dbadd29cb4257e1419ba52783c07231a4670490aa43f9553641a2cd670775014

Sharing

Copy URL Twitter E-mail

General

Target
dbadd29cb4257e1419ba52783c07231a4670490aa43f9553641a2cd670775014
Size 9.2MB
Sample260822-e53mja1ckg
SHA256 dbadd29cb4257e1419ba52783c07231a4670490aa43f9553641a2cd670775014
MD5 ff18f62b73ac26c239355111ffd74214
SHA1 cb6b9f518a59e19e46870e62125b6683bdd0757d
SHA512 c99a16081e36ac4490e27ae74304223a9c4292cdc6e1138c68093b30e2de891a38fc0cdb768a1e75414be3dc5e2790451f6594775f47ada4dd431ee720daa447
SSDEEP 196608:PmTSHnWstcWauU36RiNM9Qb8lpLNS7wclE2Kw9FPiuXi9I:PrnBnauLiQlx8S21FPi/I
TLSH
T1B4A6339D784A2BD5C235E9A93689C5343CDE277BDDC1EB1B415EB09B6AC0A09F43C813
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  天柱1.apk.rename
- Size 9.9MB
- SHA256 124f0b87fc73c58e2c87e3ff1b913500e5550b0871afdca11215822d4c75a040
- MD5 27dc7aef4f40f43097fb95f986d12293
- SHA1 c882229a29d6a376a863eaff2741227296a39442
- SHA512 05526038d785fddcdd2307f12135df16cd130e1d4d62f530822758b154a894ee47193b12bcdceffb887d138b797637b1886dec5cf77c95501a8ebbce13f2d7cb
- SSDEEP 196608:zF8BFLZ9pYaJHnt4CjowvRaPLa+fuscEpYk1+1pHuye1MbN5TjP+QuYcexDCdXIh:p8BFWaht4C1vwjWsDd+Oy2M/jOY2dXIh
- TLSH
  T109A61296A77DF827E5B7D43287614242B4288C809302F7672605F1684FF7F849B8DEDA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

