Overview
overview
4Static
static
16aae5a6bd6...fa.apk
android-9-x86
15.docx
windows7-x64
45.docx
windows10-2004-x64
18w5rtWmoHg...uj.ppt
windows7-x64
18w5rtWmoHg...uj.ppt
windows10-2004-x64
1AdlNHL2lo4...wV.ppt
windows7-x64
1AdlNHL2lo4...wV.ppt
windows10-2004-x64
1KdgZjrNQHb...y7.ppt
windows7-x64
1KdgZjrNQHb...y7.ppt
windows10-2004-x64
1L.docx
windows7-x64
4L.docx
windows10-2004-x64
1WqdMN4daK8...ZL.bat
windows7-x64
1WqdMN4daK8...ZL.bat
windows10-2004-x64
1bcAb35Xglw...vj.bat
windows7-x64
1bcAb35Xglw...vj.bat
windows10-2004-x64
1d.bat
windows7-x64
1d.bat
windows10-2004-x64
1epXZmd2ILk...HR.pdf
windows7-x64
1epXZmd2ILk...HR.pdf
windows10-2004-x64
1f.bat
windows7-x64
1f.bat
windows10-2004-x64
1fauKvhQd31...en.doc
windows7-x64
4fauKvhQd31...en.doc
windows10-2004-x64
1gdRnUiQmJD...LY.bat
windows7-x64
1gdRnUiQmJD...LY.bat
windows10-2004-x64
1h.docx
windows7-x64
4h.docx
windows10-2004-x64
1i.bat
windows7-x64
1i.bat
windows10-2004-x64
1n6PQHOIcXJ...7Z.pdf
windows7-x64
1n6PQHOIcXJ...7Z.pdf
windows10-2004-x64
1p.doc
windows7-x64
4Static task
static1
Behavioral task
behavioral1
Sample
6aae5a6bd603568867662898b5ff9cfa.apk
Resource
android-x86-arm-20220823-en
Behavioral task
behavioral2
Sample
5.docx
Resource
win7-20230220-en
Behavioral task
behavioral3
Sample
5.docx
Resource
win10v2004-20230220-en
Behavioral task
behavioral4
Sample
8w5rtWmoHg9aaUGO7cNRUcMQQuCZWy7VcdR2L7Dk1S9elgrR7O33Pymu1G41AOg84NOX3mwBFDpoBf8hCRgeHEAKp7ReFJet8Zuj.ppt
Resource
win7-20230220-en
Behavioral task
behavioral5
Sample
8w5rtWmoHg9aaUGO7cNRUcMQQuCZWy7VcdR2L7Dk1S9elgrR7O33Pymu1G41AOg84NOX3mwBFDpoBf8hCRgeHEAKp7ReFJet8Zuj.ppt
Resource
win10v2004-20230220-en
Behavioral task
behavioral6
Sample
AdlNHL2lo41nPjbBpN6v6eW7A4sckCHw3AkNacpLnRjD6usa2wOERmvkE1fvlQ9PkHjOPX3AyPkSgIPAElvvdSncN9zmwKtDjCwV.ppt
Resource
win7-20230220-en
Behavioral task
behavioral7
Sample
AdlNHL2lo41nPjbBpN6v6eW7A4sckCHw3AkNacpLnRjD6usa2wOERmvkE1fvlQ9PkHjOPX3AyPkSgIPAElvvdSncN9zmwKtDjCwV.ppt
Resource
win10v2004-20230221-en
Behavioral task
behavioral8
Sample
KdgZjrNQHbsiSiAXu4WoR3PcMIIMfOBwPVyWMnBGl8kjkHa2K8TYNXGCVBdbsMoS1zh8w4maB6s9ZIMRIS2BPBCSYXNpq9qXDyy7.ppt
Resource
win7-20230220-en
Behavioral task
behavioral9
Sample
KdgZjrNQHbsiSiAXu4WoR3PcMIIMfOBwPVyWMnBGl8kjkHa2K8TYNXGCVBdbsMoS1zh8w4maB6s9ZIMRIS2BPBCSYXNpq9qXDyy7.ppt
Resource
win10v2004-20230220-en
Behavioral task
behavioral10
Sample
L.docx
Resource
win7-20230220-en
Behavioral task
behavioral11
Sample
L.docx
Resource
win10v2004-20230220-en
Behavioral task
behavioral12
