General

  • Target

    Organ Video Maker-Photo Effect_3.08.apk

  • Size

    16.4MB

  • Sample

    230218-lb7gysbg56

  • MD5

    1ce725c0dc288d7789a0ba52a54726ac

  • SHA1

    20dcfb326a66350af7aea504277d7cc97caa420c

  • SHA256

    09862c1e1777d0b610486f0672d589faa2ec90967521cc1d2958a43d368613cf

  • SHA512

    5110de1ca4490059cb48b21361eb05a16c20728e5f4055bb7151b3fcd4875f7b23920d00ff1fd7636460f0f6c5d904df45e08e3aaec92ce1ae35107aff511b32

  • SSDEEP

    393216:mcOI0vuFcdKjz69koJx83FK5aDutN2no8Xss8r6rOkft1:50vuK0jikobeUPtN2no8X+EOkl1

Malware Config

Extracted

Family

harly

C2

https://fox.gvbkopdf.life

Targets

    • Target

      Organ Video Maker-Photo Effect_3.08.apk

    • Size

      16.4MB

    • MD5

      1ce725c0dc288d7789a0ba52a54726ac

    • SHA1

      20dcfb326a66350af7aea504277d7cc97caa420c

    • SHA256

      09862c1e1777d0b610486f0672d589faa2ec90967521cc1d2958a43d368613cf

    • SHA512

      5110de1ca4490059cb48b21361eb05a16c20728e5f4055bb7151b3fcd4875f7b23920d00ff1fd7636460f0f6c5d904df45e08e3aaec92ce1ae35107aff511b32

    • SSDEEP

      393216:mcOI0vuFcdKjz69koJx83FK5aDutN2no8Xss8r6rOkft1:50vuK0jikobeUPtN2no8X+EOkl1

    • Harly

      Harly is an Android trojan subscriber first seen in September 2022.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Reads information about phone network operator.

    • Uses Crypto APIs (Might try to encrypt user data).

MITRE ATT&CK Matrix

Tasks