smsworm | 7f964eeb2ab88dff6c804b71920cdba3518cfdfaf8799d7fb50a4a1e373671e9

Sharing

Copy URL Twitter E-mail

General

Target
Radio-Chile-FM-online-radio_4.2.20_apkcube.apks
Size 43.2MB
Sample261030-qwfbesef98
SHA256 7f964eeb2ab88dff6c804b71920cdba3518cfdfaf8799d7fb50a4a1e373671e9
MD5 3cc6001656157900816da8b7c12e7821
SHA1 1e5cad676daa30a0606abdc4d2939102dba55cc2
SHA512 821075b5f3c0d5672c754838bd0ce20ed3a229b9a6de67e20e2084bc4b5935bf959b3a4ce3a64b85cdc85a1cc20a759a9fe66b074c3d369fcc5af227fbc9ce98
SSDEEP 786432:NUrt3iybDougXGHXMUR+gEoGAHtEsrEan5sNor2i7rFVxrCUfBmptqAWRa0luy+w:NsioDxlcURXk0EsrTKNor2gT2UfMptTg
TLSH
T14FA733C1DFA147A4DA520A91AF0261FD3CB2067ED1775A207799542788FF2C7CEA1E8C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  base.apk
- Size 76.3MB
- SHA256 488ca6cd7c0131d7652b2950055eef0832f61e754ab15436782b45815fc3b5bb
- MD5 8b174460338cf88df9768a285750c670
- SHA1 6ab8c7044e5b968015a2914afb3fa6f14a578bb3
- SHA512 3ff6537d83150e31421fdd63efe8ea8c182e7e8c1f4a8e9395466b5bca0a1c8ed5eb2156056aa4e28846897a6b70d4be1733cba13891b1e8269c6f641222ed80
- SSDEEP 786432:b0sHgbUs1sB3zMbbA6uAdz+uD5hiLYD2uibHnQEAJqjk94rT3Ip3n/QlAybUyonp:7GULC/VB
- TLSH
  T14F08BE03A7520D32D4BE773965B69704BB321D88AB434B471001F9A9AEB33C5BF997C6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

