edb77c7f7607b2979bceabc1458d9228136d9cbdaef6d8ed87fb8b3c674f720b

General

Target
app.apk
Size 41.3MB
Sample260717-12dd5aft2k
SHA256 edb77c7f7607b2979bceabc1458d9228136d9cbdaef6d8ed87fb8b3c674f720b
MD5 60b5cfd37c12d2a3390b3ebe7f9c5874
SHA1 02faf8d7d1345ae529e9302aeff1284ba9b6dbca
SHA512 bcb33035f5eda249cb704ea6548224226aae8bafbe6e75af126a8365aea48c58a659b8c81aef1da0d22d9fe39dc05f0e162029f87207d85e942100834e5f3d64
SSDEEP 786432:TxNNUE7cIJV0K+8p1L+IYjK7zGRgM3Db9oLlV:TaECO1zl6loX
TLSH
T14E97F185F65A44BDC9BAB874498E9133E6243C09831385DBAA45FB147E337E08F397D2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  app.apk
- Size 41.3MB
- SHA256 edb77c7f7607b2979bceabc1458d9228136d9cbdaef6d8ed87fb8b3c674f720b
- MD5 60b5cfd37c12d2a3390b3ebe7f9c5874
- SHA1 02faf8d7d1345ae529e9302aeff1284ba9b6dbca
- SHA512 bcb33035f5eda249cb704ea6548224226aae8bafbe6e75af126a8365aea48c58a659b8c81aef1da0d22d9fe39dc05f0e162029f87207d85e942100834e5f3d64
- SSDEEP 786432:TxNNUE7cIJV0K+8p1L+IYjK7zGRgM3Db9oLlV:TaECO1zl6loX
- TLSH
  T14E97F185F65A44BDC9BAB874498E9133E6243C09831385DBAA45FB147E337E08F397D2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

banker collection defense_evasion discovery evasion execution impact persistence
- Checks if the Android device is rooted.
  defense_evasion
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
  banker discovery
- Queries information about running processes on the device
  Application may abuse the framework's APIs to collect information about running processes on the device.
  discovery
- Queries information about the current nearby Wi-Fi networks
  Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.
  discovery
- Acquires the wake lock
- Queries information about active data network
  discovery
- Queries information about the current Wi-Fi connection
  Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
  discovery
- Reads information about phone network operator.
  discovery
- Requests cell location
  Uses Android APIs to to get current cell information.
  collection discovery
- Checks the presence of a debugger
  defense_evasion
behavioral1