MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 c385020ef9e6e04ad08757324f78963378675a1bdb57a4de0fd525cffe7f2139. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



Threat unknown


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments

SHA256 hash: c385020ef9e6e04ad08757324f78963378675a1bdb57a4de0fd525cffe7f2139
SHA3-384 hash: 2969b56190bc7fd4568cf3ae8af6477685d02c2c3f3ea6d4a729051e3c12b9e55b995b63533efce04ebc968d13e98353
SHA1 hash: 98bb4315a5ee3f92a3275f08e45f7e35d9995cd2
MD5 hash: a1b5c184d447eaac1ed47bc5a0db4725
humanhash: zulu-nuts-oscar-oven
File name:Android-SMS-Stealer.apk
Download: download sample
Signature n/a
File size:548'502 bytes
First seen:2020-03-19 17:48:01 UTC
Last seen:Never
File type: apk
MIME type:application/java-archive
ssdeep 12288:EhfPI5FEzRYBfWkhdWPK2sDIk/8hL9w6JOWAQJ2jYg:AfPI5Fg6h6F08xuhWAPr
TLSH 9CC42380D8F288E6CDE309FDA0C5C941272F52DEBAFCF5BD19A675BD14060A13B65E18
Reporter @Libranalysis
Tags:android apk sms stealer

Code Signing Certificate

Organisation:DarkNess
Issuer:DarkNess
Algorithm:sha1WithRSAEncryption
Valid from:Sep 18 12:43:22 2015 GMT
Valid to:Feb 3 12:43:22 2043 GMT
Serial number: 77C9C1C5
Thumbprint Algorithm:SHA256
Thumbprint: 8EBCB1ED5480351215354B9C292F693E61E9A155C2903253D4A2276FB551190F
Source:This information was brought to you by ReversingLabs A1000 Malware Analysis Platform


Twitter
@Libranalysis
Android SMS stealing malware. A detailed analysis report can be found here: https://maxkersten.nl/wordpress/binary-analysis-course/malware-analysis/android-sms-stealer/

Intelligence


File Origin
# of uploads :
1
# of downloads :
197
Origin country :
NL NL
Mail intelligence
No data
Vendor Threat Intelligence
Gathering data
Threat name:
Android.Trojan.Obfus
Status:
Malicious
First seen:
2018-01-23 05:02:28 UTC
File Type:
Binary (Archive)
Extracted files:
11
AV detection:
13 of 30 (43.33%)
Threat level:
  5/5
Verdict:
unknown

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Comments