defense_evasion discovery execution impact persistence evasion
- Checks if the Android device is rooted.
  defense_evasion
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Queries information about running processes on the device
  Application may abuse the framework's APIs to collect information about running processes on the device.
  discovery
- Acquires the wake lock
- Queries information about active data network
  discovery
- Checks the presence of a debugger
  defense_evasion
behavioral1 behavioral2 behavioral3
- Target
  split_config.ar.apk
- Size 108KB
- SHA256 1a60ecc962a4d22d425969d9a9abf7c6030fb250784c9e458b6e29b06053ac64
- MD5 30d550b98b5730a876f85ecde8243766
- SHA1 86497b1a269c5daa735362b03acbd083e9a63930
- SHA512 0bacb839b8a7bbdc2ed1ff4b274b774642277f2288869f5d80ceacca6c0a842602f6929d159b0390eb4619378da887a237d95d543aa74dfe4ec5195e3934a0be
- SSDEEP 1536:65/IEQR4Ixfwd+NbZovA9LUuAQmq21HCnjUc/6fUuqiOZLlV548JW9z3Ug6uLcbo:65QEQpfwQzmFqjZLJY93aKkOhJT20/
- TLSH
  T123B3C49209266433CAF6C93DC1D1B15DD0399D03AB43FAA36446BE6405FB2D39F8A2F4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4 behavioral5 behavioral6
- Target
  split_config.arm64_v8a.apk
- Size 7.8MB
- SHA256 084d27554bb8f386f39706a3f7941ae3fa669fa6c60ccfcabe58b2481adea852
- MD5 2dcd83dfab30a807c0b070cc53d2110f
- SHA1 5dc757f2b181a3bc3d442fe2cbb29cbddaa565e0
- SHA512 36943b8113f9a8c68ba19d421f63a95f605ef7a3cd8dd84e0071a2f915be2825c4c651ab138b13a83b9822a8313d1d571d0151a2fff5a0441207a72c82ee14fb
- SSDEEP 98304:0zusDSjW7Ccic8QvodGpCbsMR0i2wFf2iumDa/Fr7K/78xN9Z:oic8HrQir2Wf2iy/Frm41Z
- TLSH
  T15B868D0CED0DF937EEC5F0BC9D8A46A3B12278A95710C1963922D52DFA837E5CA25371
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8 behavioral9
- Target
  split_config.de.apk
- Size 112KB
- SHA256 1caa6c2eb4f60d0226a303fa7ca98c0b3380d1f714844ffbf4830e7845b61d63
- MD5 ac47c4cdd19d4644f3147c59a5c0e822
- SHA1 0c22b73066745a50ab30a7906b5122f4fc4ed0cd
- SHA512 4114696ed21604960f931c789557a28d06582da80ed6df1b6fac70171cad588e6021d6620a5771ce0702ad2b96796f9b7057d955de60f2b9756c36584ed99721
- SSDEEP 1536:uJ6Kl8MNEdPKqv77NZ244K3Ug6uLcytshZknhJFfHy5Dqoo808Jq7:uJ7XNy3dKknhJcRogq7
- TLSH
  T13EB3F706A8A63967CDFAD27829C0C99B261E8E058747A7C38118FDBD05BF3D34F891D5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral11 behavioral12
- Target
  split_config.en.apk
- Size 164KB
- SHA256 75cb8b180465505eb35b504a2654baa270050ce0c2aaa86862f15f7c7d6471ec
- MD5 513abbd2c0e160342e28d2012ade2ece
- SHA1 0b97e3464c052a70d01921ecd29134b22d301d34
- SHA512 3bc93966cd8643171c90e078930c7b0445f605b63dbfecadf7afb920b7706c52ebd973255e011cfc8308d8b689082d8a811c45348daab229bb79f7dbfb266d2c
- SSDEEP 1536:hKdVxVBc5DsNtvBm6iO3Og6uLcbtshZkshJu2nYxff:hKMINtA6/3SKkshJu5xH
- TLSH
  T14BF35E06A7563A6FC8B780382D82C29A112DBD07DB029687D538BDBC157F3E64F921F5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14 behavioral15
- Target
  split_config.es.apk
- Size 124KB
- SHA256 a2d340417f8282230427bb22c1b6655e7e4dd788dfd430d7af2d6c2f2f0b43d1
- MD5 30001e05e997cba5b7728a7b6e65f92e
- SHA1 4b5c03566c678d3d598e3daa59e8620d7a9836ce
- SHA512 56be24e3efa16593ef08b84e22979c716107278a9b7fa86e0cb851edd536622d03603f1615bf7ac99b38bc0f45356cbc912d45f70dc51becae60a4d89a14bd16
- SSDEEP 1536:8BSY+MaJeC6oBs4P/s0JMMi3Ug6uLcwtshZkOhJFfHVjiW/xYPu:0pa034P8x3ZKkOhJb9JYPu
- TLSH
  T100C3D306599A3D53CCF682B82BC3C26B605C8E046B06D7839559FEBC00BF7E68F925D5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16 behavioral17 behavioral18
- Target
  split_config.et.apk
- Size 48KB
