974974cb3771f3511b28056d6170d30536eefe022304eeaac4e47d4b598f76b0

General

Target
Alert - Bahrain.apk
Size 19.8MB
Sample260717-jg87maev3r
SHA256 974974cb3771f3511b28056d6170d30536eefe022304eeaac4e47d4b598f76b0
MD5 9694294addbe58be93ddbb6cabc499ce
SHA1 775bf9e9fcacc39125e5584312e1728b6d80d468
SHA512 3eb29a720b98c516e4ea8c5f0cdbbe1fa6930825d79a2040c257fcc2738a6703edfe924afb2877cc2bf9af7c3111e60aebac21fb4710b9c9e2d4a3e0fcb7600e
SSDEEP 393216:a/WEjaEYEdI3GjGOB1/zoFW1775wKoisdp/9bp3Gdw:a9aWjGO7/MFiuT39
TLSH
T16827220AEFC4BA3AC9F75232197B59194C474C414787D983DD59382C2CBB6E1AB1EBC8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  Alert - Bahrain.apk
- Size 19.8MB
- SHA256 974974cb3771f3511b28056d6170d30536eefe022304eeaac4e47d4b598f76b0
- MD5 9694294addbe58be93ddbb6cabc499ce
- SHA1 775bf9e9fcacc39125e5584312e1728b6d80d468
- SHA512 3eb29a720b98c516e4ea8c5f0cdbbe1fa6930825d79a2040c257fcc2738a6703edfe924afb2877cc2bf9af7c3111e60aebac21fb4710b9c9e2d4a3e0fcb7600e
- SSDEEP 393216:a/WEjaEYEdI3GjGOB1/zoFW1775wKoisdp/9bp3Gdw:a9aWjGO7/MFiuT39
- TLSH
  T16827220AEFC4BA3AC9F75232197B59194C474C414787D983DD59382C2CBB6E1AB1EBC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery evasion persistence collection credential_access impact
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Obtains sensitive information copied to the device clipboard
  Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
  collection credential_access impact
- Queries the mobile country code (MCC)
  discovery
behavioral1 behavioral2 behavioral3
- Target
  payload.base
- Size 8.6MB
- SHA256 c6528aba9265127234f36dab178d1688b541c1878ba3093ddd7d5b84535a9d76
- MD5 58330aaf1f533e9fe03b6355c60347b4
- SHA1 b5a44ea4861bfd73f95efd32d77e746851d83ec5
- SHA512 84953aff4c12b46a4117c155bafa0a778e760b6397b91c2446d14759e9ddc0a7167417ad81096ebbe386b5289a12b6d190a57526b1bafecedf46885c957acaad
- SSDEEP 196608:gk0yxEa+cxuM1YD/sqLBzuGtIj9nW0x6CJgefuSF4A2:Iylxt+z/1HbefJd2
- TLSH
  T1AD96F106EFC4BA6AC9F71232557A5A184C434D4447C7D983ED9A782C1CBB6F0AB1DBC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

collection credential_access defense_evasion discovery evasion persistence impact
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Makes use of the framework's Accessibility service
  Retrieves information displayed on the phone screen using AccessibilityService.
  collection defense_evasion credential_access
- Obtains sensitive information copied to the device clipboard
  Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
  collection credential_access impact
- Acquires the wake lock
- Makes use of the framework's foreground persistence service
  Application may abuse the framework's foreground service to continue running in the foreground.
  defense_evasion persistence
- Performs UI accessibility actions on behalf of the user
  Application may abuse the accessibility service to prevent their removal.
  evasion
- Queries the mobile country code (MCC)
  discovery
- Requests disabling of battery optimizations (often used to enable hiding in the background).
  defense_evasion
behavioral4 behavioral5 behavioral6