ae9bf5753448c3267aefd1d5e7e4
- SHA512 bcb4116e2480006a4759539d75cd53737622754974976ff4e3978139a7a735d1035ea64300466c9368ea1ea6ba81b2d605dbca651858adc47093cc26349726dc
- SSDEEP 196608:jimC/jmHH2IpOyys8FaaMn0zreOAstbU/tOMRY9b53d9l/fIG0ehQy4Z2kQb:2mwm2e860zyOACUlHQ5ZfI9eQ2k2
- TLSH
  T148E62387F798A52FC87710B2457E227215874C168A838B876D49321C6DBB6D43F6EFC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

defense_evasion discovery evasion persistence stealth trojan
- Checks if the Android device is rooted.
  defense_evasion
- Removes its main activity from the application launcher
  stealth trojan evasion
- Acquires the wake lock
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
- Makes use of the framework's foreground persistence service
  Application may abuse the framework's foreground service to continue running in the foreground.
  defense_evasion persistence
- Queries information about the current Wi-Fi connection
  Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
  discovery
- Queries the mobile country code (MCC)
  discovery
behavioral1
- Target
  base.apk
- Size 7.6MB
- SHA256 3189fedbe043869dcf2d91888147d541f53ba38a69ecc5701e614439607d5eee
- MD5 eb1e389086a83192eb7889bf632e55d7
- SHA1 ffaccf5594a1f379acdd613c5b92a5f96896ebfc
- SHA512 e89cad11041c9b08e02b0bc03b9960208a0d5084daa825e74a1c5fc03afa581764732b4ac68b4f6aa4307c1071649f9833aff17112be1b460b1e26f5b2070966
- SSDEEP 196608:AAstbU/uEMOMRY9b53d9l/fIG0ehQy4Z2k9:AACUVMHQ5ZfI9eQ2k9
- TLSH
  T1EE860187F798A52FC87750B249BE523211474C168A839B83AD58321C6DBB6D43F5EFC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

defense_evasion discovery persistence
- Checks if the Android device is rooted.
  defense_evasion
- Acquires the wake lock
- Makes use of the framework's foreground persistence service
  Application may abuse the framework's foreground service to continue running in the foreground.
  defense_evasion persistence
- Queries information about the current Wi-Fi connection
  Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
  discovery
behavioral2