a42997d66a44673c6e6575906a704ac86362f2ef9990f334319682ddf80b0b38

General

Target
barcelonaled.com.apk
Size 9.4MB
Sample260708-q7xpvaf18w
SHA256 a42997d66a44673c6e6575906a704ac86362f2ef9990f334319682ddf80b0b38
MD5 f07141b1cbca19a716b3e520cc3e2785
SHA1 58361eae1eb962c5df9ddd11a0f8dd7ae4b7c494
SHA512 46fee2ccf73cb012c097b73f1f1ef2dba2e3c87882d8c487a04fbef25e1112e580f135fc4f90bf2bb82437871487893956a2a4ab884387eb9f788a37dad1a137
SSDEEP 98304:+Z3QvZXlCcQr1iL2v2mhgHxe5ctrKgfG9SCWlJPwzKw/xtZbhxKtGvZQPLN7fZ:drNK7vBh+xe5cbfuQPwR7ZbhkGvZsLX
TLSH
T1B3A6D012F3054E32C4AD667978BA4744B336AD86DF8357431904B1B8ADB72E07F926CB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  barcelonaled.com.apk
- Size 9.4MB
- SHA256 a42997d66a44673c6e6575906a704ac86362f2ef9990f334319682ddf80b0b38
- MD5 f07141b1cbca19a716b3e520cc3e2785
- SHA1 58361eae1eb962c5df9ddd11a0f8dd7ae4b7c494
- SHA512 46fee2ccf73cb012c097b73f1f1ef2dba2e3c87882d8c487a04fbef25e1112e580f135fc4f90bf2bb82437871487893956a2a4ab884387eb9f788a37dad1a137
- SSDEEP 98304:+Z3QvZXlCcQr1iL2v2mhgHxe5ctrKgfG9SCWlJPwzKw/xtZbhxKtGvZQPLN7fZ:drNK7vBh+xe5cbfuQPwR7ZbhkGvZsLX
- TLSH
  T1B3A6D012F3054E32C4AD667978BA4744B336AD86DF8357431904B1B8ADB72E07F926CB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

collection credential_access defense_evasion evasion impact
- Checks Android system properties for emulator presence.
  defense_evasion
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Obtains sensitive information copied to the device clipboard
  Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
  collection credential_access impact
- Checks the application is allowed to request package installs through the package installer
  Checks the application is allowed to install additional applications (Might try to install applications from unknown sources).
  defense_evasion
- Requests allowing to install additional applications from unknown sources.
  defense_evasion
behavioral1 behavioral2
- Target
  wuyaka
- Size 6.8MB
- SHA256 ad059cb96af0b1b96f1d759b7317f6882841efd7eda008374844a5dc67bb4580
- MD5 f1aafee73754bb1e7f74a98797328722
- SHA1 73abfe6c05d1a5e7a7a3f05cc2587b74a35db1c2
- SHA512 522453587b6708548e33b1253f54445d93746173c2a7f1941f8633a45bd8ac81ed1e78af949c5de7d6cb68f4b95a801f332ea476738e88ac75d9c7a2a4fc567b
- SSDEEP 98304:mP4PElDQhEUDJGhgqWZvh0no/KrZUVNv7H5hT3BrKQH:84cyEOMch0EVNvDnT3BF
- TLSH
  T14D669D67E3408C2EC4EB2237A87A4F09B3267D8D9B4397572904717CAC772EC3A566C5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

collection credential_access defense_evasion evasion execution impact persistence
- Checks Android system properties for emulator presence.
  defense_evasion
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Makes use of the framework's Accessibility service
  Retrieves information displayed on the phone screen using AccessibilityService.
  collection defense_evasion credential_access
- Obtains sensitive information copied to the device clipboard
  Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
  collection credential_access impact
- Performs UI accessibility actions on behalf of the user
  Application may abuse the accessibility service to prevent their removal.
  evasion
- Requests disabling of battery optimizations (often used to enable hiding in the background).
  defense_evasion
- Requests modifying system settings.
  defense_evasion
behavioral3 behavioral4