General

  • Target

    Lively Live Wallpaper HD Theme_2.0.0.apk

  • Size

    8.4MB

  • Sample

    221024-lgh2jsfga6

  • MD5

    38d1b2f7932a78ff1c6192285b03c99a

  • SHA1

    0a3e39b568b4a1f25e67e41ed3e5d519addf6025

  • SHA256

    b5641cc5698893a9ee8210528b367af97f6e2f0e0d4a366f913c0619f23983e4

  • SHA512

    11bb63b1475a7cc5ab5be6c992b3aa1cf24b026d0f2028865146244c26b1679e1fa6cb1c608d957fbe92bac6c6611e9a4af6dda110779aec696b78c3aaab40be

  • SSDEEP

    196608:6Z1krCNUVTGB4UrdvDX8UxCLpsJMbaPVr+/HhEDe++n57ePNnh:KkC/BPFDMqJ8aPVrgHY+nlePX

Malware Config

Extracted

Family

harly

C2

https://admin.keyseotyn.online

Targets

    • Target

      Lively Live Wallpaper HD Theme_2.0.0.apk

    • Size

      8.4MB

    • MD5

      38d1b2f7932a78ff1c6192285b03c99a

    • SHA1

      0a3e39b568b4a1f25e67e41ed3e5d519addf6025

    • SHA256

      b5641cc5698893a9ee8210528b367af97f6e2f0e0d4a366f913c0619f23983e4

    • SHA512

      11bb63b1475a7cc5ab5be6c992b3aa1cf24b026d0f2028865146244c26b1679e1fa6cb1c608d957fbe92bac6c6611e9a4af6dda110779aec696b78c3aaab40be

    • SSDEEP

      196608:6Z1krCNUVTGB4UrdvDX8UxCLpsJMbaPVr+/HhEDe++n57ePNnh:KkC/BPFDMqJ8aPVrgHY+nlePX

    • Harly

      Harly is an Android trojan subscriber first seen in September 2022.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Reads information about phone network operator.

    • Uses Crypto APIs (Might try to encrypt user data).

MITRE ATT&CK Matrix

Tasks