88a4a61d38ecb295ae6a31b6cbfae900952159b38285a261029d3f09e42d794c

General

Target
Forest_v5.3.1_Mod_By_RBMods_ROCKMODS.apk
Size 228.7MB
Sample260930-m1apysyzct
SHA256 88a4a61d38ecb295ae6a31b6cbfae900952159b38285a261029d3f09e42d794c
MD5 cf0ebbc88d9de9839f2c929b880a38d9
SHA1 4aaa20aac08468d2b09711e2d06640c54c2adf93
SHA512 57a77ce5fd0a0e769db1dc2b0f0f78ebabd6883a972de760f1c20eaf67468fc2f46ec6ea1c7f425e23bd710b5f7cc2426aca0b67c0546ed1251d7676424c48fc
SSDEEP 6291456:zxn5aWpW6ACTNJwxprep8fo4q4dbNDZaS:dnMCTNJwxpeKfthND8S
TLSH
T146B82303F34BA825D8F1A434855F3376B2152C9853A5D2E35905F6A46EF36E0BE3ABD0
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  Forest_v5.3.1_Mod_By_RBMods_ROCKMODS.apk
- Size 228.7MB
- SHA256 88a4a61d38ecb295ae6a31b6cbfae900952159b38285a261029d3f09e42d794c
- MD5 cf0ebbc88d9de9839f2c929b880a38d9
- SHA1 4aaa20aac08468d2b09711e2d06640c54c2adf93
- SHA512 57a77ce5fd0a0e769db1dc2b0f0f78ebabd6883a972de760f1c20eaf67468fc2f46ec6ea1c7f425e23bd710b5f7cc2426aca0b67c0546ed1251d7676424c48fc
- SSDEEP 6291456:zxn5aWpW6ACTNJwxprep8fo4q4dbNDZaS:dnMCTNJwxpeKfthND8S
- TLSH
  T146B82303F34BA825D8F1A434855F3376B2152C9853A5D2E35905F6A46EF36E0BE3ABD0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

collection credential_access defense_evasion discovery evasion execution impact persistence phishing
- Checks if the Android device is rooted.
  defense_evasion
- A potential corporate email address has been identified in the URL
  phishing
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Obtains sensitive information copied to the device clipboard
  Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
  collection credential_access impact
- Queries information about running processes on the device
  Application may abuse the framework's APIs to collect information about running processes on the device.
  discovery
- Acquires the wake lock
- Queries information about active data network
  discovery
- Queries the mobile country code (MCC)
  discovery
- Reads information about phone network operator.
  discovery
- Checks the presence of a debugger
  defense_evasion
- Listens for changes in the sensor environment (might be used to detect emulation)
  defense_evasion
behavioral1