General

  • Target

    Art Painting-Dream of Freedom_2.10.apk

  • Size

    13.6MB

  • Sample

    230222-npvfnach7x

  • MD5

    b40f641da0c05fe97e558341d59236e2

  • SHA1

    65632a662c5478555cede3301ac46f55d33d7ac5

  • SHA256

    00fe401068b705f46cc67f9618ed2fc8393eeeaee135025893a63beb2b0ab3be

  • SHA512

    016348ab74e1b49fde6563fc830c44577717cb1774e13fc4dc213a81acb5247ba01056424a5fb4a4f3b37d48915827a1189c2451a799cf3a1f88f4137f7c4122

  • SSDEEP

    196608:xVZSMyNBWBSU9/fJcX8QMPwG9udEhxz3lyB+hRS5PIHZyz0O1rAWc9RlOVJsZ:xPSMy+Bp/fJvNPwG9udEPLly+8f0Ozrq

Malware Config

Extracted

Family

harly

C2

https://fox.gvbkopdf.life

Targets

    • Target

      Art Painting-Dream of Freedom_2.10.apk

    • Size

      13.6MB

    • MD5

      b40f641da0c05fe97e558341d59236e2

    • SHA1

      65632a662c5478555cede3301ac46f55d33d7ac5

    • SHA256

      00fe401068b705f46cc67f9618ed2fc8393eeeaee135025893a63beb2b0ab3be

    • SHA512

      016348ab74e1b49fde6563fc830c44577717cb1774e13fc4dc213a81acb5247ba01056424a5fb4a4f3b37d48915827a1189c2451a799cf3a1f88f4137f7c4122

    • SSDEEP

      196608:xVZSMyNBWBSU9/fJcX8QMPwG9udEhxz3lyB+hRS5PIHZyz0O1rAWc9RlOVJsZ:xPSMy+Bp/fJvNPwG9udEPLly+8f0Ozrq

    • Harly

      Harly is an Android trojan subscriber first seen in September 2022.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Reads information about phone network operator.

    • Uses Crypto APIs (Might try to encrypt user data).

MITRE ATT&CK Matrix

Tasks