Sample
WqdMN4daK8UoaEbOVW8eLOZ2jbSPIZPD7SzGadAH8pyhZTdsdk3dgpD8ATCxTlkzhlWUQMuEwyeoCc3bI3mu1DkeerE2wpYKy9ZL.bat
Resource
win7-20230220-en
Behavioral task
behavioral13
Sample
WqdMN4daK8UoaEbOVW8eLOZ2jbSPIZPD7SzGadAH8pyhZTdsdk3dgpD8ATCxTlkzhlWUQMuEwyeoCc3bI3mu1DkeerE2wpYKy9ZL.bat
Resource
win10v2004-20230220-en
Behavioral task
behavioral14
Sample
bcAb35XglwVuWdCtrjsaxcWGuNgOkgUL2MjpA7VfmgtWd3kRLWzYyGajOyASR6cPhc7SceW7vIUhZfUEAj9f2O2TKkadYDf6Eyvj.bat
Resource
win7-20230220-en
Behavioral task
behavioral15
Sample
bcAb35XglwVuWdCtrjsaxcWGuNgOkgUL2MjpA7VfmgtWd3kRLWzYyGajOyASR6cPhc7SceW7vIUhZfUEAj9f2O2TKkadYDf6Eyvj.bat
Resource
win10v2004-20230220-en
Behavioral task
behavioral16
Sample
d.bat
Resource
win7-20230220-en
Behavioral task
behavioral17
Sample
d.bat
Resource
win10v2004-20230220-en
Behavioral task
behavioral18
Sample
epXZmd2ILk1SbfwbkmwfxvhEmjLayqLkiZFaCiAVlbWtiDBonRBlYHnPPNmfOBlgSI2vIZX9d3J2wvmenxfjltUjgBCpUlb47WHR.pdf
Resource
win7-20230220-en
Behavioral task
behavioral19
Sample
epXZmd2ILk1SbfwbkmwfxvhEmjLayqLkiZFaCiAVlbWtiDBonRBlYHnPPNmfOBlgSI2vIZX9d3J2wvmenxfjltUjgBCpUlb47WHR.pdf
Resource
win10v2004-20230220-en
Behavioral task
behavioral20
Sample
f.bat
Resource
win7-20230220-en
Behavioral task
behavioral21
Sample
f.bat
Resource
win10v2004-20230221-en
Behavioral task
behavioral22
Sample
fauKvhQd31IDcZkO3eyQixFAKb1LcED9cGEqwZeGdOKnDM6CLRlvbPntjLwm9EQgiigQkc6DJqiN2WEdTniLHc8tpY72zyMWNFen.doc
Resource
win7-20230220-en
Behavioral task
behavioral23
Sample
fauKvhQd31IDcZkO3eyQixFAKb1LcED9cGEqwZeGdOKnDM6CLRlvbPntjLwm9EQgiigQkc6DJqiN2WEdTniLHc8tpY72zyMWNFen.doc
Resource
win10v2004-20230220-en
Behavioral task
behavioral24
Sample
gdRnUiQmJDz7w6ODDJeP6HPudWuMIS6vg9o4ChNRuKHgtkEipKEgjseOAhWRGhHCxmkWkwOcSAJdjMeccyWc8bRuoiWji3ljJcLY.bat
Resource
win7-20230220-en
Behavioral task
behavioral25
Sample
gdRnUiQmJDz7w6ODDJeP6HPudWuMIS6vg9o4ChNRuKHgtkEipKEgjseOAhWRGhHCxmkWkwOcSAJdjMeccyWc8bRuoiWji3ljJcLY.bat
Resource
win10v2004-20230220-en
Behavioral task
behavioral26
Sample
h.docx
Resource
win7-20230220-en
Behavioral task
behavioral27
Sample
h.docx
Resource
win10v2004-20230220-en
Behavioral task
behavioral28
Sample
i.bat
Resource
win7-20230220-en
Behavioral task
behavioral29
Sample
i.bat
Resource
win10v2004-20230220-en
Behavioral task
behavioral30
Sample
n6PQHOIcXJxej87fo3ZLPWsuySbSe5GVjolvBMrkxyimk8Da41VgApxaRMCR5qP1fpWWtgK9BugLEum2MasAbLGnKay8nQTIHI7Z.pdf
Resource
win7-20230220-en
Behavioral task
behavioral31
Sample
n6PQHOIcXJxej87fo3ZLPWsuySbSe5GVjolvBMrkxyimk8Da41VgApxaRMCR5qP1fpWWtgK9BugLEum2MasAbLGnKay8nQTIHI7Z.pdf
