General
- Target FREE+VBUCKS+100%+REAL_1.0_APKPure.xapk
- Size 5.0MB
- Sample260704-ss6ejsg161
- SHA256 6c8de86c2f5b99c4f3dfa915e6a18ee0cdbf14dac08ba883890a08d971749ce5
Malware Config
Targets
-
- Target com.dh.vbucksfreewinU.apk
- Size 4.3MB
- SHA256 9e9d2a2b2360de73e9410850466deb898484f54b728d0ad1a1460fa99b716a41
Score8/10-
Checks if the Android device is rooted.
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Acquires the wake lock
-
Queries information about active data network
-
Queries the mobile country code (MCC)
-
Reads information about phone network operator.
-
- Target config.ar.apk
- Size 24KB
- SHA256 9eb66ffe506e93ef4c3c4069b6e8c8bd6676a3959c18fd90f6d37bf313fff107
Score1/10 -
- Target config.de.apk
- Size 24KB
- SHA256 79081548cd55119e46614aaaa899b96be1008fa2130cc0d2971111c32d3bab7f
Score1/10 -
- Target config.en.apk
- Size 36KB
- SHA256 17bdbe367d3221acd8006514ca5328550c332e6f12024b05d82bda8d73aedafd
Score1/10 -
- Target config.es.apk
- Size 24KB
- SHA256 1b13fd5c02b0027b9dc2e68263700d2efe8ab8f0545a288eb06d0dd8c7fec751
Score1/10 -
- Target config.fr.apk
- Size 24KB
- SHA256 53791a26cf2505615d57d923869958235368c3222d344100df33e36695b67653
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target config.hi.apk
- Size 24KB
- SHA256 f5d197768bbb22b8f9d9735eae25d563072f3efbfcc28721925488ce153cb0f7
Score1/10 -
- Target config.in.apk
- Size 24KB
- SHA256 ee5ccf8f9215dcacf68f54b676e961c2111e213d65d8b9b21628a0f0a3338374
Score1/10 -
- Target config.it.apk
- Size 24KB
- SHA256 61553d7fba6cc4e05efb29bf52c01f8523f93d1e2d429642a1cfb76888b0b222
Score1/10 -
- Target config.ja.apk
- Size 24KB
- SHA256 9218790ecff181df6f84c798bdfafe8de397aa6248536516e266770844b275df
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target config.ko.apk
- Size 24KB
- SHA256 45478bad031f4deb8699410b8730ed8d01a3931a2148440f28cedab127376807
Score1/10 -
- Target config.my.apk
- Size 24KB
- SHA256 e350e9826db225acb96e6317fbb1b6b34e328254524c74215bf747c13a7ac8cb
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target config.pt.apk
- Size 28KB
- SHA256 3917d4e9bcdc8eae008e452a8b28b3da436f0edb9c199f543f5dc588dacc15b7
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target config.ru.apk
- Size 24KB
- SHA256 127aef914ddc0e6d7622dfc2c5d3735037125232529ad69043eb3c6c097597c7
Score1/10 -
- Target config.th.apk
- Size 24KB
- SHA256 4af6cea2858170b19577a3c534b568ec0a87ed30194b6f010ddb6b54d2a40be2
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target config.tr.apk
- Size 24KB
- SHA256 d0e5242e3098d0f901bd8307def55d82ff3424b8c03ebc05297385ed5eb1e03b
Score1/10