b6a0a52cf8453fe8884379a4f541a6957ccf819b7d21781b01cd3208423c32b3

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.Skymobi.b.6bef144c1ec58b641794e922f9a6f075
Size 6.7MB
Sample261012-era1csas5n
SHA256 b6a0a52cf8453fe8884379a4f541a6957ccf819b7d21781b01cd3208423c32b3
MD5 6bef144c1ec58b641794e922f9a6f075
SHA1 bcfa1808aee2f7fb6c2b93f34e61606e89caba58
SHA512 404fa2e5011abdb156d1fdd11650eb6929ed724dad6c5911c6271fbe783190ce4e81aaf5de256ec000eb0c54569ef98a77fb1c19e69a63675785efcaf63c8cb1
SSDEEP 196608:2U4lK1iC+QWeNvEDHCw0He/lcslEkyYzPquiEso0WmCM5pp5BWsp2GB:KCiTosDHHvdy6PqOfmhpp5BWsp2GB
TLSH
T12E66332EB581A3DBE017D830862D8B8857239CED4977F7E4B45E7C849BB3B514A14B88
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.Skymobi.b.6bef144c1ec58b641794e922f9a6f075
- Size 6.7MB
- SHA256 b6a0a52cf8453fe8884379a4f541a6957ccf819b7d21781b01cd3208423c32b3
- MD5 6bef144c1ec58b641794e922f9a6f075
- SHA1 bcfa1808aee2f7fb6c2b93f34e61606e89caba58
- SHA512 404fa2e5011abdb156d1fdd11650eb6929ed724dad6c5911c6271fbe783190ce4e81aaf5de256ec000eb0c54569ef98a77fb1c19e69a63675785efcaf63c8cb1
- SSDEEP 196608:2U4lK1iC+QWeNvEDHCw0He/lcslEkyYzPquiEso0WmCM5pp5BWsp2GB:KCiTosDHHvdy6PqOfmhpp5BWsp2GB
- TLSH
  T12E66332EB581A3DBE017D830862D8B8857239CED4977F7E4B45E7C849BB3B514A14B88
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

collection defense_evasion discovery evasion persistence
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Queries the phone number (MSISDN for GSM devices)
  discovery
- Reads the content of SMS inbox messages.
  collection
- Requests cell location
  Uses Android APIs to to get current cell location.
  collection discovery defense_evasion
- Queries information about active data network
  discovery
behavioral1 behavioral2
- Target
  com.skymobi.appui.sole_v1001.apk
- Size 410KB
- SHA256 8da164998cd28f15c6d996a9081acee9c2e902759c5a46dea7a17d8c0ce0480d
- MD5 39a43318ac191a142d6cf9fb9ea3ce3d
- SHA1 e353516e0afbda504c7bed600317ec735159dd3c
- SHA512 0ad56c70d84671f643ef191b73fbc77c59bffddb2911bcbefa453854cf9f93e5bbe45b8a59eaed995e873c3498b4ac4c77f51f4d25c954a360e65a8365c55bba
- SSDEEP 6144:ew3nQfxbD635ouZ91O9wSYHlY2zm90dy2/BhDa68w0LigFroYYH5jfuxgnOlCXk5:53GyouZ91sB2zgfefD7Dgc5jmxgsatcj
- TLSH
  T1489423E7FDBC1E2AFB738BB461704946A1770CD06908959D2532B6890D75AD3B0A0BCF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4 behavioral5
- Target
  com.skymobi.pay.opplugin_v2021.apk
- Size 173KB
- SHA256 84d73dc5d83a3214abfb19758de28937e17a2d65cbdd13fd5737d1da70fdf54b
- MD5 3edbac1230a96869372ac635700b3eae
- SHA1 249ad654d9667c5dc9029e2ac83b13c535981cab
- SHA512 0e33be921a9c2ce12a9cb18bf6aaebbe29fe507832c7b99edba329efa90ef6c9821cef039a2b311285d4e7c21789590570ecb8d0e99c72c693cf704a6075ee50
- SSDEEP 3072:rPov8HnBnKtYleLG4514DKewGZUFg+vK9uJ8nNYjB856bMYg8/4pNqHWe7jHTCJf:LovAnBnAYlP4514mbcTn2Busg8/+NaWZ
- TLSH
  T11704123467CC5DB5F9F334B56EFAD1C8514376C0F3034AAE95A0227B6415A660B980FC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6 behavioral7 behavioral8