Overview

overview

7

Static

static

7

Bitfinex-3.apk

android-9-x86

1

libjiagu.so

debian-9-armhf

libjiagu_a64.so

ubuntu-18.04-amd64

libjiagu_a64.so

debian-9-armhf

libjiagu_a64.so

debian-9-mips

libjiagu_a64.so

debian-9-mipsel

user_protocal.html

windows7-x64

1

user_protocal.html

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Bitfinex-3.apk

  • Size

    24MB

  • Sample

    230609-tj1y5sce94

  • MD5

    de49af2de83b3a4d3776711e5a24ec39

  • SHA1

    2a8facfd8c0ca55c65e86ff9b6a6d1865266a0ad

  • SHA256

    e27f4fc8995be6ef158d8cf4d3a26b5b57fd713772581c222588b6abcc157644

  • SHA512

    8806ff5ba223b22bcd87a7276fb51ead29e5a04162fc24c23f9051513bec253ed3c72b2dd6d45926415f1fa43942ac6761bfaf6ec06b8a50efa22003c3260cbc

  • SSDEEP

    786432:9C+y+WsjNsFM+KDt/6izppt06izptBskzp:C+jCrKpSYl9YeOp

Score
7/10
androidlinux

Malware Config

Targets

    • Target

      Bitfinex-3.apk

    • Size

      24MB

    • MD5

      de49af2de83b3a4d3776711e5a24ec39

    • SHA1

      2a8facfd8c0ca55c65e86ff9b6a6d1865266a0ad

    • SHA256

      e27f4fc8995be6ef158d8cf4d3a26b5b57fd713772581c222588b6abcc157644

    • SHA512

      8806ff5ba223b22bcd87a7276fb51ead29e5a04162fc24c23f9051513bec253ed3c72b2dd6d45926415f1fa43942ac6761bfaf6ec06b8a50efa22003c3260cbc

    • SSDEEP

      786432:9C+y+WsjNsFM+KDt/6izppt06izptBskzp:C+jCrKpSYl9YeOp

    Score
    1/10
    behavioral1

    • Target

      libjiagu.so

    • Size

      535KB

    • MD5

      ee9851df352031dba28a651a9331e72e

    • SHA1

      c116841052127ac44dda50fc5b51d773a692cdf6

    • SHA256

      177c177eb04f09829f72a2fcb0e55c3ffa466559b11829be534c36b128e7479e

    • SHA512

      5002ec4c84849089001e38e760a71edcc634e3ac999c1f24a6061fc1c49a77a2d86c12dcef00a2a45b0d54810241fb87aecd99e905ca8db41dce429428e56115

    • SSDEEP

      12288:wKJvlbLM+PGbhy5dnzkL7whicPz3PvLabXvUSYV+e:xlLM+ObhknzGUhlvGLMSYV5

    Score
    1/10
    behavioral2

    • Target

      libjiagu_a64.so

    • Size

      626KB

    • MD5

      1120dac755c4fdd9ce1410ffdaf232a7

    • SHA1

      d53127c792329c7d83c5de443099f2daa1b69af9

    • SHA256

      ec66052f5c1c4c2943cc1906197f20c4642acb1a9526b97624f034cbb2138f46

    • SHA512

      ffd400029200658790add54839a23f8b830ffc014a8e2ddcfa8d9801effe0aedde886bdf88a9487493dc10e446ead0ba86ff145c3533eb031c3b1c464af6b526

    • SSDEEP

      12288:9OxLzOUzPc4ohuOPNrxrUI45nonyWwPHwUBeeEhEc7FmA0yJwl+:6zO6swaVTnJcwU1pyvw+

    Score
    1/10
    behavioral3behavioral4behavioral5behavioral6

    • Target

      user_protocal.html

    • Size

      34KB

    • MD5

      86433627bb6ade51e78d28e7517ab01e

    • SHA1

      1a7a7f0135fbf03cf6751a531266e1518065874c

    • SHA256

      bec7e820291cfd5411f7a7a848dbaefe1f4bc065c3a782ca24fb4431cda1a205

    • SHA512

      1199f4fe7d78e8ffe770f3d93d810d296ed238daa92399ca5c33e05ce1baee21d373f5e22b840e50cb1e666d3a6d44e678c44c51ad7ec63832d54ef2a7c04d1b

    • SSDEEP

      768:MRtJ/fPC8mG3KbmVc47wWzRlefosQDyWn43+SHzyeAmNq5MC38EJy6p1fILjkVcJ:QJ/fPC8NImVcwwWzafo9fni+SLAmNq5S

    Score
    1/10
    behavioral7behavioral8

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks