Overview
overview
10Static
static
10ee6aec48e1...8e.apk
android-9-x86
7ee6aec48e1...8e.apk
android-10-x64
4ee6aec48e1...8e.apk
android-11-x64
7AndroidClo...in.ttf
windows7-x64
3AndroidClo...in.ttf
windows10-2004-x64
7Roboto-Bold.ttf
windows7-x64
3Roboto-Bold.ttf
windows10-2004-x64
7Roboto-Light.ttf
windows7-x64
3Roboto-Light.ttf
windows10-2004-x64
7android-ic...me.ttf
windows7-x64
3android-ic...me.ttf
windows10-2004-x64
7backward
windows7-x64
1backward
windows10-2004-x64
1crashlytic...erties
windows7-x64
3crashlytic...erties
windows10-2004-x64
3zone.tab
windows7-x64
3zone.tab
windows10-2004-x64
3General
-
Target
ee6aec48e19191ba6efc4c65ff45a88e.bin
-
Size
7.4MB
-
Sample
230527-x3jqrach68
-
MD5
ee6aec48e19191ba6efc4c65ff45a88e
-
SHA1
f3b135555ae731b5499502f3b69724944ab367d5
-
SHA256
0fdfbf20e59b28181801274ad23b951106c6f7a516eb914efd427b6617630f30
-
SHA512
0f1fb2554bd05df4c4987f64fc9c22695cb2f0951b1b46202fb0aa24ff5008d14dfd2782e1c508b5534c16c024034d75b72cee2aebeeb4337e0fda69314ee0db
-
SSDEEP
196608:Cej0iP9EswQ2qypeQa/twJFQdKShmodX34Rd1k7Q8Ufy6mC:CUvP9ryjeQa/tYFQRtd4be7cfZmC
Behavioral task
behavioral1
Sample
ee6aec48e19191ba6efc4c65ff45a88e.apk
Resource
android-x86-arm-20220823-en
Behavioral task
behavioral2
Sample
ee6aec48e19191ba6efc4c65ff45a88e.apk
Resource
android-x64-20220823-en
Behavioral task
behavioral3
Sample
ee6aec48e19191ba6efc4c65ff45a88e.apk
Resource
android-x64-arm64-20220823-en
Behavioral task
behavioral4
Sample
AndroidClockMono-Thin.ttf
Resource
win7-20230220-en
Behavioral task
behavioral5
Sample
AndroidClockMono-Thin.ttf
Resource
win10v2004-20230220-en
Behavioral task
behavioral6
Sample
Roboto-Bold.ttf
Resource
win7-20230220-en
Behavioral task
behavioral7
Sample
Roboto-Bold.ttf
Resource
win10v2004-20230220-en
Behavioral task
behavioral8
Sample
Roboto-Light.ttf
Resource
win7-20230220-en
Behavioral task
behavioral9
Sample
Roboto-Light.ttf
Resource
win10v2004-20230220-en
Behavioral task
behavioral10
Sample
android-iconify-fontawesome.ttf
Resource
win7-20230220-en
Behavioral task
behavioral11
Sample
android-iconify-fontawesome.ttf
Resource
win10v2004-20230220-en
Behavioral task
behavioral12
Sample
backward
Resource
win7-20230220-en
Behavioral task
behavioral13
Sample
backward
Resource
win10v2004-20230221-en
Behavioral task
behavioral14
Sample
crashlytics-build.properties
Resource
win7-20230220-en
Behavioral task
behavioral15
Sample
crashlytics-build.properties
Resource
win10v2004-20230220-en
Behavioral task
behavioral16
Sample
zone.tab
Resource
win7-20230220-en
Behavioral task
behavioral17
Sample
zone.tab
Resource
win10v2004-20230220-en
Malware Config
Extracted
daam
http://192.99.251.51:3000
-
uri
/socket.io
Targets
-
-
Target
ee6aec48e19191ba6efc4c65ff45a88e.bin
-
Size
7.4MB
-
MD5
ee6aec48e19191ba6efc4c65ff45a88e
-
SHA1
f3b135555ae731b5499502f3b69724944ab367d5
-
SHA256
0fdfbf20e59b28181801274ad23b951106c6f7a516eb914efd427b6617630f30
-
SHA512
0f1fb2554bd05df4c4987f64fc9c22695cb2f0951b1b46202fb0aa24ff5008d14dfd2782e1c508b5534c16c024034d75b72cee2aebeeb4337e0fda69314ee0db
-
SSDEEP
196608:Cej0iP9EswQ2qypeQa/twJFQdKShmodX34Rd1k7Q8Ufy6mC:CUvP9ryjeQa/tYFQRtd4be7cfZmC
Score7/10-
Acquires the wake lock.
