c90b9a0e3b9cfd75d9b4679e7ff32f6fb343269be4f760ef62b1e0ebc2bc47fe

General

Target
jaffacakes118_c90b9a0e3b9cfd75d9b4679e7ff32f6fb343269be4f760ef62b1e0ebc2bc47fe.bin
Size 23.9MB
Sample260910-gzyshassct
SHA256 c90b9a0e3b9cfd75d9b4679e7ff32f6fb343269be4f760ef62b1e0ebc2bc47fe
MD5 1bb5f58e19c303d74d0f39bc6f662634
SHA1 c36905bfd6f3cd720b5ab4310f38064843724a00
SHA512 35d689a6251a528e1d93c12b8b0d0ac69e7a111be4e851608c75cb0924358b1b261f450280b828d0d9b7c9d985ea12863cf08ab7ebc84f51a773633aaa58c5c2
SSDEEP 393216:vM7cZ8CtxjjXNy2nxWdelBv9f0lP393FQBEWw2n+yuAOdG:UoZBj9yaWd89UPtFQBPln9uDdG
TLSH
T12647DF1EDCC4DE31E9A2077705058BB2E2771C5ACBEA87422343FE3E297650767A1D86
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  jaffacakes118_c90b9a0e3b9cfd75d9b4679e7ff32f6fb343269be4f760ef62b1e0ebc2bc47fe.bin
- Size 23.9MB
- SHA256 c90b9a0e3b9cfd75d9b4679e7ff32f6fb343269be4f760ef62b1e0ebc2bc47fe
- MD5 1bb5f58e19c303d74d0f39bc6f662634
- SHA1 c36905bfd6f3cd720b5ab4310f38064843724a00
- SHA512 35d689a6251a528e1d93c12b8b0d0ac69e7a111be4e851608c75cb0924358b1b261f450280b828d0d9b7c9d985ea12863cf08ab7ebc84f51a773633aaa58c5c2
- SSDEEP 393216:vM7cZ8CtxjjXNy2nxWdelBv9f0lP393FQBEWw2n+yuAOdG:UoZBj9yaWd89UPtFQBPln9uDdG
- TLSH
  T12647DF1EDCC4DE31E9A2077705058BB2E2771C5ACBEA87422343FE3E297650767A1D86
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery evasion persistence collection credential_access impact
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Obtains sensitive information copied to the device clipboard
  Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
  collection credential_access impact
- Queries the mobile country code (MCC)
  discovery
behavioral1 behavioral2 behavioral3
- Target
  1_b24a19fba4.mkv
- Size 16.5MB
- SHA256 b141cbaa1ee609ef7c7bb8368703a0e413dc1418804a6931a4025ff868046227
- MD5 da0581ee9794374f620977ec9ad2aae6
- SHA1 8581a148970410b1074d58ce2a378f18907db220
- SHA512 83cf8042c4455863191bf09d17a168f19abf211a12d35424d928e1e19c10c1ea4871c9e4f570b02e8ed6a64b4e7cf3bb1c4da24035cc950de0e5a1401803ab8b
- SSDEEP 196608:dWdelB489fHUUe/iY3C9ek6no9LaQBEWw3Gn+ym/O:dWdelBv9f0lP393FQBEWw2n+yN
- TLSH
  T11E07AF1EDCC4DE31E8A2077705158BB6E277185ECBEB97822343EE3E394650763A1D86
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery evasion impact persistence
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Queries information about running processes on the device
  Application may abuse the framework's APIs to collect information about running processes on the device.
  discovery
- Queries the phone number (MSISDN for GSM devices)
  discovery
- Acquires the wake lock
- Makes use of the framework's foreground persistence service
  Application may abuse the framework's foreground service to continue running in the foreground.
  defense_evasion persistence
- Requests disabling of battery optimizations (often used to enable hiding in the background).
  defense_evasion
behavioral4 behavioral5 behavioral6