5fa9f3e07b8f267944220c597e74b79d883087ee1bcfefaf7e35e9671934550c

General

Target
5fa9f3e07b8f267944220c597e74b79d883087ee1bcfefaf7e35e9671934550c.apk
Size 40.9MB
Sample261005-ppd94ssfjd
SHA256 5fa9f3e07b8f267944220c597e74b79d883087ee1bcfefaf7e35e9671934550c
MD5 df95fa487c3a75f61a9dd7dccf5e4caa
SHA1 5256e5c6a23b1ab11a643c9c034cdf50eff2d59f
SHA512 e1b6eb1f423155b7572b641d526ec8da83a2630c6bec904f5223c05da15e5a709863c12a52205d8c2475c83a414499c10314c0e2169d79c1d19719001532c3a5
SSDEEP 786432:JpSApkbtFGR5UwHqEnTmHM1fgkjUeKeVqfbZsx8Nec:J4AOb3GR5UkndAeNWs8Nec
TLSH
T1AF97BEA5F70D9425F9C6B03C7DBE8A50F22E3C8CC68AA2471411B279E9736F03765693
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  5fa9f3e07b8f267944220c597e74b79d883087ee1bcfefaf7e35e9671934550c.apk
- Size 40.9MB
- SHA256 5fa9f3e07b8f267944220c597e74b79d883087ee1bcfefaf7e35e9671934550c
- MD5 df95fa487c3a75f61a9dd7dccf5e4caa
- SHA1 5256e5c6a23b1ab11a643c9c034cdf50eff2d59f
- SHA512 e1b6eb1f423155b7572b641d526ec8da83a2630c6bec904f5223c05da15e5a709863c12a52205d8c2475c83a414499c10314c0e2169d79c1d19719001532c3a5
- SSDEEP 786432:JpSApkbtFGR5UwHqEnTmHM1fgkjUeKeVqfbZsx8Nec:J4AOb3GR5UkndAeNWs8Nec
- TLSH
  T1AF97BEA5F70D9425F9C6B03C7DBE8A50F22E3C8CC68AA2471411B279E9736F03765693
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  update.apk
- Size 31.6MB
- SHA256 923de6e7f5cba83122c38553c55c53d700425faf3ae483fc52855773c2204e9c
- MD5 beb3f5c500bac41a2fc840dad23a6c41
- SHA1 ce3c6a4a697b9e49bc4c2b63a9f36ef83be92932
- SHA512 756aad0775427b519828d4c945f59eae9da981ab83ab99cbdb4c470ac0e892b336d1bb7bf21996cf894b597ba59ee48a7dce8509f44ab80bf6931acbc242a8ff
- SSDEEP 393216:sRqEnOSmHQc2h1fgkjUQX9uleeQMZhpHDnZs6+8fVe8:kqEnTmHM1fgkjUeKeVqfbZsx8Ne8
- TLSH
  T1D6778CA5F70D9425F9C6B03C7DBE8A50F22E3C8CC689B2461011B279E9B36F07765693
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

collection credential_access defense_evasion discovery evasion execution impact persistence
- Checks Android system properties for emulator presence.
  defense_evasion
- Makes use of the framework's Accessibility service
  Retrieves information displayed on the phone screen using AccessibilityService.
  collection defense_evasion credential_access
- Obtains sensitive information copied to the device clipboard
  Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
  collection credential_access impact
- Queries account information for other applications stored on the device
  Application may abuse the framework's APIs to collect account information stored on the device.
  collection
- Acquires the wake lock
- Performs UI accessibility actions on behalf of the user
  Application may abuse the accessibility service to prevent their removal.
  evasion
- Reads information about phone network operator.
  discovery
- Listens for changes in the sensor environment (might be used to detect emulation)
  defense_evasion
behavioral2