5d2fd2173fac6e591611463693ad701fee29f90fc924ca2d06ec877e147c4649

General

Target
movielab_mobile_2_0_22.apk
Size 39.1MB
Sample260816-tjs9ased34
SHA256 5d2fd2173fac6e591611463693ad701fee29f90fc924ca2d06ec877e147c4649
MD5 05e24cf01023e83a920c84cf753dc794
SHA1 41909cc763ec58329080666aed33f6b38c0af0be
SHA512 133aefebb642cc0bc51ab14990f739168a4c96fbe41f29c0e96cc0ede9c0eaf54f19de09a9f73f4fb9c2bc444e2082a85119931e3b056bb9550f5771ce949407
SSDEEP 786432:/5LKtf5p2a2KEeyT04gb5kY4mI8yfbaI/+S6CvoJ7RgV4o242YJ7h29gGP/TM3:xO572ayTJgbiYz9yD/Fz0NgCoB2C7h2O
TLSH
T1E397339FF7644F2ED8764032491912346A2B8E21BA13D78B5648776D38B3EE40E837DD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  movielab_mobile_2_0_22.apk
- Size 39.1MB
- SHA256 5d2fd2173fac6e591611463693ad701fee29f90fc924ca2d06ec877e147c4649
- MD5 05e24cf01023e83a920c84cf753dc794
- SHA1 41909cc763ec58329080666aed33f6b38c0af0be
- SHA512 133aefebb642cc0bc51ab14990f739168a4c96fbe41f29c0e96cc0ede9c0eaf54f19de09a9f73f4fb9c2bc444e2082a85119931e3b056bb9550f5771ce949407
- SSDEEP 786432:/5LKtf5p2a2KEeyT04gb5kY4mI8yfbaI/+S6CvoJ7RgV4o242YJ7h29gGP/TM3:xO572ayTJgbiYz9yD/Fz0NgCoB2C7h2O
- TLSH
  T1E397339FF7644F2ED8764032491912346A2B8E21BA13D78B5648776D38B3EE40E837DD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

collection credential_access defense_evasion discovery evasion execution impact persistence
- Checks if the Android device is rooted.
  defense_evasion
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Obtains sensitive information copied to the device clipboard
  Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
  collection credential_access impact
- Queries information about running processes on the device
  Application may abuse the framework's APIs to collect information about running processes on the device.
  discovery
- Acquires the wake lock
- Makes use of the framework's foreground persistence service
  Application may abuse the framework's foreground service to continue running in the foreground.
  defense_evasion persistence
- Queries information about active data network
  discovery
- Queries the mobile country code (MCC)
  discovery
- Reads information about phone network operator.
  discovery
- Checks the presence of a debugger
  defense_evasion
behavioral1