General

  • Target

    Emoji Maker - Emoji Designer_2.0.apk

  • Size

    16.4MB

  • Sample

    221110-sjvaxsagd3

  • MD5

    e92c2aeb2d415141c12a73e61a20ed20

  • SHA1

    3ca042cc5c33e61ebf7e96778c390b5fa6c51e0b

  • SHA256

    ff6e4ef67013f91605f1caee71120d1467a9a5069ae2b6c5fb2e825bb8ae59c5

  • SHA512

    99acb23d04b44f5a9e76c44115f1f0a0122259f1a45ff24d22865b885ce2407c638fc469e7dbd25fdd98f5386c5f87411acc37b188ab28b16d2c2d7570cd90ac

  • SSDEEP

    393216:qPSMy3GBsrZS22B/F9SHLji3HO2pC2MhmnRlbQEZ7Lduo:qPSv3GBsrZt2Bt8rjuO2Ymn3Uo

Malware Config

Extracted

Family

harly

C2

https://a.ele-new.live

Targets

    • Target

      Emoji Maker - Emoji Designer_2.0.apk

    • Size

      16.4MB

    • MD5

      e92c2aeb2d415141c12a73e61a20ed20

    • SHA1

      3ca042cc5c33e61ebf7e96778c390b5fa6c51e0b

    • SHA256

      ff6e4ef67013f91605f1caee71120d1467a9a5069ae2b6c5fb2e825bb8ae59c5

    • SHA512

      99acb23d04b44f5a9e76c44115f1f0a0122259f1a45ff24d22865b885ce2407c638fc469e7dbd25fdd98f5386c5f87411acc37b188ab28b16d2c2d7570cd90ac

    • SSDEEP

      393216:qPSMy3GBsrZS22B/F9SHLji3HO2pC2MhmnRlbQEZ7Lduo:qPSv3GBsrZt2Bt8rjuO2Ymn3Uo

    • Harly

      Harly is an Android trojan subscriber first seen in September 2022.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Reads information about phone network operator.

    • Uses Crypto APIs (Might try to encrypt user data).

MITRE ATT&CK Matrix

Tasks