c203211c7cc2d6f7fb49efd4b27133d12b0b944efddaaa2b8813330d92d2974b

General

Target
jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SmsPay.il.46ac56c3c385af0a97ea8e5f4888bd76
Size 1.9MB
Sample261012-3spf5stsbv
SHA256 c203211c7cc2d6f7fb49efd4b27133d12b0b944efddaaa2b8813330d92d2974b
MD5 46ac56c3c385af0a97ea8e5f4888bd76
SHA1 73e5b1587fb331ec14bc7b606ec77cfba275284a
SHA512 af8dd1d15ea770f3b405527e6ea18fddcc1d3d6771d27180f18c81e52ebce291950245b5b06eaeccef883e60684c1c51180df86220f30f7fbd673aff6c5de2e4
SSDEEP 49152:2DCUvdlgUtGcH9xLWQR+/ZrWWItLomn0ylFrUzq+L6j:24UvdIQJWItvzlNU++uj
TLSH
T18C953342F556E60CD33B40356E9AE18CB63E8C291846F7371F12B1E84EB7EC54A99F84
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

android discovery

Malware Config

Targets

- Target
  jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SmsPay.il.46ac56c3c385af0a97ea8e5f4888bd76
- Size 1.9MB
- SHA256 c203211c7cc2d6f7fb49efd4b27133d12b0b944efddaaa2b8813330d92d2974b
- MD5 46ac56c3c385af0a97ea8e5f4888bd76
- SHA1 73e5b1587fb331ec14bc7b606ec77cfba275284a
- SHA512 af8dd1d15ea770f3b405527e6ea18fddcc1d3d6771d27180f18c81e52ebce291950245b5b06eaeccef883e60684c1c51180df86220f30f7fbd673aff6c5de2e4
- SSDEEP 49152:2DCUvdlgUtGcH9xLWQR+/ZrWWItLomn0ylFrUzq+L6j:24UvdIQJWItvzlNU++uj
- TLSH
  T18C953342F556E60CD33B40356E9AE18CB63E8C291846F7371F12B1E84EB7EC54A99F84
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Domain associated with commercial stalkerware software, includes indicators from echap.eu.org
- Queries information about active data network
  discovery
- Queries information about the current Wi-Fi connection
  Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
  discovery
- Reads information about phone network operator.
  discovery
behavioral1
- Target
  BDTX140
- Size 97KB
- SHA256 d5d1be3b6c8c03db2c1b21d1d2c8baa9bcb935e76bf52aef74943fd61e4c00ba
- MD5 417458e694c152659fbc53595a68c7e7
- SHA1 6c03360971aa291eca4ee32e7ab92c31bdfa850b
- SHA512 f953131e4722c1d518b6aa535eb1f955e4a65912148502f3728e27d7eaf41feb92b854fee8527d3d603f06b673bbc90a3e1dac48f2f2ef188acb4b990439e1fd
- SSDEEP 1536:JTcXO2SqdvlWJfWmRuh5XH20enZk+99iDntPjzIga8tBiJon+jFsiaxNbltULYaZ:cdgWmUh5XH2/nn2tn+jF67bkY0
- TLSH
  T1E6A302479BF6C608C1B7903BDAFA250FA5B1F915078E3F960C4F96B1BBD9E906144C21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2 behavioral3 behavioral4
- Target
  tongyu-pay-lib.apk
- Size 83KB
- SHA256 f4e87e5f8f8ebfec57cb785bc25bc4e26a9f57d55eaf3e05dfee63abf9fd425a
- MD5 c3bcf234de5f88ae32bd5568a028a0cb
- SHA1 b6c9306e84f3c34bbf39465326ed2724719c8573
- SHA512 c9bdbf9e3798bd5907880ee7645366157aec2bbdcb963e51d5bb8c06beb503d560f7894152a37e20762b7d0eaae8f9b430a5ed7fe31b5b900f53dabd10d507ce
- SSDEEP 1536:MVEdES8vHHVohb1ZmZkKsyv8wkONr7z0lCsSQ3THCx6UxbgLKxe7wuet6XRyLaFu:kqES8vHHVEtw317z0lCsSYucKxRMXRyZ
- TLSH
  T11C8312AFCF6F7017DDD9923C6ED1923999118C2ECA76A8EF510309B646C78403AF2B50
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6 behavioral7