Resource
win10v2004-20230220-en
Behavioral task
behavioral32
Sample
p.doc
Resource
win7-20230220-en
Errors
General
-
Target
6aae5a6bd603568867662898b5ff9cfa.apk
-
Size
53.5MB
-
MD5
6aae5a6bd603568867662898b5ff9cfa
-
SHA1
e8147cb62c6247137f6744cf1994807d5af8de55
-
SHA256
b5e47dd81893534100e5e3b9d2c99a14cab3ef28754addcb065e6ac39e6c0792
-
SHA512
fd7762b492e925b8a59d16608fc124a3ec3ed71e7d822930bcf53cb88021df99ff71cee119c33a2a110ff9ef237e71f18b839af350579f1fcfa0baea1df3e2ff
-
SSDEEP
786432:Y/ycPFzutIj573sSpT8jyo6rrO5bNVE1clWi0rSI+6wIkiiPTID9XcCsQ2jdaii:Y6EzXd78rt6HODASUkNPnCD2jd9i
Malware Config
Signatures
Files
-
6aae5a6bd603568867662898b5ff9cfa.apk.apk android arch:arm64 arch:arm
-
3Y1UlRyez9zZgCkLcfo2UWTp7fOkvxkJGAKRyYczuTpC7eKxAhsR33eNSNcXvI2PbWYOSqKyW8kfWxHsqeNTt3hTaL4nim3iskJ7.txt
-
5.docx
-
8w5rtWmoHg9aaUGO7cNRUcMQQuCZWy7VcdR2L7Dk1S9elgrR7O33Pymu1G41AOg84NOX3mwBFDpoBf8hCRgeHEAKp7ReFJet8Zuj.ppt
-
AdlNHL2lo41nPjbBpN6v6eW7A4sckCHw3AkNacpLnRjD6usa2wOERmvkE1fvlQ9PkHjOPX3AyPkSgIPAElvvdSncN9zmwKtDjCwV.ppt
-
CircleDashTexture.png.png
-
DVDirectory.cfg
-
DVHotMap.cfg
-
DVHotcity.cfg
-
DVIndoor.cfg
-
DVSDirectory.cfg
-
DVStreet.cfg
-
DVVersion.cfg
-
E.txt
-
KdgZjrNQHbsiSiAXu4WoR3PcMIIMfOBwPVyWMnBGl8kjkHa2K8TYNXGCVBdbsMoS1zh8w4maB6s9ZIMRIS2BPBCSYXNpq9qXDyy7.ppt
-
L.docx
-
L8TvOVEk7DQrP7pV8cjkdkTcyXWeiDWCgKtm1RM9M4WTZoP5BVBR2AJ5CiFltFXl2CibXpz2o29byzyN6oK8jipRbiAYKUDRVG6f.cs
-
LsOkTZYSKzmsWbt6klYIFgGiBbyLGgQUaxeNqTgqmqz6GZOOkVCRSfdUKgecZN815ScESfDjyteCNuqLG3bAj8oZVvyrPo1Eszx4.png
-
M5File
-
McjmwDTdQTrAbouFL36Unrqdq3cAaYVJEQPNlOGHMQPc2T5x792DaK9rdVbSWIGyiVjAo9lKKv3J3SiVKJzMXpMCgTGIWhOSeI8p.txt
-
PhoneFormats.dat
-
ResPackIndoorMap.sdkrs
-
RlzKCx6JU3zoynTyrRVTHo6eUZXQv5sPWHma6mhh1TXjgrbaVoyONZGVxDTP8zRQdLRflNceBUDhIbb4Ttt836iDKxSVwalJ6Y4i.c
-
SDK_Default_Icon_Car.png.png
-
SDK_Default_Icon_End.png.png
-
SDK_Default_Icon_Passenger.png.png
-
SDK_Default_Icon_Start.png.png
-
SDK_Default_Route_Texture_Bule_Arrow.png.png
-
SDK_Default_Route_Texture_Gray_Arrow.png.png
-
SDK_Default_Traffic_Texture_Congestion.png.png
-
SDK_Default_Traffic_Texture_SevereCongestion.png.png
-
SDK_Default_Traffic_Texture_Slow.png.png
-
SDK_Default_Traffic_Texture_Smooth.png.png
-
T.java
-
WqdMN4daK8UoaEbOVW8eLOZ2jbSPIZPD7SzGadAH8pyhZTdsdk3dgpD8ATCxTlkzhlWUQMuEwyeoCc3bI3mu1DkeerE2wpYKy9ZL.bat
-
Y.txt
-
a.txt
-
arctic.attheme
-
bHrFRwVPuolcNhJASBHkNzjMTHjidswmOjQkOIPecBCytgTarHBubfKKnP4sKkLw6PelfqndzIKhGRegQ1H3feZ2hf5yRWLUe7rV.jpg
-
baseindoormap.sty
