General

  • Target

    Merry Camera - Photo Editor_1.3.6.apk

  • Size

    10.4MB

  • Sample

    221215-szns3scf99

  • MD5

    48c2cb3e72538bdec6bfbb656727f5c8

  • SHA1

    39e7aff5c7d757263d9874970f8699b502a24c13

  • SHA256

    941cd8c9afdf9f6ca13e738b3ef5f45c883df3adca99235d1958f53731d6831c

  • SHA512

    ba1c868aba0fd3d67d6f471ddbeb23bfbe30b6ad0c4ad03f1ad02b2144e7ccaa17de9cfb0c100211db9efa1f04618d3ae9c7ee51d51b8ad47d99244463a2be4c

  • SSDEEP

    196608:j9NXrB9C9ADqNlOVVXv25MLYlTREXyb/sgUqSCyUbc/O1i/Oxq5s1g/Po:j9NXnCv0HLIJ/EzCc/OE5G

Malware Config

Extracted

Family

harly

C2

https://api.metakamera.com

Targets

    • Target

      Merry Camera - Photo Editor_1.3.6.apk

    • Size

      10.4MB

    • MD5

      48c2cb3e72538bdec6bfbb656727f5c8

    • SHA1

      39e7aff5c7d757263d9874970f8699b502a24c13

    • SHA256

      941cd8c9afdf9f6ca13e738b3ef5f45c883df3adca99235d1958f53731d6831c

    • SHA512

      ba1c868aba0fd3d67d6f471ddbeb23bfbe30b6ad0c4ad03f1ad02b2144e7ccaa17de9cfb0c100211db9efa1f04618d3ae9c7ee51d51b8ad47d99244463a2be4c

    • SSDEEP

      196608:j9NXrB9C9ADqNlOVVXv25MLYlTREXyb/sgUqSCyUbc/O1i/Oxq5s1g/Po:j9NXnCv0HLIJ/EzCc/OE5G

    • Harly

      Harly is an Android trojan subscriber first seen in September 2022.

    • Checks Android system properties for emulator presence.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Reads information about phone network operator.

    • Removes a system notification.

    • Uses Crypto APIs (Might try to encrypt user data).

MITRE ATT&CK Matrix

Tasks