0496a6f6f70c07bc07d8dd3d0a54fbe30a42656f8fe85622f907e083e2f59b95

Sharing

Copy URL Twitter E-mail

General

Target
ajshare_v1.0.6.apk
Size 15.8MB
Sample260818-k6b4vszyhy
SHA256 0496a6f6f70c07bc07d8dd3d0a54fbe30a42656f8fe85622f907e083e2f59b95
MD5 fa4b2caa38e36ff1d864ace0c0915135
SHA1 9a4052835bb67be3ce7b31f82c47d71eb1ccd499
SHA512 6f9b1ba5737dae76bad47fbec5d650a407e4c0833117d615ce3908a782594d9bd54cc2d26c8fa3e8433e10566642e87c7456d4f95fad719f230ebd2d3e367132
SSDEEP 196608:bR5ALh+WnUoXIAyQtMo/EZmaEEMr8gzGlcZTUG6ZvN:95a+Mf4AnMCWE18SxhUFr
TLSH
T11DF62246E3A0697FE83745367BAB062715914E32A845CA1344EA761F5E7BFE81E30FC0
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  ajshare_v1.0.6.apk
- Size 15.8MB
- SHA256 0496a6f6f70c07bc07d8dd3d0a54fbe30a42656f8fe85622f907e083e2f59b95
- MD5 fa4b2caa38e36ff1d864ace0c0915135
- SHA1 9a4052835bb67be3ce7b31f82c47d71eb1ccd499
- SHA512 6f9b1ba5737dae76bad47fbec5d650a407e4c0833117d615ce3908a782594d9bd54cc2d26c8fa3e8433e10566642e87c7456d4f95fad719f230ebd2d3e367132
- SSDEEP 196608:bR5ALh+WnUoXIAyQtMo/EZmaEEMr8gzGlcZTUG6ZvN:95a+Mf4AnMCWE18SxhUFr
- TLSH
  T11DF62246E3A0697FE83745367BAB062715914E32A845CA1344EA761F5E7BFE81E30FC0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery persistence collection credential_access impact
- Obtains sensitive information copied to the device clipboard
  Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
  collection credential_access impact
- Contacts third-party web service commonly abused for C2
  Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
- Queries the mobile country code (MCC)
  discovery
- Checks the presence of a debugger
  defense_evasion
behavioral1 behavioral2 behavioral3
- Target
  ajshare_v1.0.6.apk
- Size 15.8MB
- SHA256 6bce26f53c457915a74ae2ffa17a683688c9c5eb98f3879f079748df873890f9
- MD5 90a77aadee1058d72e5f05ff557591dd
- SHA1 cdf0059223ab36480116bea109ce67b1c0a65fe4
- SHA512 4b2de4f56d60876295482f5437a218acf9239751622be2e20ca59e5a502ccf9f46e2bd7c07545059d9bc48908b275b0709ebd8e80f89f0b2b4b02abc65732b03
- SSDEEP 98304:bVbKi6mAJ1TtOfpLamjfbmnL4LcX4MWGky5C3do5RLc6IP7BGXJLeTydZL0W5dXV:bR5ALh+WnUoXRAyQtMo/EZoiR0QF
- TLSH
  T1A3F61242E3A0597FE83641327BAB126755814E33A446CE1346E6762F5E7BFA85E30FC0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery persistence collection credential_access impact
- Obtains sensitive information copied to the device clipboard
  Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
  collection credential_access impact
- Contacts third-party web service commonly abused for C2
  Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
- Queries the mobile country code (MCC)
  discovery
- Checks the presence of a debugger
  defense_evasion
behavioral4 behavioral5 behavioral6
- Target
  ajshare_v1.0.6.apk
- Size 15.8MB
- SHA256 a6235a7386a6e90716bb032ba9c65b5e1910ecc63d999b97bf30f34784b84837
- MD5 8cfaf815733f2b4d3004b3d7c94f0b48
- SHA1 8b4dce6b136828f09db42f8e55ffb6c3f89b63ca
- SHA512 0bdc2bf4e4b37a24193ea2ac5b12615d87edacddb948e1df94292af90a62276823e667656f0923f7b847c4869176267a04264635f7213640a2bffc77f83e8c57
- SSDEEP 98304:bVbKi6mAJ1TtOfpLamjfbmnL4LcX/35dXu5BQ:bR5ALh+WnUoXLn
- TLSH
  T169F61282E3E4AD6FCC3782325BBB533616918E128946D3038968B71D5DBBAC95F51FC0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery persistence collection credential_access impact
- Obtains sensitive information copied to the device clipboard
  Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
  collection credential_access impact
- Contacts third-party web service commonly abused for C2
  Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
- Queries the mobile country code (MCC)
  discovery
- Checks the presence of a debugger
  defense_evasion
behavioral7 behavioral8 behavioral9

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Tasks

Sharing

General

Malware Config

Targets

Obtains sensitive information copied to the device clipboard

Contacts third-party web service commonly abused for C2

Queries the mobile country code (MCC)

Checks the presence of a debugger

Obtains sensitive information copied to the device clipboard

Contacts third-party web service commonly abused for C2

Queries the mobile country code (MCC)

Checks the presence of a debugger

Obtains sensitive information copied to the device clipboard

Contacts third-party web service commonly abused for C2

Queries the mobile country code (MCC)

Checks the presence of a debugger

MITRE ATT&CK Enterprise v16

MITRE ATT&CK Mobile v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9