collection discovery persistence
- Queries information about running processes on the device
  Application may abuse the framework's APIs to collect information about running processes on the device.
  discovery
- Reads the content of SMS inbox messages.
  collection
behavioral1
- Target
  1.apk
- Size 791KB
- SHA256 f9af46d71aebc82f5f9b5553209a00f1b898c736615a8284a9c3d6f16fede865
- MD5 03a131c9c2ee5decf6c735bdff30c2e7
- SHA1 92c5043d65c4243d3c571a4091154b5bb1192585
- SHA512 ddca68c6a6749ffe3f5474d7b34831d1419fd53aea971d764c4a09be34c02c27e0a80c49efe3cd03419958a8506666ee84caefa9e7bc8ab7163426eb57327644
- SSDEEP 12288:5X6XhdRAsO6QJNITayfwR0/wv67Hbj8BpoDJRzGet6OezvbfmQwfK9SV:J6Xhdq2QJNQcqU6jsBoRz16hvbOt
- TLSH
  T1A305F1C6BB6EE92BD0B7E4328B56414378244C945245E3275613F2284FF7FC09F89EA9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2 behavioral3 behavioral4
- Target
  Alipay_msp_online.apk
- Size 807KB
- SHA256 3e72f2190781b298418fb4565226da71c601561c36f0886e0b36fb1789edf170
- MD5 8278f647e5f2b1d5562f808c09286df3
- SHA1 02e5f8313216bb37d3a0ecf560f5214f8a1203de
- SHA512 08581256076c51f63f4d78aa641d7de8e6df612f8637e7ea92cc9a3caf2d5c25b42fbec09155eb3512ed525218e43a196daa4e5162c3ada79f47372238c4d3bb
- SSDEEP 24576:vPxwd5op3wDDB8x4BOiwIX6QLfFDvWk8q99x5xNtf+L9d:v5Rp3wXBDB7wiXLZvP8cxff+pd
- TLSH
  T1B90512434B9994D5F0ABD871C26172522834AC557300FBE31288FA2B5FBADC95B35FCA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  com.skymobi.pay.tplugin_V3003.apk
- Size 447KB
- SHA256 e449ead95605a15be5c73e522e606dd8b2def15a594f4c0149ba72b4e799239b
- MD5 b9b595cda9a780a7c976af15bf6109cb
- SHA1 08f7d037903b6321e650da8f8fce8a39cc790a6b
- SHA512 6149e1ed0308226709fb86c889b34d56411de1e6941240a6a0589d70ff9574e0ecd91ea587085c182307a796b26b87096828478dca577b701ef1a6780408c961
- SSDEEP 12288:30XrnCtRlZ3kODQYRN808s14MVzuVLstXtQ:6rnCtHyODzuTs14MduGtQ
- TLSH
  T1FEA4D0627BDC591DF6F7CF3AAE3510895469FCC1A901D75E0010B80D8E7BB809B29BAD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8 behavioral9
- Target
  skymobi_pay_wxplugin_v1001.apk
- Size 26KB
- SHA256 6cb6a968ff95dad96112165c3f231a830a16b2e7a5915aadca43ad12675cfd7e
- MD5 72db21454af593d7b759cd5898fd2a2a
- SHA1 814b706004c1dfd43d12d3c6a6dacc7ea8dc008b
- SHA512 0cfcf5baf8a68d6237ad59c585b658a8bfffd9406b2b5ce15798c09c61ec5f495ed974e6eab65885dd3da766d2f6fbbca63aeb1e55d2779ebd22e2b07f871860
- SSDEEP 384:htiy/shmh0rdeM+c/DigAhrnZ0LnDHcz8ZeLbjEyUE3AHlz4tpTiu4UaKIDx4:htIkmdelcrPM281LbRUE3AK+nUaFF4
- TLSH
  T1A7C2C09EF788957BF9770C3DED783A8272797180F132267ED117541C4E85A856F06C88
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral11 behavioral12
- Target
  天柱10.apk.rename
- Size 9.9MB
- SHA256 1b73f379170cd92fe1a6a34df6f5d51e3633d01f13592bed752003047eda0d72
- MD5 25f787bee499406a6f9fdbfb53b0b38a
- SHA1 7b4a76dce12545bcc2cb5105d6d56bf4c275a125
- SHA512 237f24fc57b58d6c86e28195f256e58c06a78d53ed9e0bbaf94cce72848321d2477403881b5d575f18c1f2d2ff0fea46a5a9cbc86d3b719a532b5cef802e5ffe
- SSDEEP 196608:HF8BFLZ9pYaJHnt4CjowvRaPLa+fuscEpYk1+1pHuye1MbN5TjP+QuYcexDCdXIU:l8BFWaht4C1vwjWsDd+Oy2M/jOY2dXIU
- TLSH
  T101A61296A77DF827E5B7D43287614242B4288C809302F7672605F1684FF7F849B8DEDA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

