df5786d6baa9b763136a663e4d089b53e71a20cda56f586610022f63d30d8410

General

Target
jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SmsPay.il.c121a518983ccd21918b1ca9b26537d9
Size 1.9MB
Sample261012-erkjsse17x
SHA256 df5786d6baa9b763136a663e4d089b53e71a20cda56f586610022f63d30d8410
MD5 c121a518983ccd21918b1ca9b26537d9
SHA1 039a6934d0ef85af4616f05175707a2a18a12e1b
SHA512 0a9174d1cdae0b4834dd0263abc863cb5213ded97004a6718e99c12aa99984188f07518df4a30e5b9606c57d0ea798963f520405616f19f920476c9a43ab03e7
SSDEEP 49152:2DXFvdl/UtGcH9xLWQR+/ZrWWItLomn0ylFrYZYwZ6l:21UvdIQJWItvzlNYKw8l
TLSH
T1AF953341F556E60CD33B40356A96E19CA67E8C291846F7370F12B1E84EB7EC28E99FC4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

android discovery

Malware Config

Targets

- Target
  jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SmsPay.il.c121a518983ccd21918b1ca9b26537d9
- Size 1.9MB
- SHA256 df5786d6baa9b763136a663e4d089b53e71a20cda56f586610022f63d30d8410
- MD5 c121a518983ccd21918b1ca9b26537d9
- SHA1 039a6934d0ef85af4616f05175707a2a18a12e1b
- SHA512 0a9174d1cdae0b4834dd0263abc863cb5213ded97004a6718e99c12aa99984188f07518df4a30e5b9606c57d0ea798963f520405616f19f920476c9a43ab03e7
- SSDEEP 49152:2DXFvdl/UtGcH9xLWQR+/ZrWWItLomn0ylFrYZYwZ6l:21UvdIQJWItvzlNYKw8l
- TLSH
  T1AF953341F556E60CD33B40356A96E19CA67E8C291846F7370F12B1E84EB7EC28E99FC4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Domain associated with commercial stalkerware software, includes indicators from echap.eu.org
- Queries information about active data network
  discovery
- Queries information about the current Wi-Fi connection
  Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
  discovery
behavioral1
- Target
  BDTX140
- Size 97KB
- SHA256 d5d1be3b6c8c03db2c1b21d1d2c8baa9bcb935e76bf52aef74943fd61e4c00ba
- MD5 417458e694c152659fbc53595a68c7e7
- SHA1 6c03360971aa291eca4ee32e7ab92c31bdfa850b
- SHA512 f953131e4722c1d518b6aa535eb1f955e4a65912148502f3728e27d7eaf41feb92b854fee8527d3d603f06b673bbc90a3e1dac48f2f2ef188acb4b990439e1fd
- SSDEEP 1536:JTcXO2SqdvlWJfWmRuh5XH20enZk+99iDntPjzIga8tBiJon+jFsiaxNbltULYaZ:cdgWmUh5XH2/nn2tn+jF67bkY0
- TLSH
  T1E6A302479BF6C608C1B7903BDAFA250FA5B1F915078E3F960C4F96B1BBD9E906144C21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2 behavioral3 behavioral4
- Target
  tongyu-pay-lib.apk
- Size 83KB
- SHA256 f4e87e5f8f8ebfec57cb785bc25bc4e26a9f57d55eaf3e05dfee63abf9fd425a
- MD5 c3bcf234de5f88ae32bd5568a028a0cb
- SHA1 b6c9306e84f3c34bbf39465326ed2724719c8573
- SHA512 c9bdbf9e3798bd5907880ee7645366157aec2bbdcb963e51d5bb8c06beb503d560f7894152a37e20762b7d0eaae8f9b430a5ed7fe31b5b900f53dabd10d507ce
- SSDEEP 1536:MVEdES8vHHVohb1ZmZkKsyv8wkONr7z0lCsSQ3THCx6UxbgLKxe7wuet6XRyLaFu:kqES8vHHVEtw317z0lCsSYucKxRMXRyZ
- TLSH
  T11C8312AFCF6F7017DDD9923C6ED1923999118C2ECA76A8EF510309B646C78403AF2B50
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6 behavioral7