6c781e9c9677b541b8b73a3dee18674a7038bcb2441929012cd531763b35e488

General

Target
ola_partner.apk
Size 89.8MB
Sample260702-p9wpwsey2v
SHA256 6c781e9c9677b541b8b73a3dee18674a7038bcb2441929012cd531763b35e488
MD5 a9409768341e09101f58b25ede431301
SHA1 9e916d8f4b316161ede0c191ed000c81a7ccf1bc
SHA512 bc775a92581a4894e6db1c9d05da03c388282d0443ff6ab74a718fce8793c56098b00f1ef3f5c54478ce0d9d39131e5acbc1dcb9a1e71a62643148527094b3dc
SSDEEP 1572864:5iUIUO1KZt5ePxyktQLvrfWRxqk5xAHs7wkyMSU:IUIUO1SvDWRxq3kZ
TLSH
T10628BF05E60EED32C9DEF2BC0C5A0B52BE323C056A93C7911506F768FDB36D81A65B91
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  ola_partner.apk
- Size 89.8MB
- SHA256 6c781e9c9677b541b8b73a3dee18674a7038bcb2441929012cd531763b35e488
- MD5 a9409768341e09101f58b25ede431301
- SHA1 9e916d8f4b316161ede0c191ed000c81a7ccf1bc
- SHA512 bc775a92581a4894e6db1c9d05da03c388282d0443ff6ab74a718fce8793c56098b00f1ef3f5c54478ce0d9d39131e5acbc1dcb9a1e71a62643148527094b3dc
- SSDEEP 1572864:5iUIUO1KZt5ePxyktQLvrfWRxqk5xAHs7wkyMSU:IUIUO1SvDWRxq3kZ
- TLSH
  T10628BF05E60EED32C9DEF2BC0C5A0B52BE323C056A93C7911506F768FDB36D81A65B91
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  io.github.auag0.hidemocklocation.apk
- Size 11KB
- SHA256 17a489cb2959b281ed2383725db12649a7790c5284f28d7792ad10240ed4919b
- MD5 1b9e4b557c8c03a2543482b329d38b7a
- SHA1 9da4fe6bef13605df49ebc8e63f3703c43610212
- SHA512 c3d547075cbe61e13c30c8601fd6703869edff2511f8756f44ca17f2f2ae501c6591365bb32821a00778ae9d32362b6e5467e4f7ff10b0a3a9806d919c98056f
- SSDEEP 192:JcaFo55JD93kx6wCTziGUlKg0Qw12SUiTtveqRb2va:Jc7J9869iGgL05xUiTtveqkva
- TLSH
  T18B328C34DF7D45AFD85A9BBA412E67BB86738F60C4A6B7629020E7392D072001E11798
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  origin.apk
- Size 86.5MB
- SHA256 8a6cb9195bb20a87cfa4b5e6a55c7f38e2acf73892e979e6c6d2be6de91d321d
- MD5 8c96c56dea0f55ed7e438f23aadb2a9e
- SHA1 3c5b1749d4ff9755b11e0769bd467273d74f51e6
- SHA512 2ad78ba97eeab79acc08dc17d83c60392ff58eb42f5b646fd1b859e386475835e3f5f6df9b7e273e67f64726838b4a91c14b15d7da926d5cad2445211d9670ae
- SSDEEP 1572864:biUIUO1KZt5ePxyktQLvrfWRxqk5xAHs7R:eUIUO1SvDWRxq3E
- TLSH
  T18718BF05E60EED33C9DEF2BC0C5A0B52BE323C056A9387911506F768FDB36D81A65B91
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

collection defense_evasion discovery evasion execution impact persistence
- Checks if the Android device is rooted.
  defense_evasion
- Checks Android system properties for emulator presence.
  defense_evasion
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Queries account information for other applications stored on the device
  Application may abuse the framework's APIs to collect account information stored on the device.
  collection
- Acquires the wake lock
- Queries information about active data network
  discovery
- Reads information about phone network operator.
  discovery
- Checks the presence of a debugger
  defense_evasion
- Listens for changes in the sensor environment (might be used to detect emulation)
  defense_evasion
behavioral3
- Target
  xyz.xfqlittlefan.notdeveloper.apk
- Size 1.6MB
- SHA256 95da817ef00f6a284ab9665701b104d1ce141b45ab63dfe0e7449d69f16d87ba
- MD5 ea4c5f9ba8267d7a18b5ca1870f38ccb
- SHA1 64d67e1572611a6f240410afe7bbe525fa467679
- SHA512 34bf9bc74397358b813cd1a1f7c8f3d0d931bff8bffdce75ad21104098e32a5be70003ebc419f779a18eee77cee180256648b98e0e0210b44ab34900e9c60a2f
- SSDEEP 49152:H+AL+bQVu468HmKFaCuijy72L6thZgp7X:VLiQ+8Hm0B7j7X
- TLSH
  T1C175F182F7E59C2FCD3745360F5683761626AE22CD82D703A1A8376C69373D88E16BD4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4