collection discovery evasion persistence
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Queries information about running processes on the device
  Application may abuse the framework's APIs to collect information about running processes on the device.
  discovery
- Reads the content of SMS inbox messages.
  collection
- Acquires the wake lock
- Queries information about active data network
  discovery
- Queries information about the current Wi-Fi connection
  Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
  discovery
- Requests dangerous framework permissions
behavioral13
- Target
  1.apk
- Size 791KB
- SHA256 f9af46d71aebc82f5f9b5553209a00f1b898c736615a8284a9c3d6f16fede865
- MD5 03a131c9c2ee5decf6c735bdff30c2e7
- SHA1 92c5043d65c4243d3c571a4091154b5bb1192585
- SHA512 ddca68c6a6749ffe3f5474d7b34831d1419fd53aea971d764c4a09be34c02c27e0a80c49efe3cd03419958a8506666ee84caefa9e7bc8ab7163426eb57327644
- SSDEEP 12288:5X6XhdRAsO6QJNITayfwR0/wv67Hbj8BpoDJRzGet6OezvbfmQwfK9SV:J6Xhdq2QJNQcqU6jsBoRz16hvbOt
- TLSH
  T1A305F1C6BB6EE92BD0B7E4328B56414378244C945245E3275613F2284FF7FC09F89EA9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14 behavioral15 behavioral16
- Target
  Alipay_msp_online.apk
- Size 807KB
- SHA256 3e72f2190781b298418fb4565226da71c601561c36f0886e0b36fb1789edf170
- MD5 8278f647e5f2b1d5562f808c09286df3
- SHA1 02e5f8313216bb37d3a0ecf560f5214f8a1203de
- SHA512 08581256076c51f63f4d78aa641d7de8e6df612f8637e7ea92cc9a3caf2d5c25b42fbec09155eb3512ed525218e43a196daa4e5162c3ada79f47372238c4d3bb
- SSDEEP 24576:vPxwd5op3wDDB8x4BOiwIX6QLfFDvWk8q99x5xNtf+L9d:v5Rp3wXBDB7wiXLZvP8cxff+pd
- TLSH
  T1B90512434B9994D5F0ABD871C26172522834AC557300FBE31288FA2B5FBADC95B35FCA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  com.skymobi.pay.tplugin_V3003.apk
- Size 447KB
- SHA256 e449ead95605a15be5c73e522e606dd8b2def15a594f4c0149ba72b4e799239b
- MD5 b9b595cda9a780a7c976af15bf6109cb
- SHA1 08f7d037903b6321e650da8f8fce8a39cc790a6b
- SHA512 6149e1ed0308226709fb86c889b34d56411de1e6941240a6a0589d70ff9574e0ecd91ea587085c182307a796b26b87096828478dca577b701ef1a6780408c961
- SSDEEP 12288:30XrnCtRlZ3kODQYRN808s14MVzuVLstXtQ:6rnCtHyODzuTs14MduGtQ
- TLSH
  T1FEA4D0627BDC591DF6F7CF3AAE3510895469FCC1A901D75E0010B80D8E7BB809B29BAD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20 behavioral21
- Target
  skymobi_pay_wxplugin_v1001.apk
- Size 26KB
- SHA256 6cb6a968ff95dad96112165c3f231a830a16b2e7a5915aadca43ad12675cfd7e
- MD5 72db21454af593d7b759cd5898fd2a2a
- SHA1 814b706004c1dfd43d12d3c6a6dacc7ea8dc008b
- SHA512 0cfcf5baf8a68d6237ad59c585b658a8bfffd9406b2b5ce15798c09c61ec5f495ed974e6eab65885dd3da766d2f6fbbca63aeb1e55d2779ebd22e2b07f871860
- SSDEEP 384:htiy/shmh0rdeM+c/DigAhrnZ0LnDHcz8ZeLbjEyUE3AHlz4tpTiu4UaKIDx4:htIkmdelcrPM281LbRUE3AK+nUaFF4
- TLSH
  T1A7C2C09EF788957BF9770C3DED783A8272797180F132267ED117541C4E85A856F06C88
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral22 behavioral23 behavioral24
- Target
  天柱11.apk.rename
- Size 9.9MB
- SHA256 ec70150a5fd7195635e24bb8fe1d5a92a22438ff702d806b7a015a7820d02c1d
- MD5 4df7b2750c998da8582ebae7c8933e8d
- SHA1 33fd4f48e318bd6e57a901c338653468ea7545d1
- SHA512 520d87414e227bf63a87f3f4671e9c754c4fe6bfe93d102f20a55efcd19818c23407f74c084c6d62257a893226b54601593b45106f200af225c312375785cff2
- SSDEEP 196608:0F8BFLZ9pYaJHnt4CjowvRaPLa+fuscEpYk1+1pHuye1MbN5TjP+QuYcexDCdXIk:a8BFWaht4C1vwjWsDd+Oy2M/jOY2dXIk
- TLSH
  T127A61296A77DF827E5B7D43287614242B4288C809302F7672605F1684FF7F849B8DEDA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

