f9ad56582ff937e19e89d1aef98970d5c06a986529690b7d38a340ff851dc820

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.lb.87d1e8371017a2bf1c9003f0bc29ba1a
Size 9.0MB
Sample261012-2z3rnsssbs
SHA256 f9ad56582ff937e19e89d1aef98970d5c06a986529690b7d38a340ff851dc820
MD5 87d1e8371017a2bf1c9003f0bc29ba1a
SHA1 71092b0745ee8b944a2886720f44af6ecca42159
SHA512 faba7b1fe904eb99b037fe7ea80eeff82ed130d8bcd8d36afab9c156b75ddf321176384368f1eedb9bd3a32b210f21148adfb6c0194ba05f2ec5dd761e3b057b
SSDEEP 196608:9o7Go9tgEVelq19UJLvUVNJOuWVYCY7JFadiNY07cCNCZWs+j3j+h:Ctd0lq1yJLCNQuWV8kd8F8sxrG
TLSH
T11B9623C27F90C854F0186B7452EF4125DB772EC08A2099DB394DB2395FF3EA85B5C1AA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.lb.87d1e8371017a2bf1c9003f0bc29ba1a
- Size 9.0MB
- SHA256 f9ad56582ff937e19e89d1aef98970d5c06a986529690b7d38a340ff851dc820
- MD5 87d1e8371017a2bf1c9003f0bc29ba1a
- SHA1 71092b0745ee8b944a2886720f44af6ecca42159
- SHA512 faba7b1fe904eb99b037fe7ea80eeff82ed130d8bcd8d36afab9c156b75ddf321176384368f1eedb9bd3a32b210f21148adfb6c0194ba05f2ec5dd761e3b057b
- SSDEEP 196608:9o7Go9tgEVelq19UJLvUVNJOuWVYCY7JFadiNY07cCNCZWs+j3j+h:Ctd0lq1yJLCNQuWV8kd8F8sxrG
- TLSH
  T11B9623C27F90C854F0186B7452EF4125DB772EC08A2099DB394DB2395FF3EA85B5C1AA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

banker collection defense_evasion discovery evasion persistence
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
  banker discovery
- Queries the phone number (MSISDN for GSM devices)
  discovery
- Reads the content of SMS inbox messages.
  collection
- Requests cell location
  Uses Android APIs to to get current cell location.
  collection discovery defense_evasion
- Domain associated with commercial stalkerware software, includes indicators from echap.eu.org
- Queries information about active data network
  discovery
- Queries information about the current Wi-Fi connection
  Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
  discovery
- Queries the mobile country code (MCC)
  discovery
- Reads information about phone network operator.
  discovery
behavioral1
- Target
  lyhtgh.mn.ltplugin_v1017.pl
- Size 145KB
- SHA256 4981873b2137cb7761e11044e5b2477d2c077143c32eb72db2118012fb13246f
- MD5 4613058b3a523b5fc940226cb7751532
- SHA1 d15d1c99db0efc19a2511339cbef90aebbb7dcaa
- SHA512 7f3b28207a57a1b43ac266b58ad2965aaaf5102bec0503d0533dba33af3f5722a278a036e9e5b33f4c55165db4e26ef88f815785277530051381c11e0552f3f6
- SSDEEP 3072:XKxp6tNTdMXTy5AZOW4V6qSXh67nYTXg8icbRJL4:X0q1d4TyIOv7ag8pRJL4
- TLSH
  T1D7E32345A3CC6732F0B245BCD7367C5B0D68F998F7A666DD013021881C1DB19ABA8FB9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2 behavioral3 behavioral4
- Target
  lyhtgh.mn.ltplugin_v1020.pl
- Size 121KB
- SHA256 68c0f09eda956d686a66d1e272ac1925ea1526fbd584b3d8e9e5ebd10c01ab3e
- MD5 955e7f36ad2b5732fd1561f82e353b2d
- SHA1 a9375d0ac955dcd7569636734172f00ed27a4d9e
- SHA512 b7a83da45dc6cefc4f9a64d05039c2503553bf9714d09d95230d9d86a262cf58456818f968dfc2acb4eeb8ddf9f647b2b43213866338d597804109dbeae5b2c6
- SSDEEP 3072:96v2lB+dJlxnm9i4ViGeuDrmKYU7RbGm1SblVp:I2X+dJlsk4ViGzsU7ZV1S
- TLSH
  T105C3120EE6D0B25EF0DB5E3E6C6A25DAD88E3B704045D79D2D0600DE6DCDDD4EA34A90
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6 behavioral7
- Target
  sr_alipay_5.1.0.apk
- Size 748KB
- SHA256 76a24f83ad15586ff9a2081e420a707be9ddb0b5047e5b6de5974c41624ff2c1
- MD5 d06ea38e4210a87d6b96f8b0491df677
- SHA1 3ba573396398757088e559a9d372049a377eb05a
- SHA512 3d43e5bfad2b703a804a53048b6a88228a11fb80ac641d6594f774cc07f6c7367e0ee80b29966d02c9206542f467f55b0f1ddbbfef0ec372256314a7d1071f30
- SSDEEP 12288:IjRAsoln+WMB1EgrGERh4xWgtSM7vXrRCn4I5p2Cnfv:IjRApZ+WM7yER61P7jw4IGSfv
- TLSH
  T1F2F41213971896A1F02BE971835A766224248C406350EBE323C5F63A5FFFDC56B35BCA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8 behavioral9