-
bcAb35XglwVuWdCtrjsaxcWGuNgOkgUL2MjpA7VfmgtWd3kRLWzYyGajOyASR6cPhc7SceW7vIUhZfUEAj9f2O2TKkadYDf6Eyvj.bat
-
bluebubbles.attheme
-
countries.txt
-
countries_cn.txt
-
countries_tw.txt
-
d.bat
-
dark.attheme
-
darkblue.attheme
-
e.c
-
epXZmd2ILk1SbfwbkmwfxvhEmjLayqLkiZFaCiAVlbWtiDBonRBlYHnPPNmfOBlgSI2vIZX9d3J2wvmenxfjltUjgBCpUlb47WHR.pdf
-
f.bat
-
fauKvhQd31IDcZkO3eyQixFAKb1LcED9cGEqwZeGdOKnDM6CLRlvbPntjLwm9EQgiigQkc6DJqiN2WEdTniLHc8tpY72zyMWNFen.doc
-
g.jpg
-
gdRnUiQmJDz7w6ODDJeP6HPudWuMIS6vg9o4ChNRuKHgtkEipKEgjseOAhWRGhHCxmkWkwOcSAJdjMeccyWc8bRuoiWji3ljJcLY.bat
-
graphite.attheme
-
h.docx
-
i.bat
-
icon_scale.9.png.png
-
idl-license.beta-face-android
-
idl-license.face-android
-
lineDashTexture.png.png
-
living.json
-
loading-w.json
-
logo_h.png.png
-
logo_l.png.png
-
main_bottombtn_down.9.png.png
-
main_bottombtn_up.9.png.png
-
main_icon_zoomin.png.png
-
main_icon_zoomin_dis.png.png
-
main_icon_zoomout.png.png
-
main_icon_zoomout_dis.png.png
-
main_topbtn_down.9.png.png
-
main_topbtn_up.9.png.png
-
map.sdkrs
-
map.sty
-
md5.txt
-
n6PQHOIcXJxej87fo3ZLPWsuySbSe5GVjolvBMrkxyimk8Da41VgApxaRMCR5qP1fpWWtgK9BugLEum2MasAbLGnKay8nQTIHI7Z.pdf
-
p.doc
-
r.bat
-
r.jpg
-
reduct.sdkrs
-
reduct.sty
-
right.json
-
ritalic.ttf
-
rmedium.ttf
-
rmediumitalic.ttf
-
rmono.ttf
-
secureid_ocr_nn.dat
-
tBUXyHwSZyblNYvcaRJDbikncNtjAM5TR6KirlIe6LXLjevg99iYLLh7SrvYHRmRWJrsq1PDeoaZtZMnEg9Mg41OXp51rS7ZkEHc.bat
-
time.json
-
traffic.sdkrs
-
traffic.sty
-
uni-jsframework.js.js
-
upanddown.json
-
v14_emoji2.0x_0_0.png.png
-
v14_emoji2.0x_0_1.png.png
-
v14_emoji2.0x_0_2.png.png
-
v14_emoji2.0x_0_3.png.png
-
v14_emoji2.0x_1_0.png.png
-
v14_emoji2.0x_1_1.png.png
-
v14_emoji2.0x_1_2.png.png
-
v14_emoji2.0x_1_3.png.png
-
v14_emoji2.0x_2_0.png.png
-
v14_emoji2.0x_2_1.png.png
-
v14_emoji2.0x_2_2.png.png
-
v14_emoji2.0x_2_3.png.png
-
v14_emoji2.0x_3_0.png.png
-
v14_emoji2.0x_3_1.png.png
-
v14_emoji2.0x_3_2.png.png
-
v14_emoji2.0x_3_3.png.png
-
v14_emoji2.0x_4_0.png.png
-
v14_emoji2.0x_4_1.png.png
-
v14_emoji2.0x_4_2.png.png
-
v14_emoji2.0x_4_3.png.png
-
v14_emoji2.0x_5_0.png.png
-
v14_emoji2.0x_5_1.png.png
-
v14_emoji2.0x_5_2.png.png
-
v14_emoji2.0x_5_3.png.png
-
v14_emoji2.0x_6_0.png.png
-
v14_emoji2.0x_6_1.png.png
-
v14_emoji2.0x_6_2.png.png
-
v14_emoji2.0x_6_3.png.png
-
v14_emoji2.0x_7_0.png.png
-
v14_emoji2.0x_7_1.png.png
-
v14_emoji2.0x_7_2.png.png
-
v14_emoji2.0x_7_3.png.png
-
wear_zoom_in.png.png
-
wear_zoom_in_pressed.png.png
-
wear_zoom_out_pressed.png.png
-
wear_zoon_out.png.png