8414d8a39a220a2d42994a9d6c1aea578c0a2ddddbe9fd2057d16ebc76255f09

General

Target
8414d8a39a220a2d42994a9d6c1aea578c0a2ddddbe9fd2057d16ebc76255f09
Size 14.0MB
Sample260826-kmclaaar8v
SHA256 8414d8a39a220a2d42994a9d6c1aea578c0a2ddddbe9fd2057d16ebc76255f09
MD5 12df450d037c0579ee0add112ed0b335
SHA1 2d3b181e7be408cd0e60d25be127f3487025684e
SHA512 3c5a40da6830f9dc3b29e1d0b1a5670eebfa851a80a47deb8d1af57d8df3623b91aa74a22375682460e54bce90aefc4d9832f09449b787496574f2d517c81969
SSDEEP 393216:DX/sYQSUrdsEyq4IgjgvJVFFjP0Wwbsd2JukbvZNXuK:D/s1rdsHQgUvJVFFjP72HXuK
TLSH
T1BDE633A2F7C1182CE7B742F5817A12297765AD15C393C60FBA28317C78F7EE02A548E5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  8414d8a39a220a2d42994a9d6c1aea578c0a2ddddbe9fd2057d16ebc76255f09
- Size 14.0MB
- SHA256 8414d8a39a220a2d42994a9d6c1aea578c0a2ddddbe9fd2057d16ebc76255f09
- MD5 12df450d037c0579ee0add112ed0b335
- SHA1 2d3b181e7be408cd0e60d25be127f3487025684e
- SHA512 3c5a40da6830f9dc3b29e1d0b1a5670eebfa851a80a47deb8d1af57d8df3623b91aa74a22375682460e54bce90aefc4d9832f09449b787496574f2d517c81969
- SSDEEP 393216:DX/sYQSUrdsEyq4IgjgvJVFFjP0Wwbsd2JukbvZNXuK:D/s1rdsHQgUvJVFFjP72HXuK
- TLSH
  T1BDE633A2F7C1182CE7B742F5817A12297765AD15C393C60FBA28317C78F7EE02A548E5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion evasion
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Requests allowing to install additional applications from unknown sources.
  defense_evasion
behavioral1 behavioral2 behavioral3
- Target
  chestnuts.apk
- Size 11.0MB
- SHA256 e1be96df8e46cceefb00805a033fc8e8a5335a2fa9d2a60d77f44d4a61bd2f97
- MD5 5663b492fcb85d8da77545b9e7c306b5
- SHA1 b66ed3fd464cbcd47f1e404c5ecfe31da09ad8f3
- SHA512 ce375d0a04d7859e19f00ef2de05792b23b3ecbbc14ee36d6a653bcd742257ff778ae3c589ad056fdcfd268106d3fa18638424976dadd06ae44513327f9c0a92
- SSDEEP 196608:Q9YtrD048tDbsLIAThLRCeahHS8M2iNTnLGnW2ozUFWNGVi9dU4VkYlVMF:0CD048VbaThLRCej8M2iNGFoVGY9BVFe
- TLSH
  T1E0C612543BC46E2DC63700F28C4A61753B5A5C159753CA4BBD28361C78B7EF80EA8EDA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

banker collection credential_access defense_evasion discovery evasion
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Makes use of the framework's Accessibility service
  Retrieves information displayed on the phone screen using AccessibilityService.
  collection defense_evasion credential_access
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
  banker discovery
- Queries information about running processes on the device
  Application may abuse the framework's APIs to collect information about running processes on the device.
  discovery
- Acquires the wake lock
- Performs UI accessibility actions on behalf of the user
  Application may abuse the accessibility service to prevent their removal.
  evasion
- Reads information about phone network operator.
  discovery
- Requests disabling of battery optimizations (often used to enable hiding in the background).
  defense_evasion
behavioral4