a3ccf10bb73c11837212270bc9ff3c26591431b997d7c835c56b04f900762de8

Sharing

Copy URL Twitter E-mail

General

Target
My-NTRA_1.4.1GMS_apkcube.apks
Size 33.7MB
Sample260807-fe873axerb
SHA256 a3ccf10bb73c11837212270bc9ff3c26591431b997d7c835c56b04f900762de8
MD5 82d6e663ee8e8708d495cf08fda1c957
SHA1 43444c7fb86312d2a20e2b1fb84717f2eef078b6
SHA512 3a07ff8de0d2561ffb8b3002a14cc4c6b54622bbfe3437b7bc38d5099026f5037e0590747d77920b162388026b7b73de17aaf02c5cc55916bb1edb5a769ffbba
SSDEEP 393216:8fQXwI6EDo/ZyIiAIbeIER3KfulTxmqmTzEjzp:8fQA4gZyIiAIbeIDGeqm0R
TLSH
T1B077CF53B756AD32D4BE933658FA03007B326E9A6743975B1084B66C7CB32C05FA43DA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  APKCube.url
- Size 46B
- SHA256 d9d2f7aa31bf07ba32c021a65184836b8cb8c377e72039d07919e865c25e9d58
- MD5 916ddeb1270e744cb559a9cdde88a400
- SHA1 cfaeb1811039337ff1a8f39c2ca75b5250062601
- SHA512 dcd8dd051cdd4ab39e5a2bfcf10991dfe8717652497e1e7c02dd8cb65d3cf17f8f85cf56116c72859e1b080351b2f9732cde4578667702d9ad7163c97dbc6f2d
- MD5 SHA1 SHA512
Score

1^/10
behavioral1 behavioral2 behavioral3
- Target
  base.apk
- Size 29.7MB
- SHA256 537396934dec4f183e8ca3a4b6e5db8e9003ea6c9feabe845f522289978e02dd
- MD5 5a48fd8539e03de316ea5e211d9617ee
- SHA1 c4eeb6bc9039735d1e1d01c0e20ad18fce4705a7
- SHA512 0418420c4d11a4a2ba630c378182b61f48265f3b630293b377b1249a23713fd967b670ef802ddb69badf7d516e5787ab88d627d5b9d3e80b41b1c89cd09edc75
- SSDEEP 196608:ANatfxy+HIX0LNu7ulaqD1/91yv5/4SovHZyIiAIbtQIhfQrR3KueJdD42kZl:bfQXwI6EDo/ZyIiAIbeIER3Kfub
- TLSH
  T1CA67BE53B756AD32D4BE833658FA03007B326E9A6743975B1084B66C7CB32C45FA43DA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

