Overview

overview

10

Static

static

10

data/andro...er.apk

android_x86

data/andro...er.apk

android_x64

data/andro...er.apk

android_x64

data/andro...ge.apk

android_x86

data/andro...ge.apk

android_x64

data/andro...ge.apk

android_x64

data/andro...ll.apk

android_x86

data/andro...ll.apk

android_x64

data/andro...ll.apk

android_x64

data/java/....class

windows7_x64

3

data/java/....class

windows10-2004_x64

3

data/java/....class

windows7_x64

3

data/java/....class

windows10-2004_x64

3

data/java/....class

windows7_x64

3

data/java/....class

windows10-2004_x64

3

data/java/....class

windows7_x64

3

data/java/....class

windows10-2004_x64

3

data/java/....class

windows7_x64

3

data/java/....class

windows10-2004_x64

3

data/java/....class

windows7_x64

3

data/java/....class

windows10-2004_x64

3

data/java/....class

windows7_x64

3

data/java/....class

windows10-2004_x64

3

data/java/....class

windows7_x64

3

data/java/....class

windows10-2004_x64

3

data/java/....class

windows7_x64

3

data/java/....class

windows10-2004_x64

3

data/java/....class

windows7_x64

3

data/java/....class

windows10-2004_x64

3

data/java/....class

windows7_x64

3

data/java/....class

windows10-2004_x64

3

data/java/....class

windows7_x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4626455cbccbd50746623cf539e76d5e8214a7c973fc44c9ed0fbffff9c65e3e

  • Size

    11.7MB

  • Sample

    220703-v5d7yaceb3

  • MD5

    244f2b72e235df5677e9db76ed2cc104

  • SHA1

    5e5ee99f41c051880876e4895a3633f79b239cdb

  • SHA256

    4626455cbccbd50746623cf539e76d5e8214a7c973fc44c9ed0fbffff9c65e3e

  • SHA512

    5d842c3499f835d32b25dc0b4164266ad84b0cc3b9c6bba33fbed77e082eaa31c60ae1de411cc8eb2a42c4150d11c79b95d829a318f85ba6e11077fcffbeb5ad

Score
10/10
mimikatzandroid

Malware Config

Targets

    • Target

      data/android/meterpreter.jar

    • Size

      69KB

    • MD5

      b17b4a3c890b248188833d62d3f3db53

    • SHA1

      021cb1d8339a9b695a0239287e04c5641f03b9e4

    • SHA256

      527d3ad9eec2ebe5c0c0b8ea90da48235bfd2859a61dc9b4db7358294957ad5a

    • SHA512

      9b5c3260b9a1898bf1cf4105ed4edd8b8a790da804e11ea6a9e558ea823bbfc3db5a44e46877aee4ffdfe41bb76008e77b433382e7b1960b63b2e7cda9913ea6

    Score
    1/10
    behavioral1behavioral2behavioral3

    • Target

      data/android/metstage.jar

    • Size

      1KB

    • MD5

      cd2abb7f287f66688ae1bcdaecb2ddfd

    • SHA1

      7a911588d4bc8381be004663826ee2d1fa530c65

    • SHA256

      086362514c5d043ab7d7a733f88fc92c29e71053457f157879c29b3dfb7fdf55

    • SHA512

      0a20421824c4416c3de9fcbbac60aa4359cf371f4420a6a99bc3b3b3cabc0764c8664a8862425b3d46fa84d9a8afd5f04f4737e5c5333bd14d5af04536867e58

    Score
    1/10
    behavioral4behavioral5behavioral6

    • Target

      data/android/shell.jar

    • Size

      1KB

    • MD5

      ca09ab9053f634845c9036d44cbd78be

    • SHA1

      6087585584e85bcc16e50707ccfcd8c288647cae

    • SHA256

      6068086aef2927bdd5878a334a3a8d2986c47d8e901da3568c03c01bc8f9a327

    • SHA512

      5a3fa9e30df46fd8bbc82d13932f5c51beab1d043d8f719f46cec70891cd3e44f6db9c00c1e8f7d53426554184f609df0c02a28b04b1f2e28c798c40045db6bd

