38b4f891736ecbb8962b9fb25adabc38e559a6ad3f55545a812dbf5987f5af70

General

Target
com_spookyhousestudios_progressbar95_1_1110-380_4arch_7dpi_24lang_1feat_edcea68c0de952fcfc48c33958cd4fcd_apkmirror_com_N_A_APKPure.apk
Size 141.6MB
Sample261008-xecbrscv4l
SHA256 38b4f891736ecbb8962b9fb25adabc38e559a6ad3f55545a812dbf5987f5af70
MD5 e569d09497bcca1ae6e9cf03dd1d6f79
SHA1 0d5e679b6b5d0bcb60cbcd98f81160694dc9d21b
SHA512 2ff007535f4e6fa32b9d19237376fc4d2cbe5d223ee9eda7e3aae3f329f14fc3f9dad8872ff22f65f88c5dbb6980ea0d76a545367669ddbd9e3eba97d8856fb5
SSDEEP 3145728:+BvQ4Jt8miWGo425pedZ8vYL5OtIeXP6RnkndJk5CJv3rQsSnZh6ArBiD2aPVTvS:+B44Jt8miWGo425pedZ8vYL5OtIeXP6j
TLSH
T1E2682346F70908B9C9A3A534624B4333EB267C464225C56F6924F9247EFBF906F1E7B0
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  com_spookyhousestudios_progressbar95_1_1110-380_4arch_7dpi_24lang_1feat_edcea68c0de952fcfc48c33958cd4fcd_apkmirror_com_N_A_APKPure.apk
- Size 141.6MB
- SHA256 38b4f891736ecbb8962b9fb25adabc38e559a6ad3f55545a812dbf5987f5af70
- MD5 e569d09497bcca1ae6e9cf03dd1d6f79
- SHA1 0d5e679b6b5d0bcb60cbcd98f81160694dc9d21b
- SHA512 2ff007535f4e6fa32b9d19237376fc4d2cbe5d223ee9eda7e3aae3f329f14fc3f9dad8872ff22f65f88c5dbb6980ea0d76a545367669ddbd9e3eba97d8856fb5
- SSDEEP 3145728:+BvQ4Jt8miWGo425pedZ8vYL5OtIeXP6RnkndJk5CJv3rQsSnZh6ArBiD2aPVTvS:+B44Jt8miWGo425pedZ8vYL5OtIeXP6j
- TLSH
  T1E2682346F70908B9C9A3A534624B4333EB267C464225C56F6924F9247EFBF906F1E7B0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

collection credential_access defense_evasion discovery evasion execution impact persistence
- Checks if the Android device is rooted.
  defense_evasion
- Checks Android system properties for emulator presence.
  defense_evasion
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Obtains sensitive information copied to the device clipboard
  Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
  collection credential_access impact
- Queries information about running processes on the device
  Application may abuse the framework's APIs to collect information about running processes on the device.
  discovery
- Acquires the wake lock
- Queries information about active data network
  discovery
- Reads information about phone network operator.
  discovery
- Listens for changes in the sensor environment (might be used to detect emulation)
  defense_evasion
behavioral1