pegasus | 316fac5ae2d4e250b1c0f10b4388fa2c6c3407b118e539a7d865613e373628d9

General

Target
Pegasus.zip
Size 7.7MB
Sample260808-c2m2ka1wex
SHA256 316fac5ae2d4e250b1c0f10b4388fa2c6c3407b118e539a7d865613e373628d9
MD5 4261312a1666ccaeb48d55ddd1d64559
SHA1 620947ef46f8e8f7efbf9442845b81901c8034b6
SHA512 e0677d4202c94df0bf67f24b2f49cfe4a301a2a724282769e22e47c245233670ccf3ce14e5aa2c3535d3dd00b603560e399f521c0ba7232b71a84d27acfc50c8
SSDEEP 196608:NeX/gzDmUkWxyaB/VDM2tR+vI6FXu7VkpU54rbfKEqedf:NC/+oWxf/tRc3peG9Xqedf
TLSH
T186863311B3BB67AAD451303551D3712B7A748C073A13DFE20E9A9C43AD33DAA1A5FB09
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  Pegasus/144778790d4a43a1d93dff6b660a6acb3a6d37a19e6a6f0a6bf1ef47e919648e
- Size 7.0MB
- SHA256 144778790d4a43a1d93dff6b660a6acb3a6d37a19e6a6f0a6bf1ef47e919648e
- MD5 29183814f45616d831fdc139e3113718
- SHA1 aa47b601dd3a01cf0ec5e2e6da5c4f90c49ba71d
- SHA512 c255f6751e97692b4517c9a4d240393098c58e626e09b0d0189b81a8f6cd20967a2f15ce9d793fa8aec76246cafc7d9b2326bf06f6adbd547f458a7d04b17d1d
- SSDEEP 196608:pJVfGouCB8oMxqANNjYYUMLRoCRMggq2k+E9p+o3k:prf7uC/Mxq4YSLRowMPqj+E9Io3k
- TLSH
  T1777612B3F749E8A5D0E3A2339671521660224C708F13EAA33E5EB5341FF7EC45689E85
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  LenovoSafeBox455.apk
- Size 927KB
- SHA256 e0a9bdf5dc4481d913038e6509635b12d12016e820ecc58a5971be3bb72dcb2b
- MD5 02297e27886d758b1f6892b5047ff9ff
- SHA1 bf03f835c42a8734d9d862741a235ea3491036ea
- SHA512 d9784281450f91cc32b4feadc0dbf8d76b10bbcf35e7dcd362bc940103317b4e8fafba9fa9dbe0b954d20478d700b92df4f661f53edc6022d67f3bcd85276c8d
- SSDEEP 24576:wtMiI2b4apsiko9W8C/2htK3JdFgdXlQ53RJ3J:5iD5pUoW8e0tqVgdXGhJ
- TLSH
  T1C1151275FB9AEC26D977C033469242867614CC504782DBA31716B4181DBFE988BCBECC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  LenovoSafeWidget115.apk
- Size 123KB
- SHA256 6972ef902f648ec405adec1a8ac2843048fe269e0570cfa71379545d9b0fbe77
- MD5 12c89f415f86784edddeb18072f5113f
- SHA1 135c18ae3ca1878895391abe5bd69f858b73fb8c
- SHA512 8c4e31290a966db551ae53ca720247779929f2e6ab93166bdd11ba46d6872d328e2670ce2ebd56f95bcbe225f821a4c07856aed9f5ccf677b2876bec1c3cbff0
- SSDEEP 3072:znyleVG+yjnp0qWhjKJE0hil5uBl1n8HFZAhCWij:IeM+y7iXWJEyvIz
- TLSH
  T1BAC3E0C0FB60E436C8739B32D2E59702BE19C8619249B773211DB1944EFBE68778A7D1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery persistence
- Queries the phone number (MSISDN for GSM devices)
  discovery
- Queries information about active data network
  discovery
behavioral3
- Target
  Pegasus/bd8cda80aaee3e4a17e9967a1c062ac5c8e4aefd7eaa3362f54044c2c94db52a
- Size 1.1MB
- SHA256 bd8cda80aaee3e4a17e9967a1c062ac5c8e4aefd7eaa3362f54044c2c94db52a
- MD5 8d4b77fa3546149f25bd17357d41fbf0
- SHA1 7289737c1dc462726abbe89335a7702c130bbdcc
- SHA512 a9a10115072a66d89158a09649ace3702bee021a47195aec0d6046bdf8fae8927b3d36d0a6d7a7302125b5f06d711419390edf2da3c3fbd11a5a3228e6abd9ff
- SSDEEP 24576:RkVMvDz5Q6P8aJnB94XqMOkkXLjD+F5VCq7ncRL4GchuT:qKvDlhP8aj9bMvk7jDJqTmsGch0
- TLSH
  T1FB35330B3523959FF88353B6D50884CB3564A7A70E4F90BB28FDC8BEC6518E26631D4A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4
- Target
  Pegasus/cc9517aafb58279091ac17533293edc1
- Size 57KB
- SHA256 9fae5d148b89001555132c896879652fe1ca633d35271db34622248e048c78ae
- MD5 cc9517aafb58279091ac17533293edc1
- SHA1 28f570754274db96bffa7ac4a53a5ede3508d82c
- SHA512 2fb55d4ceb8da9a01d5bf0a9725ee601a252b541f29186311bbc3c515b4cfa3e52107f856f381cfb643b1d2398099c6c0747f1b01baf37e68fd273684fc93fe5
- SSDEEP 1536:kdJw+W4W0bQjcK2eZk7A6loQ17y23V9zEj:n/sQQK2mkE6l5I2Fxw
- TLSH
  T1DA43E18187D08726E23F93302AF1655074753C411E9AE72A1181F65B8FABFF89B41B7E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  Pegasus/d257cfde7599f4e20ee08a62053e6b3b936c87d373e6805f0e0c65f1d39ec320
- Size 367KB
- SHA256 d257cfde7599f4e20ee08a62053e6b3b936c87d373e6805f0e0c65f1d39ec320
- MD5 4aa966ff0455560a2918b746ada2ed52
- SHA1 4984af24225d3356689585399ef5e49553e6436c
- SHA512 e67061519218f5edc241c9458addf51b05a1bd0de604c973756c02018dddb4a893fbebf9ab9a0194b9fc737c7d479c5949b7d3cf7fa444a8bca88853c2d5ebae
- SSDEEP 6144:1krLrE0XFUxWeau+qEqoh5pFtdiEnVXZrAhk3X2I9FZIqovhFa5Y5jQ5m3wQ54:1L0XFuNau+qsDkwX7xIqwhXML
- TLSH
  T10284224DCD63F54ED1CEAA32D1A6D17B96210070AB73FCDC110E8C9ABAA2C550B9CED1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6