439362d27e8972e1bca42febf49232c212e88d728678f02a335ff1cfc6a7df58

General

Target
TikTok18 (1).apk
Size 35.5MB
Sample260708-m9zqfaew81
SHA256 439362d27e8972e1bca42febf49232c212e88d728678f02a335ff1cfc6a7df58
MD5 a22b1083c9bd3cc8f0f2050b027f0a2a
SHA1 0796cc35611180e44ebc0f2aab15ff08eeb65a59
SHA512 f610d2a75f5212e4765178c22bcca6d1bf069eb26623d1b33581a04a08a8b9510cebee90eb1cb6fccd4adea0388e3ed5baa8982df3b65143d7744574beb9fa85
SSDEEP 786432:5quSK5dvd7/pKSCqGL3BjmKO5500ACJ7OAZ:5q32dvlBKDZL3BCKO52Z+7OAZ
TLSH
T19887230AEFC87E2BC5F74236193E59154C430C854787DA42AD9A791C28B72E1FB1EBC9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  TikTok18 (1).apk
- Size 35.5MB
- SHA256 439362d27e8972e1bca42febf49232c212e88d728678f02a335ff1cfc6a7df58
- MD5 a22b1083c9bd3cc8f0f2050b027f0a2a
- SHA1 0796cc35611180e44ebc0f2aab15ff08eeb65a59
- SHA512 f610d2a75f5212e4765178c22bcca6d1bf069eb26623d1b33581a04a08a8b9510cebee90eb1cb6fccd4adea0388e3ed5baa8982df3b65143d7744574beb9fa85
- SSDEEP 786432:5quSK5dvd7/pKSCqGL3BjmKO5500ACJ7OAZ:5q32dvlBKDZL3BCKO52Z+7OAZ
- TLSH
  T19887230AEFC87E2BC5F74236193E59154C430C854787DA42AD9A791C28B72E1FB1EBC9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

collection credential_access evasion impact
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Obtains sensitive information copied to the device clipboard
  Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
  collection credential_access impact
behavioral1
- Target
  payload.base
- Size 15.1MB
- SHA256 1b7a76bbfd91a15ccd9776fb4fbe0900f7584163e04992b271bff8bcc1813d03
- MD5 547e7433b6af856fa32654f9a2650d2f
- SHA1 d0e5d4e6501ef31aac6e8ad652bb5f78ee9de0d9
- SHA512 824c3849c719e7e767a4181af6e7ae53f68243f4289a9ee5fc987d4cecea6e6633528d66458ed10f0a8f96de92e1191056a8ccbc08bf95092782adb5e1222d4b
- SSDEEP 393216:NYB8t8YB8t0YB8tNYB8tN1b8GlJydoCWgFeqoYB8tqaB:qCSJel4a0cG0
- TLSH
  T137F6120AEFC8BA6BC5F70236597A59154C430C4447C7D983ED99786C18BB6F0AB1EBC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

banker collection credential_access defense_evasion discovery evasion impact persistence
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Makes use of the framework's Accessibility service
  Retrieves information displayed on the phone screen using AccessibilityService.
  collection defense_evasion credential_access
- Obtains sensitive information copied to the device clipboard
  Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
  collection credential_access impact
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
  banker discovery
- Reads the content of SMS inbox messages.
  collection
- Acquires the wake lock
- Makes use of the framework's foreground persistence service
  Application may abuse the framework's foreground service to continue running in the foreground.
  defense_evasion persistence
- Requests disabling of battery optimizations (often used to enable hiding in the background).
  defense_evasion
behavioral2