    Score
    1/10
    behavioral7behavioral8behavioral9

    • Target

      data/java/com/metasploit/meterpreter/MemoryBufferURLConnection.class

    • Size

      2KB

    • MD5

      a0aca3ff5f34a5263ffa923e4783f666

    • SHA1

      24928a1a43afda7f7e1bd1d7eceaf050f2312cd2

    • SHA256

      2ae3e05c928fca9d8888566a12a95bf1bb83166692651a51377310305dda0333

    • SHA512

      5a817df4c2f7bef45dd5cbee0ac5812f6245e7b7c1bc76d3397a78b8373ede1599fd0849796e6bc4eb88d7ff147bd424cbc4412e4a8c2b2c83b6207c74324a56

    Score
    3/10
    behavioral10behavioral11

    • Target

      data/java/com/metasploit/meterpreter/MemoryBufferURLStreamHandler.class

    • Size

      559B

    • MD5

      cd2f61f20d45b812d5c2472a380d3b6f

    • SHA1

      310e0d5dc3d72ec0edb88634b50f18b69dad034b

    • SHA256

      e17f7e76c540d3b1cf314262bd32756ccf4e508ac201f115ec6b16f5e7a0dded

    • SHA512

      1b095784a42dcbb8552147a0268ebe6fccabe54702f89621fdfef08c6ccdba8a7ee2144a7953b84ce0ab4b0df09a3cbc040565fcea43dec43a35e7fc810fddc5

    Score
    3/10
    behavioral12behavioral13

    • Target

      data/java/javapayload/stage/Meterpreter.class

    • Size

      1KB

    • MD5

      2affb7e10add13e032cfcf7154392181

    • SHA1

      7d220a9a9808c0e63154d996d32ffa28f5995dbc

    • SHA256

      6b7fc3ba4eb116a803ad6f8b7ee3be2ccf479a1106890f116f02aa06e96126d8

    • SHA512

      434f1dfb9cdd98da9ced3d5b4689d9a58707a304ed3d81a186e25253e8de3a176b9de5829dd222a0b9361ad112db074d1248dac29bcced23da79c52e399df30d

    Score
    3/10
    behavioral14behavioral15

    • Target

      data/java/javapayload/stage/Shell.class

    • Size

      1KB

    • MD5

      aa461f60b4739ff79b3394d2e628821c

    • SHA1

      6ff1345917c18cf6bf21c26deac405989d46fce8

    • SHA256

      211bf53e92ee841ad611902731f7b29a97ef45db2238d2464112cb23540af396

    • SHA512

      1c8386b02315470fe7f0a14932ca84b46cbd6beb1c24bc8d4890bdfaab58ade876e0750a72f1678cb824b880da662c40c1abd03897759f2b87be62d58bbfd8b2

    Score
    3/10
    behavioral16behavioral17

    • Target

      data/java/javapayload/stage/Stage.class

    • Size

      211B

    • MD5

      9ba4719f65a14ce08344e016299645ee

    • SHA1

      5f0c8580fd846c35aef1b709ea16fdb08af56571

    • SHA256

      c0bdef98a4a29a70c34ca6b8866a50e9dd88924aea5fd2d62c9cfdf9aeb08235

    • SHA512

      f0897f9afa4fc493e28c7a330c300c982bafa1f00f8fef3e328192dd60abe02f68b8d9a7528208e5cf257dd134785636445aad7c083e0483d0da3558f516bb93

    Score
    3/10
    behavioral18behavioral19

    • Target

      data/java/javapayload/stage/StreamForwarder.class

    • Size

      1KB

    • MD5

      14282f9002642627486bf322dda59410

    • SHA1

      d258813bd351a77e5dc8d65dd665b94e3b5a822f

    • SHA256

      76c8a99cdcecf9bfd1d4e03dd67fc0182271cb36d42cca93e31bb4ca5f5cc4d2

    • SHA512

      661c7354790a1b6301dfccf4a52b7d76833dc09dc08ee8119387a194e19be4f7e2632af35ca329d08310dff7b7a5af6967b9355c3c8e20776472fef7d254b24e