collection discovery evasion persistence
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Queries information about running processes on the device
  Application may abuse the framework's APIs to collect information about running processes on the device.
  discovery
- Reads the content of SMS inbox messages.
  collection
- Acquires the wake lock
- Queries information about active data network
  discovery
- Queries information about the current Wi-Fi connection
  Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
  discovery
- Requests dangerous framework permissions
behavioral25
- Target
  1.apk
- Size 791KB
- SHA256 f9af46d71aebc82f5f9b5553209a00f1b898c736615a8284a9c3d6f16fede865
- MD5 03a131c9c2ee5decf6c735bdff30c2e7
- SHA1 92c5043d65c4243d3c571a4091154b5bb1192585
- SHA512 ddca68c6a6749ffe3f5474d7b34831d1419fd53aea971d764c4a09be34c02c27e0a80c49efe3cd03419958a8506666ee84caefa9e7bc8ab7163426eb57327644
- SSDEEP 12288:5X6XhdRAsO6QJNITayfwR0/wv67Hbj8BpoDJRzGet6OezvbfmQwfK9SV:J6Xhdq2QJNQcqU6jsBoRz16hvbOt
- TLSH
  T1A305F1C6BB6EE92BD0B7E4328B56414378244C945245E3275613F2284FF7FC09F89EA9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral26 behavioral27 behavioral28
- Target
  Alipay_msp_online.apk
- Size 807KB
- SHA256 3e72f2190781b298418fb4565226da71c601561c36f0886e0b36fb1789edf170
- MD5 8278f647e5f2b1d5562f808c09286df3
- SHA1 02e5f8313216bb37d3a0ecf560f5214f8a1203de
- SHA512 08581256076c51f63f4d78aa641d7de8e6df612f8637e7ea92cc9a3caf2d5c25b42fbec09155eb3512ed525218e43a196daa4e5162c3ada79f47372238c4d3bb
- SSDEEP 24576:vPxwd5op3wDDB8x4BOiwIX6QLfFDvWk8q99x5xNtf+L9d:v5Rp3wXBDB7wiXLZvP8cxff+pd
- TLSH
  T1B90512434B9994D5F0ABD871C26172522834AC557300FBE31288FA2B5FBADC95B35FCA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  com.skymobi.pay.tplugin_V3003.apk
- Size 447KB
- SHA256 e449ead95605a15be5c73e522e606dd8b2def15a594f4c0149ba72b4e799239b
- MD5 b9b595cda9a780a7c976af15bf6109cb
- SHA1 08f7d037903b6321e650da8f8fce8a39cc790a6b
- SHA512 6149e1ed0308226709fb86c889b34d56411de1e6941240a6a0589d70ff9574e0ecd91ea587085c182307a796b26b87096828478dca577b701ef1a6780408c961
- SSDEEP 12288:30XrnCtRlZ3kODQYRN808s14MVzuVLstXtQ:6rnCtHyODzuTs14MduGtQ
- TLSH
  T1FEA4D0627BDC591DF6F7CF3AAE3510895469FCC1A901D75E0010B80D8E7BB809B29BAD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

Process Discovery

T1424

System Information Discovery

T1426

System Network Connections Discovery

T1421

Lateral Movement

Collection

Protected User Data

T1636

SMS Messages

T1636.004

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Queries information about running processes on the device

Reads the content of SMS inbox messages.

Loads dropped Dex/Jar

Queries information about running processes on the device

Reads the content of SMS inbox messages.

Acquires the wake lock

Queries information about active data network

Queries information about the current Wi-Fi connection

Requests dangerous framework permissions

Loads dropped Dex/Jar

Queries information about running processes on the device

Reads the content of SMS inbox messages.

Acquires the wake lock

Queries information about active data network

Queries information about the current Wi-Fi connection

Requests dangerous framework permissions

MITRE ATT&CK Mobile v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32