332145b99c451e38656653be8a17f806dabfb46d9f010a4ef6fc524aa5e05474

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.Skymobi.b.94cff4c667f14b1b9e2937ae1d9e7ae9
Size 4.6MB
Sample261012-3rperahs6s
SHA256 332145b99c451e38656653be8a17f806dabfb46d9f010a4ef6fc524aa5e05474
MD5 94cff4c667f14b1b9e2937ae1d9e7ae9
SHA1 fa64f5856468450ab62643b04f81ad5138a6aad2
SHA512 99643d67f21295d7e88d48de691714c9c7a377484d62f36c5e8f4542a0b091aa4f74568e2737a7c6f89a4c5ffd1f2ae31fc0a41f6d632b933a82f0458f075c98
SSDEEP 98304:OjrPhUF5j12zsZzr4qv3bgCVKwavtgfrVO23KgSr5jmgVt8NVD5bcV895N/:OjrJQ12z4rDbgCVKwaUVOSij6fP95N/
TLSH
T1D12633C9AA70A49AF4776173C379C2375E62BF529A60E8EF325F72490F736000B55B60
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

android persistence

Malware Config

Targets

- Target
  jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.Skymobi.b.94cff4c667f14b1b9e2937ae1d9e7ae9
- Size 4.6MB
- SHA256 332145b99c451e38656653be8a17f806dabfb46d9f010a4ef6fc524aa5e05474
- MD5 94cff4c667f14b1b9e2937ae1d9e7ae9
- SHA1 fa64f5856468450ab62643b04f81ad5138a6aad2
- SHA512 99643d67f21295d7e88d48de691714c9c7a377484d62f36c5e8f4542a0b091aa4f74568e2737a7c6f89a4c5ffd1f2ae31fc0a41f6d632b933a82f0458f075c98
- SSDEEP 98304:OjrPhUF5j12zsZzr4qv3bgCVKwavtgfrVO23KgSr5jmgVt8NVD5bcV895N/:OjrJQ12z4rDbgCVKwaUVOSij6fP95N/
- TLSH
  T1D12633C9AA70A49AF4776173C379C2375E62BF529A60E8EF325F72490F736000B55B60
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

persistence
- Requests dangerous framework permissions
behavioral1 behavioral2
- Target
  com.skymobi.appui.sole_v1001.apk
- Size 341KB
- SHA256 62745948072ebb0a50242979001aedd1fd1f9f0ef3457be4474a182961c10c68
- MD5 1c55c51bab71aaff7b1ef11b17026e52
- SHA1 4cdba839a1a6cf564f7aaee0cdeaaba20ae26190
- SHA512 38023ede34083b8c20d0be0982d0cab30745732e9d2218c7911895b16c329deeef249b7c103eba1ac2afed13b009cecd48437751b88731dd09675b7b46bbd6b1
- SSDEEP 6144:kBJ2P0ZYtHOWbPz0burga1fvyTFj9pn0Lsi8UYEO4mBa378hcytb3et:kBMPFV5LIoIp9pnSROdBa37ct0
- TLSH
  T114742243B3A5A07AF4FF8A338B734503C9E5EF60C620A96B030375D12B7B75641D96A9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4 behavioral5
- Target
  com.skymobi.pay.opplugin_V2017.apk
- Size 189KB
- SHA256 dc55c0952f54064f229d4105fe09178ab2061dba5ac33a78ac76bd711bfaeb0d
- MD5 7ca433f40d2e4d750cd5d19e0998e005
- SHA1 dbb1f221cb279c9c067be19ae2756a1c9b5b67c8
- SHA512 a561bf5401050c65c5f227b3457d76bd48c4182ecfba5213b02800fc7072b209ee3baf25d024a145314503f946773dde8fc0e17907ee618286fa42c8ab323404
- SSDEEP 3072:MLWTvQatpn8vCt1WgMsNFlRkSlj4Z1j4ipaEGdWGGWXEnJ:/TvZ8vCbRbvjEZ4hEcGqAJ
- TLSH
  T1DF14125CB2D80A36F83B77346AD7D4DF9331BB90FA0AC92F2563910B5461A39C3114B9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6 behavioral7 behavioral8

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Requests dangerous framework permissions

MITRE ATT&CK Mobile v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8