5da0f3299b2c3b703c84e4c2c80e3619d10c3da8c05c962de0d966ce3f578df0

General

Target
app.apk
Size 19.6MB
Sample260922-phfvcsvfnc
SHA256 5da0f3299b2c3b703c84e4c2c80e3619d10c3da8c05c962de0d966ce3f578df0
MD5 17862d7dbe0e9e92b775e1536b4d19fe
SHA1 0eec319835814c697599dbd777895b07949f28bb
SHA512 1bf4dd465079e0f553e5c0bb13efc3edc11c0784d3f6ea9eb391cadeac798ebc8127cda668929969b027637494f2a101cf7a0de0d8f3e31cc6db68e3c0b09bd6
SSDEEP 393216:rr0Gm5b1CcMLRbMEr8G4+ujF1mhMFytwHgU:Lm1dGGjF1maF5T
TLSH
T16C272346FBD86E1EDC3740324B9A53359A09BE26C742CB47D964371C793BAE00E853E9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  app.apk
- Size 19.6MB
- SHA256 5da0f3299b2c3b703c84e4c2c80e3619d10c3da8c05c962de0d966ce3f578df0
- MD5 17862d7dbe0e9e92b775e1536b4d19fe
- SHA1 0eec319835814c697599dbd777895b07949f28bb
- SHA512 1bf4dd465079e0f553e5c0bb13efc3edc11c0784d3f6ea9eb391cadeac798ebc8127cda668929969b027637494f2a101cf7a0de0d8f3e31cc6db68e3c0b09bd6
- SSDEEP 393216:rr0Gm5b1CcMLRbMEr8G4+ujF1mhMFytwHgU:Lm1dGGjF1maF5T
- TLSH
  T16C272346FBD86E1EDC3740324B9A53359A09BE26C742CB47D964371C793BAE00E853E9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

collection credential_access defense_evasion discovery execution impact persistence
- Makes use of the framework's Accessibility service
  Retrieves information displayed on the phone screen using AccessibilityService.
  collection defense_evasion credential_access
- Obtains sensitive information copied to the device clipboard
  Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
  collection credential_access impact
- Queries account information for other applications stored on the device
  Application may abuse the framework's APIs to collect account information stored on the device.
  collection
- Acquires the wake lock
- Makes use of the framework's foreground persistence service
  Application may abuse the framework's foreground service to continue running in the foreground.
  defense_evasion persistence
- Queries information about active data network
  discovery
- Queries information about the current Wi-Fi connection
  Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
  discovery
behavioral1