-
-
-
Target
AndroidClockMono-Thin.ttf
-
Size
5KB
-
MD5
865726afe8b0b3e604da03819a4573bf
-
SHA1
9c32d4dccb41b1405677f26aecfaefba33f9fd81
-
SHA256
36b8ff47ed75e57f3a4268d3733f80156aec8f92265ef0a48516f21454098222
-
SHA512
16bfee3afc9e9d7e910cc79405b3ad1ad90dea534035df75a81fe17a51e49945cf48d7fc37823e43504dd8810d96313054583c04e695522954bceac57feb86d4
-
SSDEEP
96:u639wRWDqUIy5nlQVZWgTtT00suKlR9ys3Eln1WcDG/0Lhti6G4:h9feynuVJp00FY9Yl1Wcq/0Lhti6/
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
-
-
Target
Roboto-Bold.ttf
-
Size
290KB
-
MD5
dbcc2d576ca222f307fef3fedcb441ec
-
SHA1
ce209e7a825828599429bf4d0d134272d20adf3d
-
SHA256
6e6a7dce45f352fb8ed0daf9d98e899cbdabbdd2cb83ddb7fb27d192c94e148b
-
SHA512
c70fc6e3b2a6add180e27de25dceaa666c107afb4e72f80f3f37c0f94ef31085ea26facae34d1f57f8edf3deb44a5918486bb33bfdc677960a0d5942e4c4c586
-
SSDEEP
6144:KKhBCxC2IZ/xYmlQrkcIJb0aV3ohqEQ65pq+xHm9rk:VBCxkrthEQ65pbHurk
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
-
-
Target
Roboto-Light.ttf
-
Size
291KB
-
MD5
754d6cadea9b0853971234a51aaeb8a1
-
SHA1
1ce31afef046a5f38dbcb6e212d827eb69d56569
-
SHA256
e1959931aea5ae5ad71edd67728f07830985a1918c6cf8b7f8a039f94c2901e4
-
SHA512
6fe9eb4cf5ce0a555ba8e0e9527e3caee0eddbfddebc017131b493e5015315fa2dc1d65375c303eb91b1dce4e21c795f81f68bb9fd482db857721fd4d5453b96
-
SSDEEP
6144:boHfKvNa8re4fk9jTt4oRa9DO/Rm5oO91wWDdHkQs7xs:bIKvkme9b4Sa9n5lDwWD9jsts
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
-
-
Target
android-iconify-fontawesome.ttf
-
Size
138KB
-
MD5
a3de2170e4e9df77161ea5d3f31b2668
-
SHA1
6484f1af6b485d5096b71b344e67f4164c33dd1f
-
SHA256
7b5a4320fba0d4c8f79327645b4b9cc875a2ec617a557e849b813918eb733499
-
SHA512
94a693ab2ce3c59f7a1d35b4bcc0fd08322dad24ce84203060ceceaf3dac44c4c28413c28dcdab35d289f30f8e28223a43c11cb7d5e9a56d851eb697ff9b9b6b
-
SSDEEP
3072:31DuCzsU9393sdVP9Xy2i0iEPGFCMD17VJG6wVcxwDgo69Mc6iGcyKIhwxjtkOc1:31DuCzsU9393sdV1i2ZiEP2CqVVJG6/S
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
-
-
Target
backward
-
Size
3KB
-
MD5
f3e01c685242d9b43bd3fc9d23189875
-
SHA1
affea9edbf88ad67ec5ceb57b9245add746bc915
-
SHA256
a1de3301a646e6a1af087295edd1b03cd804be46fc41ef833f25f830798552a3
-
SHA512
d0df7aa58adb7d68c43f023a65f939fc7c35ee2399f4d3169ab520a18a9452ba619a990fcb090356fc436923384d873b11c953471bb6f1287de44e5611019dd9
Score1/10 -
-
-
Target
crashlytics-build.properties
-
Size
362B
-
MD5
49dd67dab9f45fcb010ab03e74e72cd1
-
SHA1
b04ffe6c85d11fabd10ff92726aac207c9b07fc8
-
SHA256
88a8ccf7f2cf691a7095feae4cb6404c5b8a54fcee6ba8d10dc57107851686c7
-
SHA512
dd02c4577264d08107c491ae7109e9b54ca0886d3592bf034c490dc9fae60ddfe6514bc8b5995f8f6647cca107753435287c46c7dce4bca38179bc1fc5536ffc
Score3/10 -
-
-
Target
zone.tab
-
Size
19KB
-
MD5
629e033b76bb8f01ae05d8c69a55e3f4
-
SHA1
774512e996a3cf2a30df0fce5fb03ee8d4f73b2f
-
SHA256
b4428586696a102423e8dc1c1a31d86f881947685a2090ea2ef4a26c76a56cd4
-
SHA512
3ac7686c55e40af2b63bbd07e4b4cdfa8ebd3d4528fb48c290783ebedd18fbde640aaf3df55f61ece717abff8d0727503d12b9c804549f709d841c8252f09b73
-
SSDEEP
384:KjQ7FZ6OAKf8DYFd+bCviRz0HDT3Io9y65bWFNmc302VTdfSf4bkkhK:KjkMOAKf8DBuKmHHywiYN2VJf2bkw
Score3/10 -