055c074d2b8ea366174f725c98bfc02bf1a42fad6b884da20316a750968644af

General

Target
Pawns app.apk
Size 48.0MB
Sample260806-pm2mma1bjd
SHA256 055c074d2b8ea366174f725c98bfc02bf1a42fad6b884da20316a750968644af
MD5 28ab025737d64fe453aa9c2dfdca59ea
SHA1 d3e30605d649f0c2680e71710d06af120af5e282
SHA512 768f9107e207e4661ed7193f4a51d2cd4e337a11961e005e837a27fb04639eeb91be4e61a13840aa0d21ee23e382a952a082fa86ebd6ce9238f3b3f50ef4025e
SSDEEP 393216:eTe1OpCsC2kXyG+fMbDnnAoAYwIZkcUWXjNs8LF7DjurOB4lTikNkrZzbWds4adg:UewfC2kiG4MHnB/h3BbkgzA7a6
TLSH
T160B7BE47E2535D76D4BF9335A4B78340AF326E80AA8393171041F6A96FB72C12F9D6C8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  Pawns app.apk
- Size 48.0MB
- SHA256 055c074d2b8ea366174f725c98bfc02bf1a42fad6b884da20316a750968644af
- MD5 28ab025737d64fe453aa9c2dfdca59ea
- SHA1 d3e30605d649f0c2680e71710d06af120af5e282
- SHA512 768f9107e207e4661ed7193f4a51d2cd4e337a11961e005e837a27fb04639eeb91be4e61a13840aa0d21ee23e382a952a082fa86ebd6ce9238f3b3f50ef4025e
- SSDEEP 393216:eTe1OpCsC2kXyG+fMbDnnAoAYwIZkcUWXjNs8LF7DjurOB4lTikNkrZzbWds4adg:UewfC2kiG4MHnB/h3BbkgzA7a6
- TLSH
  T160B7BE47E2535D76D4BF9335A4B78340AF326E80AA8393171041F6A96FB72C12F9D6C8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

collection credential_access defense_evasion discovery evasion execution impact persistence
- Checks if the Android device is rooted.
  defense_evasion
- Checks known Qemu pipes.
  Checks for known pipes used by the Android emulator to communicate with the host.
  defense_evasion
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Obtains sensitive information copied to the device clipboard
  Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
  collection credential_access impact
- Queries information about running processes on the device
  Application may abuse the framework's APIs to collect information about running processes on the device.
  discovery
- Acquires the wake lock
- Queries information about active data network
  discovery
- Reads information about phone network operator.
  discovery
- Checks the presence of a debugger
  defense_evasion
- Listens for changes in the sensor environment (might be used to detect emulation)
  defense_evasion
behavioral1