0a3d111b0f95702b6e8742ac551d566ba6046eff5faf7f56bcd01296bcd7bfce

General

Target
0a3d111b0f95702b6e8742ac551d566ba6046eff5faf7f56bcd01296bcd7bfce.apk
Size 12.4MB
Sample260812-27eptavvbz
SHA256 0a3d111b0f95702b6e8742ac551d566ba6046eff5faf7f56bcd01296bcd7bfce
MD5 24bdec2923aa4153f6070df70a91066e
SHA1 28b94479dfd3b7928872077bc967fe9a03b1d149
SHA512 431df1e1b86386d060df7d64322ccb642eba2e76be6585bda9b663d7e61d1fcd9921ee1c400ea9f45a6722e295c10a6918a6a585386d434465e139e02a8a0fc9
SSDEEP 393216:wU4re7CtqmoocNKJlIE26mJt4wBjWyODyt:wU4re7CtqmoTNWIdODy
TLSH
T193D6235BF36DB86EC4F382324B755236648A4C65CB07EB935D19B33C69B3AD08A45BC0
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  0a3d111b0f95702b6e8742ac551d566ba6046eff5faf7f56bcd01296bcd7bfce.apk
- Size 12.4MB
- SHA256 0a3d111b0f95702b6e8742ac551d566ba6046eff5faf7f56bcd01296bcd7bfce
- MD5 24bdec2923aa4153f6070df70a91066e
- SHA1 28b94479dfd3b7928872077bc967fe9a03b1d149
- SHA512 431df1e1b86386d060df7d64322ccb642eba2e76be6585bda9b663d7e61d1fcd9921ee1c400ea9f45a6722e295c10a6918a6a585386d434465e139e02a8a0fc9
- SSDEEP 393216:wU4re7CtqmoocNKJlIE26mJt4wBjWyODyt:wU4re7CtqmoTNWIdODy
- TLSH
  T193D6235BF36DB86EC4F382324B755236648A4C65CB07EB935D19B33C69B3AD08A45BC0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

9^/10

collection credential_access defense_evasion discovery dropper evasion impact obfuscated
- Encrypted or packed staged payload inside Android package
  Extracted asset shows near-random entropy without a recognised container header, indicating an encrypted secondary payload staged for runtime decryption and loading. Correlate with any runtime class-loading detection on the same sample.
  obfuscated dropper
- Checks if the Android device is rooted.
  defense_evasion
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Obtains sensitive information copied to the device clipboard
  Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
  collection credential_access impact
- Queries information about running processes on the device
  Application may abuse the framework's APIs to collect information about running processes on the device.
  discovery
- Acquires the wake lock
- Queries information about active data network
  discovery
- Reads information about phone network operator.
  discovery
- Listens for changes in the sensor environment (might be used to detect emulation)
  defense_evasion
behavioral1