9cde5c6ea53d33b106e750225f49a9a7d4c989eefed67af392f8d51be66d3451

General

Target
jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SmsPay.il.609facd197639ab6b9d0d740e1b1e281
Size 1.9MB
Sample261012-3sraqstsbx
SHA256 9cde5c6ea53d33b106e750225f49a9a7d4c989eefed67af392f8d51be66d3451
MD5 609facd197639ab6b9d0d740e1b1e281
SHA1 ea95783a8d8a5f9a839cdd4669313a3be59f7311
SHA512 21acd2d75736810eb4e57396ed534f31052e3f44e2373d3e15df5424c0869222263b4915f5f7934ffffb119682d42d149dda447c63b4e5a7f5db425d41853893
SSDEEP 49152:2D54vdljC3im1kqUh1b+nnqQv7tcKZQoF6q:2iC3imrUPsnR75uoIq
TLSH
T1849533426E89A218D37611309F99F259BB2DAC0E4A9FF63B4635706C4EBBDC08F45F44
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

android discovery

Malware Config

Targets

- Target
  jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SmsPay.il.609facd197639ab6b9d0d740e1b1e281
- Size 1.9MB
- SHA256 9cde5c6ea53d33b106e750225f49a9a7d4c989eefed67af392f8d51be66d3451
- MD5 609facd197639ab6b9d0d740e1b1e281
- SHA1 ea95783a8d8a5f9a839cdd4669313a3be59f7311
- SHA512 21acd2d75736810eb4e57396ed534f31052e3f44e2373d3e15df5424c0869222263b4915f5f7934ffffb119682d42d149dda447c63b4e5a7f5db425d41853893
- SSDEEP 49152:2D54vdljC3im1kqUh1b+nnqQv7tcKZQoF6q:2iC3imrUPsnR75uoIq
- TLSH
  T1849533426E89A218D37611309F99F259BB2DAC0E4A9FF63B4635706C4EBBDC08F45F44
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Domain associated with commercial stalkerware software, includes indicators from echap.eu.org
- Queries information about active data network
  discovery
- Queries information about the current Wi-Fi connection
  Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
  discovery
behavioral1
- Target
  BDTX140
- Size 97KB
- SHA256 d5d1be3b6c8c03db2c1b21d1d2c8baa9bcb935e76bf52aef74943fd61e4c00ba
- MD5 417458e694c152659fbc53595a68c7e7
- SHA1 6c03360971aa291eca4ee32e7ab92c31bdfa850b
- SHA512 f953131e4722c1d518b6aa535eb1f955e4a65912148502f3728e27d7eaf41feb92b854fee8527d3d603f06b673bbc90a3e1dac48f2f2ef188acb4b990439e1fd
- SSDEEP 1536:JTcXO2SqdvlWJfWmRuh5XH20enZk+99iDntPjzIga8tBiJon+jFsiaxNbltULYaZ:cdgWmUh5XH2/nn2tn+jF67bkY0
- TLSH
  T1E6A302479BF6C608C1B7903BDAFA250FA5B1F915078E3F960C4F96B1BBD9E906144C21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2 behavioral3 behavioral4
- Target
  tongyu-pay-lib.apk
- Size 83KB
- SHA256 f4e87e5f8f8ebfec57cb785bc25bc4e26a9f57d55eaf3e05dfee63abf9fd425a
- MD5 c3bcf234de5f88ae32bd5568a028a0cb
- SHA1 b6c9306e84f3c34bbf39465326ed2724719c8573
- SHA512 c9bdbf9e3798bd5907880ee7645366157aec2bbdcb963e51d5bb8c06beb503d560f7894152a37e20762b7d0eaae8f9b430a5ed7fe31b5b900f53dabd10d507ce
- SSDEEP 1536:MVEdES8vHHVohb1ZmZkKsyv8wkONr7z0lCsSQ3THCx6UxbgLKxe7wuet6XRyLaFu:kqES8vHHVEtw317z0lCsSYucKxRMXRyZ
- TLSH
  T11C8312AFCF6F7017DDD9923C6ED1923999118C2ECA76A8EF510309B646C78403AF2B50
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6 behavioral7