70b37ae7b2a87dec45697b55e29239de347e7e54e4e216636bca61a8fbef8aed

Sharing

Copy URL Twitter E-mail

General

Target
signed.apk
Size 111KB
Sample260906-vx2chadq9x
SHA256 70b37ae7b2a87dec45697b55e29239de347e7e54e4e216636bca61a8fbef8aed
MD5 032974825a7b701400a6e58e73e07d34
SHA1 9d8bc1b226250753f074ac644f5581f1608c2d48
SHA512 70c409637035c23b2b490f0a0cda28a61075f719671feab7418d66f8c913b0a744ac1961ff8715aa2a511367f6001a17ca4bc2f01b5c8323b0fb3882f7cf6a94
SSDEEP 3072:CvyOolfJawLLZx37fzOvnlytF8w4viD+f8A6B3WDrH:Ck9JamLknlytqwmv6NWvH
TLSH
T1EFB312BB6BA7DC83D00B863CC28BB5026B20D51805E0A242036B4A5D4DDEDF52FCBD9D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  signed.apk
- Size 111KB
- SHA256 70b37ae7b2a87dec45697b55e29239de347e7e54e4e216636bca61a8fbef8aed
- MD5 032974825a7b701400a6e58e73e07d34
- SHA1 9d8bc1b226250753f074ac644f5581f1608c2d48
- SHA512 70c409637035c23b2b490f0a0cda28a61075f719671feab7418d66f8c913b0a744ac1961ff8715aa2a511367f6001a17ca4bc2f01b5c8323b0fb3882f7cf6a94
- SSDEEP 3072:CvyOolfJawLLZx37fzOvnlytF8w4viD+f8A6B3WDrH:Ck9JamLknlytqwmv6NWvH
- TLSH
  T1EFB312BB6BA7DC83D00B863CC28BB5026B20D51805E0A242036B4A5D4DDEDF52FCBD9D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

execution collection credential_access defense_evasion discovery evasion persistence
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Makes use of the framework's Accessibility service
  Retrieves information displayed on the phone screen using AccessibilityService.
  collection defense_evasion credential_access
- Acquires the wake lock
- Makes use of the framework's foreground persistence service
  Application may abuse the framework's foreground service to continue running in the foreground.
  defense_evasion persistence
- Performs UI accessibility actions on behalf of the user
  Application may abuse the accessibility service to prevent their removal.
  evasion
- Queries the mobile country code (MCC)
  discovery
- Requests disabling of battery optimizations (often used to enable hiding in the background).
  defense_evasion
behavioral1 behavioral10 behavioral11 behavioral12 behavioral13 behavioral14 behavioral15 behavioral16 behavioral17 behavioral18 behavioral19 behavioral2 behavioral20 behavioral3 behavioral4 behavioral5 behavioral6 behavioral7 behavioral8 behavioral9