066a15328d08419183c524f45d2cce37f7b3bdfd97904e8902ea52710ca09a15

General

Target
Premium_0.39.2.apk
Size 3.8MB
Sample260825-1nwcsaba32
SHA256 066a15328d08419183c524f45d2cce37f7b3bdfd97904e8902ea52710ca09a15
MD5 d7c7eb45c79fcec822126f2fcae05a66
SHA1 629c6658c98610bcd8c43de63bcc10b0cb9c5a92
SHA512 de09cfa64936c2daa4698cfc1310210d1b392753c1d388de3653987d0b2531d7ed8ea619dbcf81992225c8c018362e2dc018dfc4a143426a4704d1eaa7d02f84
SSDEEP 98304:m2fgqgY86GbdrxaD9K3j81KiupWBdZzbH:4sTGbdSI3jOukLFT
TLSH
T1D116E002AB969F5DC87F81310CAE47603235ED55A743839B642876B86F6BAF40FC53D8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  Premium_0.39.2.apk
- Size 3.8MB
- SHA256 066a15328d08419183c524f45d2cce37f7b3bdfd97904e8902ea52710ca09a15
- MD5 d7c7eb45c79fcec822126f2fcae05a66
- SHA1 629c6658c98610bcd8c43de63bcc10b0cb9c5a92
- SHA512 de09cfa64936c2daa4698cfc1310210d1b392753c1d388de3653987d0b2531d7ed8ea619dbcf81992225c8c018362e2dc018dfc4a143426a4704d1eaa7d02f84
- SSDEEP 98304:m2fgqgY86GbdrxaD9K3j81KiupWBdZzbH:4sTGbdSI3jOukLFT
- TLSH
  T1D116E002AB969F5DC87F81310CAE47603235ED55A743839B642876B86F6BAF40FC53D8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

defense_evasion
- Requests allowing to install additional applications from unknown sources.
  defense_evasion
- Requests dangerous framework permissions
behavioral1
- Target
  payload.apk
- Size 4.0MB
- SHA256 aa41c05f13986d2487a158415c086e6f17526cfb6fa2ce3ad47a0f2e214bf078
- MD5 b134f3f41e699c41c78929c4863c7526
- SHA1 0588d57b0fe1d62c2e08d6e7b14b7a1aedf6a9f3
- SHA512 6982de0de8e689f685b9c50ec6068f1afcc54f31095ed7b44f52504ec878fd4e499f0efc07eafec0f806f9c938382fa0a60416152a2a3b98c4d88602bab3da38
- SSDEEP 49152:LOaogyQazKALmi4CPJVIe+hn1I8pKNMjAevDHMubEdFNdAh:LMNQazKALmi7PJVhBCEdFo
- TLSH
  T15416AE67A6119E61C46E5B3C44B60F55A738AED2FE430307604CB9E86FB35E067CA7C2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

banker discovery execution impact persistence
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
  banker discovery
- Acquires the wake lock
- Queries information about active data network
  discovery
behavioral2