General

  • Target

    Echo Launcher-Live Wallpaper_2.0.apk

  • Size

    12.8MB

  • Sample

    221212-p756jsea9z

  • MD5

    994e6f88bb584c036b51162a6b8dafaf

  • SHA1

    42c190848ddb6e22072fb495f011018f397012ca

  • SHA256

    62148e0f923b3ec8ee16544861ad1c446003a44bab241f5e71dc1a6778ef9b93

  • SHA512

    12ef75899825f123d4aed7bca81b5d79dbc72a9d3ac3007c2244c449a92c8d08625c234f3423de3a42e1abdd96f832d9f4929be388f29cdf61627cb7e7377f68

  • SSDEEP

    393216:IBidt4UbMiuTpkCKhGncOxypmm6nE4mWwF:IBIh+OhOdsinE4mWwF

Malware Config

Extracted

Family

harly

C2

https://app.aidclean.com

Targets

    • Target

      Echo Launcher-Live Wallpaper_2.0.apk

    • Size

      12.8MB

    • MD5

      994e6f88bb584c036b51162a6b8dafaf

    • SHA1

      42c190848ddb6e22072fb495f011018f397012ca

    • SHA256

      62148e0f923b3ec8ee16544861ad1c446003a44bab241f5e71dc1a6778ef9b93

    • SHA512

      12ef75899825f123d4aed7bca81b5d79dbc72a9d3ac3007c2244c449a92c8d08625c234f3423de3a42e1abdd96f832d9f4929be388f29cdf61627cb7e7377f68

    • SSDEEP

      393216:IBidt4UbMiuTpkCKhGncOxypmm6nE4mWwF:IBIh+OhOdsinE4mWwF

    • Harly

      Harly is an Android trojan subscriber first seen in September 2022.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Reads information about phone network operator.

    • Uses Crypto APIs (Might try to encrypt user data).

MITRE ATT&CK Matrix

Tasks