- SHA256 a6c88c2121dac1f14380489700459c90d2ea882a01a6f5d522bba0772b471042
- MD5 9cbd0f9b7ff2651ffb23eeebb5efca83
- SHA1 378d9190b3775103f7cb772d9da0d8a7a0334552
- SHA512 539089614ceb59119a099b97f4d3384e66cf0db3dda3b8d03c9cb38ee3fcd09c3e4a04aae01e553bec40a1b58f4173d34ace14ff8e6757a3dd39963459ebe465
- SSDEEP 768:8VbNJL9Y7U4qfOItshzAkI1JhJivMnTjG1ryqToVbC0N:ybNJL9Yw4q1tshMkOhJ1W1rOVbZ
- TLSH
  T13C231A07AD659623CEBE85B85D92D2690535CF005C028F07AD91BA0C2AFFBD56F933C9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20 behavioral21
- Target
  split_config.fi.apk
- Size 88KB
- SHA256 f3d1955121dbfaff46e58682419a1d790ae3683dfa059c8e56359844612ead61
- MD5 427ca815abede3b21c4053a5ba916ed0
- SHA1 aaa7ef28890b882dc2229820013c054d7065f16b
- SHA512 1ef11578bc8f5fe7735d60cee1f342979043a7989b5143f0e48c274a798a665bec04538924b21a5817e448c1747f77fdb06c3d04e7f4a7f3322fbcc606b63e72
- SSDEEP 1536:YK2DVCv9ZAHEZtcQ6vH3Ug6uLc6tshZkOhJFENkTZH:UhCvAHEZt23TKkOhJFEwZH
- TLSH
  T11C93D3465A5AB623C9F8C17C68D1C25E256DCE464A134BC7C608FDF809BF3D21FA21DA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral22 behavioral23 behavioral24
- Target
  split_config.fr.apk
- Size 120KB
- SHA256 9c1393b159f702aac37a141f1ea22dda1c2a77889c0a044b8cc15c8a07073049
- MD5 af3d14997917e5523bfeaa4864cf80cf
- SHA1 007c9f9da69b1bd97d0f5fc3a1b621fd6e831235
- SHA512 f36e8438dc6a4e3c139ea43b57cda07f2961e409676adc78eca0b5c9553eaaa1666d55755e8c4050a277a8c863511e84ce8ceae3397b53ca56c8cb6cfadb4c62
- SSDEEP 1536:NRCQwpob/VgEVsfkJt8430JvMVQ9WI3Ug6uLcytshZkOhJFfHqaAwkCfhg2r:NY50i/BejI3dKkOhJfAwec
- TLSH
  T10CC3F60A68863953CCF681786BD2C26A543CCE089B03D3838959FDBC15BF7E68F961D5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26 behavioral27
- Target
  split_config.hdpi.apk
- Size 356KB
- SHA256 c416aa528896035b087d546e8aa38396c6ac36ca7ba7f4c41585fbb73732a402
- MD5 438320328c08a4c27ae0dcaf9f4e77a7
- SHA1 a05cd8d628b20d419ee70db372e7fa08483dc557
- SHA512 e451eeeb2af8dab0830e326b1f727ec667dbe2f2ac64423a2962e646ea85308de12d8f6d63d3f5b9040bbda22a8ff2468b4ae2cf5f79d8f153a4732d43db7f3b
- SSDEEP 3072:UZCZAuli8hdIUhJjY++EbajyM8bqyokULlR9pxpT1uzslaR7bpGQD6OQrIPlExHj:lAA3OyFqyFULP9pESIo8ar
- TLSH
  T191744BD3E36DB419EA73C43387BA4297A8D80D44591AA7650221F26CDFF7E81E644FC2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral28 behavioral29 behavioral30
- Target
  split_config.hi.apk
- Size 124KB
- SHA256 9c026af6581ecb7d4b8ad0d0932015ae9c5faf33dcfa4258f12726e40b7c412e
- MD5 340969fa500b77dce2df2aaa8d7075e6
- SHA1 37271511de9682634daca7e757907f103045b7e5
- SHA512 2fcaad6681bce0a45b06a960448957dc512c2c66bb86f9c05b5e9ad98123977e2fafdec4438424228c7bcbe7c1346bfa11ae9f1a82b90e2c274938cc72c1b995
- SSDEEP 3072:PMAlqgKMQOf/AhqSugbQOCuymmbJ7WA7MSPbmS2sBo3aKkOhJRCCl:Ez4k33aKkOHb
- TLSH
  T191C3220DDB7DB3A2CDFC78B93685893A806C6E30639643934494F6EA847BDF10E951D2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Mobile v16

Initial Access

Execution

Scheduled Task/Job

T1603

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Scheduled Task/Job

T1603

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

Process Discovery

T1424

System Information Discovery

T1426

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Tasks

Sharing

General

Malware Config

Targets

Checks if the Android device is rooted.

Loads dropped Dex/Jar

Queries information about running processes on the device

Acquires the wake lock

Queries information about active data network

Checks the presence of a debugger

MITRE ATT&CK Mobile v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32