defense_evasion discovery execution impact persistence collection credential_access evasion
- Checks if the Android device is rooted.
  defense_evasion
- Checks Android system properties for emulator presence.
  defense_evasion
- Checks Qemu related system properties.
  Checks for Android system properties related to Qemu for Emulator detection.
  defense_evasion
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Obtains sensitive information copied to the device clipboard
  Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
  collection credential_access impact
- Queries information about running processes on the device
  Application may abuse the framework's APIs to collect information about running processes on the device.
  discovery
- Acquires the wake lock
- Queries information about active data network
  discovery
- Queries the mobile country code (MCC)
  discovery
- Reads information about phone network operator.
  discovery
- Checks the presence of a debugger
  defense_evasion
behavioral4 behavioral5 behavioral6
- Target
  split_config.arm64_v8a.apk
- Size 5.6MB
- SHA256 6a1dcfa4b1ac5865aa41d1859d8ed3eddbdb05f014ae75ea1a05eb6e9fbd79d7
- MD5 52f0385ab7dfe4d304f617757e3dac28
- SHA1 cc2c75b349918a1a921ec2bb8793cbd053408364
- SHA512 db2fd15c53591d806bec44c5ab2c6e1919d6ed816fb6384d45da6a516a5c85cf8aaa91652955a837d7c83f32a153aed0dcfe10ce814d3c4876f9c4eb7391fa7e
- SSDEEP 49152:p3snC4NTSr+ZRzkva2xvdvwSor+djhDina6Bwz5sW4:KnC4NAOCaMvdvwZrujhDinaGwl4
- TLSH
  T18D467C09F91DE627EECAF0BCCD8B0793B02278955310C1463926950DFE87BD9CA5A3B5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8 behavioral9
- Target
  split_config.hdpi.apk
- Size 178KB
- SHA256 833eca0766d51db75ad89e6f1f09c83e38701680195f777dc1e61e8462a18536
- MD5 e08c23a3a75b7a44ea981e5794eadc9a
- SHA1 beb82c016f036fb53f898bfd007c38ab8dce7c80
- SHA512 f0e9c37e0692d23d7ed34e019705615db09dc0664cd65d51d1726a6d3419c9c93a03d7428145afb8fe3a0ed2ebb5d8b5bb2d1957157c2178046b8eb2e1627b32
- SSDEEP 3072:t0PAulfu17dcGDfGxWZwa2IJhv5GMzR5xiwK7T84UJ+g9VnhlEXZHPBvCDmZV:uE17dH5BN5xzIT8eg9VhlOpv
- TLSH
  T14D04DFA7E39AA43AF827C23B82F85B5B45954E845809B736072AF41CDDFFE858540FC4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral11 behavioral12
- Target
  split_config.ldpi.apk
- Size 154KB
- SHA256 090b69a3a6948a63d5dc3865370e6c1c15f0b54d3972054fcd269e73c1f3ebe1
- MD5 1f0584fd743d83e92c371744f160882f
- SHA1 38b78b4d8413161e3f71d993d4c6d69dd088b5fe
- SHA512 c088b2d33607fd0de18ade2783c0fb82d478af83a4acbb0bc5f9fbc0c8c8ccd032257f7426bc2e360d4b349d75617fdc564815286d93893fc443674aca6fa9ed
- SSDEEP 3072:1pX0oofGxWZwa2IJhv5GM1hbC3uOrilLrckAsiMMqdyq:1+5BN5x1hbC3Vrid7
- TLSH
  T11BF3C057E378A826F923813A43BD8B5746154E94A919E72A071AF24CDEFFDC5C980FC0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14 behavioral15
- Target
  split_config.mdpi.apk
- Size 150KB
- SHA256 4770e430011cf4195c341ff3f8deed9e67a5d13eb7b7954985e4a4392a828fd2
- MD5 1a81fae4bbe31f9e3e621412445f606b
- SHA1 b95d84392bfde0b6a63c4344d7156dcf4ffcf271
- SHA512 e9316bbef804ef1725413413898893081fe63aea93e2f40d45db39153054e62c794fc8fe3381512cb2ba1e0bf9a19085866e6bb66639718436efd2ded91e6bb9
- SSDEEP 3072:E0/ofGxWZwa2IJhv5GM5rilL8z8505t21PtEASAIeDm7vkPhn:c5BN5x5rio850501PzD9B
- TLSH
  T18EE3C097E378A826F837813B82B85B5786544D40A919E72A0759F68CDDFFEC5C940FC0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16 behavioral17 behavioral18
- Target
  split_config.tvdpi.apk
- Size 260KB
- SHA256 a473dc607f095e8902a56059efb6b24ad8ba06b9caf294927b7e54a11d5f6f27
- MD5 ef9e52a38005d12a053838af37bf98b6
- SHA1 3d2da435863bcf0280b787d5c147a0d61480a12d
- SHA512 10d67e9fc44028b6dd601eab0c2b4886ac13695f58c63d48be5cc283c566bf9cf423143645c63850c09f2dcd59ff7410826e74423e95b407722e4189c7c896de
- SSDEEP 6144:WE17dH5BN5xzIT8eg9VhlO7rio850501PYV:WU55zLIoechlg85401PYV
- TLSH
  T19B44CFA7E3A9A83AF837C13B82B85B5B46954D809815E736072AF54CDDFFE858540FC0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20 behavioral21
- Target
  split_config.xhdpi.apk
- Size 230KB
- SHA256 6c46e73e0177b583b624f9105e840f9480f809c91cea8cb532211cea5bb37f6c
- MD5 fc1300f63929bb534d1aeab852e9050b
- SHA1 4a2d08a06c22a82bf53b62ab2be61a65ee561c00
- SHA512 dabbcc8e4c06dbcf2dcb1cfb71fb74384e490fbf4efe27d8391ca23c25af77ce8b4042acc59487f1f4efff45688ef82902660976c7e25a68f1582135c427f513
- SSDEEP 3072:cU0EFBfaFkzUAQN2ZJzaqENljAXOTM0N8PMTL0kQCAWUPNDL8Vll3djVZgB6Ufzk:cgRLfGFUMENkVhKzk
- TLSH
  T1A034F112D355B42AD9278036C6FD9AA7C8AE4C809C88BBA50717F72CCDF7E916504FE4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral22 behavioral23 behavioral24
- Target
  split_config.xxhdpi.apk
- Size 338KB
- SHA256 9fbe6b75167486e597847e387c85e46e00db500c0b1d97665aec98331ca67dde
- MD5 642e5c40c3bef1ebc53cf0baf3f00d4c
- SHA1 6fa3dd3c73e03b3afa4f6a339d81fb5b4097bce7
- SHA512 f88715a11cd46362bb9cb7ea2ebab53c806a47de3bc8f7d9a836abf521aa266e27901aa875e879d9e3b3ce17d085a7560ca69c6739837ac48b51412bf7912e7e
- SSDEEP 6144:gODFbEslJDvEToL739X5UM2LpcHmPocVsh6nqGL7p:nNE6rL7V5UQAounqQ7p
- TLSH
  T187740273D3A8A41ED617C53C82FD6A9FD8490E84DD9A63600D16F70DAEF7A819A01FC4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26 behavioral27
- Target
  split_config.xxxhdpi.apk
- Size 454KB
- SHA256 f47d9a932913a8d4bdd890a08632d8af69ad5b072189b97d71aedd841cb24e8a
- MD5 1e780cf8cff9916303d92f84e12a43ef
- SHA1 86237ec4ac65e46b5c85297ffdb69b184f3e169d
- SHA512 bf1f520303f88f8b0cb04ac77003d1eb15a7fe74a573b82b2526ba8b646966d55cc42c8b37dc1ea664c577b65bfd74048aa2ad4d00e7f6270e8b3f413d42e55d
- SSDEEP 12288:xZtS5B6JDSc2bZD9tCnOn/xmdMxlbSzv5D:xlDS/x9uOZmdgs9
- TLSH
  T12FA41227E3A8A429EE07C138517C19BB98460D805998D715191DF92EDFF2F49CE8AFC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral28 behavioral29 behavioral30

MITRE ATT&CK Mobile v16

Initial Access

Execution

Scheduled Task/Job

T1603

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Scheduled Task/Job

T1603

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

Process Discovery

T1424

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Tasks

Sharing

General

Malware Config

Targets

Checks if the Android device is rooted.

Checks Android system properties for emulator presence.

Checks Qemu related system properties.

Loads dropped Dex/Jar

Obtains sensitive information copied to the device clipboard

Queries information about running processes on the device

Acquires the wake lock

Queries information about active data network

Queries the mobile country code (MCC)

Reads information about phone network operator.

Checks the presence of a debugger

MITRE ATT&CK Mobile v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30