fc208f7ef44e4e5dc9abb83bab4d945fa2f4fe77304fe503a535746401c5cf88

General

Target
Microsoft_Word_v16.0.18324.20086-Mod-5mod.ru.apk
Size 228.5MB
Sample260809-qcv8jaae46
SHA256 fc208f7ef44e4e5dc9abb83bab4d945fa2f4fe77304fe503a535746401c5cf88
MD5 1866c18ce20e1146d8e7414bac911352
SHA1 765c0ef8bb9648b959bb03fedc08b569a852f0c3
SHA512 ab950badbecc44ca4939cb2e5bca7b24911fe9db0c67dc6aef4b8cbcb48aaa218004e20b8000fb322cdbc3894ac21e9b4bb362f29952c5a9942122f20685a892
SSDEEP 1572864:NchTmzCkWrzYsKF1f03X1gFHjnQPsF67ET61nVyGfM9imkkSIcGb:NMTmzCxw70VgFHjoswgQc+k3cGb
TLSH
T1C9B87E04B6CD741AF6CAB0FC9E5A06D1712F7D501A20C1AE3832A60DDDB26F947B97E1
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  Microsoft_Word_v16.0.18324.20086-Mod-5mod.ru.apk
- Size 228.5MB
- SHA256 fc208f7ef44e4e5dc9abb83bab4d945fa2f4fe77304fe503a535746401c5cf88
- MD5 1866c18ce20e1146d8e7414bac911352
- SHA1 765c0ef8bb9648b959bb03fedc08b569a852f0c3
- SHA512 ab950badbecc44ca4939cb2e5bca7b24911fe9db0c67dc6aef4b8cbcb48aaa218004e20b8000fb322cdbc3894ac21e9b4bb362f29952c5a9942122f20685a892
- SSDEEP 1572864:NchTmzCkWrzYsKF1f03X1gFHjnQPsF67ET61nVyGfM9imkkSIcGb:NMTmzCxw70VgFHjoswgQc+k3cGb
- TLSH
  T1C9B87E04B6CD741AF6CAB0FC9E5A06D1712F7D501A20C1AE3832A60DDDB26F947B97E1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

collection credential_access discovery evasion execution impact persistence
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Obtains sensitive information copied to the device clipboard
  Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
  collection credential_access impact
- Queries account information for other applications stored on the device
  Application may abuse the framework's APIs to collect account information stored on the device.
  collection
- Queries information about running processes on the device
  Application may abuse the framework's APIs to collect information about running processes on the device.
  discovery
- Acquires the wake lock
- Queries information about active data network
  discovery
- Queries the mobile country code (MCC)
  discovery
- Reads information about phone network operator.
  discovery
behavioral1 behavioral2 behavioral3 behavioral4 behavioral5 behavioral6