5fef2449ce26f0820e72a42ee45f578ce14cef908c52063cd595b000d4665a81

General

Target
财神开心大碰撞助手.apk
Size 18.3MB
Sample260720-tkhh7aht7x
SHA256 5fef2449ce26f0820e72a42ee45f578ce14cef908c52063cd595b000d4665a81
MD5 de72ddf5a58637df2c98e12f752b9508
SHA1 122f50ea6a45cd4dffe87204a31701e87d42c315
SHA512 222b987cad10e52d79c8deb9c82c7dad10f89c3689d2083a06a6076726e3b3710484882d9aab29484693389b2dccf2e2fec2f1c0b6e179f2b33b66759270ccbc
SSDEEP 393216:LZKfViLWILindO91f1EI4mG6PnOoBt3RTh4ZKfZFqKRSSOb4bUud6LU9lgyFKaaC:LkfViLnmndIfEI4OPnO2Vh4kfyKR1Os7
TLSH
T1941733BC2E79F638DA69B67C85F300275C59426C32DAFE3D8779476848E5D80372898C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  财神开心大碰撞助手.apk
- Size 18.3MB
- SHA256 5fef2449ce26f0820e72a42ee45f578ce14cef908c52063cd595b000d4665a81
- MD5 de72ddf5a58637df2c98e12f752b9508
- SHA1 122f50ea6a45cd4dffe87204a31701e87d42c315
- SHA512 222b987cad10e52d79c8deb9c82c7dad10f89c3689d2083a06a6076726e3b3710484882d9aab29484693389b2dccf2e2fec2f1c0b6e179f2b33b66759270ccbc
- SSDEEP 393216:LZKfViLWILindO91f1EI4mG6PnOoBt3RTh4ZKfZFqKRSSOb4bUud6LU9lgyFKaaC:LkfViLnmndIfEI4OPnO2Vh4kfyKR1Os7
- TLSH
  T1941733BC2E79F638DA69B67C85F300275C59426C32DAFE3D8779476848E5D80372898C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

defense_evasion discovery impact
- Checks if the Android device is rooted.
  defense_evasion
- Acquires the wake lock
- Domain associated with commercial stalkerware software, includes indicators from echap.eu.org
- Queries information about active data network
  discovery
- Requests dangerous framework permissions
- Deletes files using the built-in Unix rm command
  Android's native rm command removes files and directories directly from the device filesystem, which can be used to erase artifacts and evidence left behind by intrusion activity.
  defense_evasion
behavioral1
- Target
  yijianwanservice.apk
- Size 774KB
- SHA256 ab634edc7e6ea895acf6f6c2bba61462986207c89f61688fb052191e38682e5b
- MD5 1f6306f0b8be6d3a16065bf47d86e8a1
- SHA1 351b6c04310aedf08c428d9c031ec0dcc00358ba
- SHA512 df59dea52f49fc4eb07091439e0ab2c43f7c45fbfce4ea21734a58bab7e2968877c96a3970d539ccba61a9fa143dde991144543a58d0c4080b355864b7946012
- SSDEEP 24576:ySyajvO4tv4OMvniAAyVjuhb7KkMMPkdYsax:ySyqO4tvJ0ifCjuKkMKk2sc
- TLSH
  T148F423A5BF7236B0CD2F3E32858A18ABF3D1886455D948154B6ED0068167F3C27C56EF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2 behavioral3 behavioral4
- Target
  yjws.apk
- Size 774KB
- SHA256 3579c02698fbb0c26af6152dbd9b5720ce3830402b4bf95a8cfa649f6082a0f2
- MD5 7a8adccb81e43f470a7a9e32b5e7cf4f
- SHA1 0d6baa5f2d0d51182af1c5bd1c7f8cc39cc13b22
- SHA512 e9fab60b88ba02ba25cf727248aa778db913b333e3e635e20d5de962fbe2ed69953e6eef3230338594fff198559b5344d5edeb6c1ada5cc79c46b7c94c9e4ebe
- SSDEEP 24576:mSyijvO4tv4OM3niAsyVjyhXHS6Q5oM0+6u0Yv9cz:mSyCO4tvt4inCj2SpeM0+Z0M0
- TLSH
  T181F42385BED91260CD2F9E73C08929D7F3D1483514CE296C4A6AB40A50B7B3CD9C6E9F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6 behavioral7