6c332f710d9448270637f07a8950d85082db77e58c7e1c9b9f2a0aad1cc7b917

General

Target
app.apk
Size 19.6MB
Sample261012-v8bafsec87
SHA256 6c332f710d9448270637f07a8950d85082db77e58c7e1c9b9f2a0aad1cc7b917
MD5 4273a53ca8df17107944c0bb942d2db9
SHA1 cf445680e491f9d4480afc08e393403bb323d489
SHA512 513ce3c8495baffadb2b2fe059d1a131cf788a68a4eaf4825175d89f1a45dfc07ed588f42dc57f72d34a96053fa4dcac11cb45e4d1134ba0f92a19b940ea3d87
SSDEEP 393216:DBl6wXgzwmb0OgHwEr8G4+ujF1mhMFytwHg1:2fzwZmGGjF1maF5i
TLSH
T180272346FBE99E1ECC7340314F9A43359618AE26C782D743DA643B1C797BAE00E943D9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  app.apk
- Size 19.6MB
- SHA256 6c332f710d9448270637f07a8950d85082db77e58c7e1c9b9f2a0aad1cc7b917
- MD5 4273a53ca8df17107944c0bb942d2db9
- SHA1 cf445680e491f9d4480afc08e393403bb323d489
- SHA512 513ce3c8495baffadb2b2fe059d1a131cf788a68a4eaf4825175d89f1a45dfc07ed588f42dc57f72d34a96053fa4dcac11cb45e4d1134ba0f92a19b940ea3d87
- SSDEEP 393216:DBl6wXgzwmb0OgHwEr8G4+ujF1mhMFytwHg1:2fzwZmGGjF1maF5i
- TLSH
  T180272346FBE99E1ECC7340314F9A43359618AE26C782D743DA643B1C797BAE00E943D9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

collection credential_access defense_evasion discovery execution impact persistence
- Makes use of the framework's Accessibility service
  Retrieves information displayed on the phone screen using AccessibilityService.
  collection defense_evasion credential_access
- Obtains sensitive information copied to the device clipboard
  Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
  collection credential_access impact
- Queries account information for other applications stored on the device
  Application may abuse the framework's APIs to collect account information stored on the device.
  collection
- Acquires the wake lock
- Makes use of the framework's foreground persistence service
  Application may abuse the framework's foreground service to continue running in the foreground.
  defense_evasion persistence
- Queries information about active data network
  discovery
- Queries information about the current Wi-Fi connection
  Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
  discovery
behavioral1