    Score
    3/10
    behavioral20behavioral21

    • Target

      data/java/metasploit/AESEncryption.class

    • Size

      1KB

    • MD5

      1dca849762761218305efd77218ce62b

    • SHA1

      d93205ac29f4e8b2564e0b91eb5ab72b221f9a65

    • SHA256

      0998a55a7d786dd0db2720734521505e1168dc7ec0d75451a6732983894c084f

    • SHA512

      c37b83f4131f253b39aab838f444ae79d5713c4330a38e55e75cc02e6c540b38d0155c0c154a1ab27f07e049fecaadd8f7c61f36d15d7e208f130a51b7b7893e

    Score
    3/10
    behavioral22behavioral23

    • Target

      data/java/metasploit/JMXPayload.class

    • Size

      345B

    • MD5

      87756fd44d64e356f509e2c694f2db9b

    • SHA1

      181d26b709502f2dcf93011503ba6a90aac399d5

    • SHA256

      81ccd91f0bf5f11874534abc128c78365a87fdbba7cca2573a8c0409d890f619

    • SHA512

      a3822941b4ed52bdc0598ee803378fe898fa1c6ed5997758817de59677f46c9485fcc11a73e7caa264096ed919d3d903febc9ff172649edca78f15f3eaaacd6a

    Score
    3/10
    behavioral24behavioral25

    • Target

      data/java/metasploit/JMXPayloadMBean.class

    • Size

      163B

    • MD5

      085d95ceddf953cd94e138d0d8abce4b

    • SHA1

      ef1103236a4701921b00cb30241db80791aa62d4

    • SHA256

      89a2395fe23607c41f5292f6aa22565e69d557bf529166f7c6e3c2d89b6c41b8

    • SHA512

      ff5ddf968437180bd1b017e8fc3adcc2468bd68b35a5001ce909d69d5a9ae670971342e034dbf459bd2856fcee820ad33f29a362917e3c6d05c7b6bfe44ba6f4

    Score
    3/10
    behavioral26behavioral27

    • Target

      data/java/metasploit/Payload.class

    • Size

      8KB

    • MD5

      df67ee317a6aecfdd989bc3a4a66aec2

    • SHA1

      4e6c35d65a0b922154a482e1784d3be83390c288

    • SHA256

      93599b9c8d54a2198a10d4fe9b771515cc805fd1d0fd991d8c9a454d5c570f3a

    • SHA512

      c52a5644fcd5ee343bbf8a59954f0ee26e23567e089b07a5c06e0815812fdd08030cfa006f717a865743ac0d4d4bbae065cdba806966e7bc1c5e6941d1ebfd71

    Score
    3/10
    behavioral28behavioral29

    • Target

      data/java/metasploit/PayloadServlet.class

    • Size

      812B

    • MD5

      fde9d6537fad39bd44159a8c14abe4d7

    • SHA1

      969ab78ed8999b229dc22bbc3e56b2dc3d53208d

    • SHA256

      9148a9b109f6e8ebde9d319c32d25de5437cb18ee223f72324c5479760ab8375

    • SHA512

      511cb8521d82b2a38d7c66ec126d3f9ce388b4b635e097a78187293ec868b70928ac98297df4f8cd9e6c580c59919e2fc4310ff5b70b38eb92aad97fdf3a0293

    Score
    3/10
    behavioral30behavioral31

    • Target

      data/java/metasploit/PayloadTrustManager.class

    • Size

      1KB

    • MD5

      84fb679f420903d9856a0c6d87374ec2

    • SHA1

      fdf23fcb24ca1180131ab1e72d90a21c899e4e0a

    • SHA256

      ce3371d4eee2cc2f0fea99a9d68de2246fc63a0696b9fbddbad1882043bcc5ef

    • SHA512

      7424b673592ff24e2525a1428c4b1ddbaa39c162ea1a3afbc38f57ff8f4868c5f53f67a93046e245551cf4845afa76566a8a9593adc9bed0cbd66d7a0eb6aee3

    Score
    3/10
    behavioral32

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

12
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks