Overview

overview

7

Static

static

7

GB_b19741fxj.apk

android-9-x86

Norican-Regular.ttf

windows7-x64

3

Norican-Regular.ttf

windows10-2004-x64

7

Norican.ttf

windows7-x64

3

Norican.ttf

windows10-2004-x64

7

YOWA.html

windows7-x64

1

YOWA.html

windows10-2004-x64

1

changelog-ar.html

windows7-x64

1

changelog-ar.html

windows10-2004-x64

1

changelog.html

windows7-x64

changelog.html

windows10-2004-x64

1

cl-message...erties

windows7-x64

3

cl-message...erties

windows10-2004-x64

3

clockDarkTheme.xml

windows7-x64

1

clockDarkTheme.xml

windows10-2004-x64

1

clockLightTheme.xml

windows7-x64

1

clockLightTheme.xml

windows10-2004-x64

1

credits.html

windows7-x64

1

credits.html

windows10-2004-x64

animations...6.json

windows7-x64

3

animations...6.json

windows10-2004-x64

3

manifest.json

windows7-x64

3

manifest.json

windows10-2004-x64

3

ic_content...on.xml

windows7-x64

1

ic_content...on.xml

windows10-2004-x64

1

ic_content...ck.xml

windows7-x64

ic_content...ck.xml

windows10-2004-x64

1

ic_content...ck.xml

windows7-x64

1

ic_content...ck.xml

windows10-2004-x64

1

ic_content...ld.xml

windows7-x64

1

ic_content...ld.xml

windows10-2004-x64

1

l17846d7a_a32.so

debian-9-armhf

1

Resubmissions

06-07-2023 18:35

230706-w8fqlsdg43 7

06-07-2023 18:32

230706-w6mfdadg35 7

06-07-2023 18:27

230706-w34kgsdg32 7

05-07-2023 09:21

230705-lbqjfabd66 7

05-07-2023 08:59

230705-kxxdfach7v 7

05-07-2023 08:41

230705-klwmrscg9y 7

05-07-2023 07:15

230705-h3aqhscf6z 7

05-07-2023 07:13

230705-h2e9lsba95 7

05-07-2023 06:50

230705-hl6fvscf2t 7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    GB_b19741fxj.apk

  • Size

    71.1MB

  • Sample

    230705-klwmrscg9y

  • MD5

    42ab9b53ce2eeb3badd078c513ff4397

  • SHA1

    b0511710b4b7e8c879deaee9fd5ff7a4f0d90dc4

  • SHA256

    b653631708cdf4b2ec872b4dca10f3c23380c7a2b2029e20f23b590602d1bcfe

  • SHA512

    04b2cee32688e67057561d99fb287e3c8ddf386373feb21c0ca197184c5f08c419c140225cfec10ad34a477c5a87b65b9fb1d3378d40f2682f36b650fda17fd8

  • SSDEEP

    1572864:OPmkwqnozJlOX+kZJdGGIejWkHdNDGICjrXS05YZZW+j4Fa6s9l9mTiSi0:Yozn0ZJd11GIGXPYZZWvM6sZyfN

Score
7/10
android

Malware Config

Targets

    • Target

      GB_b19741fxj.apk

    • Size

      71.1MB

    • MD5

      42ab9b53ce2eeb3badd078c513ff4397

    • SHA1

      b0511710b4b7e8c879deaee9fd5ff7a4f0d90dc4

    • SHA256

      b653631708cdf4b2ec872b4dca10f3c23380c7a2b2029e20f23b590602d1bcfe

    • SHA512

      04b2cee32688e67057561d99fb287e3c8ddf386373feb21c0ca197184c5f08c419c140225cfec10ad34a477c5a87b65b9fb1d3378d40f2682f36b650fda17fd8

    • SSDEEP

      1572864:OPmkwqnozJlOX+kZJdGGIejWkHdNDGICjrXS05YZZW+j4Fa6s9l9mTiSi0:Yozn0ZJd11GIGXPYZZWvM6sZyfN

    Score
    1/10
    behavioral1

    • Target

      Norican-Regular.ttf

    • Size

      45KB

    • MD5

      3426ee499f815a2ea5a90b1ae7447bf3

    • SHA1

      e74bdc08e742904dcc23e4af44978bcb74a5fa59

    • SHA256

      f8f8988cf7cc2bfa4093c6aa2ff97e4b0e0f3e1e6f64750cc8a94426c646a951

    • SHA512

      ca027a480f62a826ebf416c2b81f581fb17b19fc70fa3e33750fb03d29553fae513e78d742380578bbf201bf2f40a7555b58a5d0fdbfa565aa23601be945cb16

    • SSDEEP

      768:Hdidy5DYCQipTTQuLRBGyKJnZBKA6osTCDjzDAW5b9k6gGzVfj5DazMMditIP0Pj:4dMlfQuLnGxPdsTCDj1puGTPIP0Pge

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral2behavioral3

    • Target

      Norican.ttf

    • Size

      45KB

    • MD5

      3426ee499f815a2ea5a90b1ae7447bf3

    • SHA1

      e74bdc08e742904dcc23e4af44978bcb74a5fa59

    • SHA256

      f8f8988cf7cc2bfa4093c6aa2ff97e4b0e0f3e1e6f64750cc8a94426c646a951

    • SHA512

      ca027a480f62a826ebf416c2b81f581fb17b19fc70fa3e33750fb03d29553fae513e78d742380578bbf201bf2f40a7555b58a5d0fdbfa565aa23601be945cb16

    • SSDEEP

      768:Hdidy5DYCQipTTQuLRBGyKJnZBKA6osTCDjzDAW5b9k6gGzVfj5DazMMditIP0Pj:4dMlfQuLnGxPdsTCDj1puGTPIP0Pge

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral4behavioral5

    • Target

      YOWA.html

    • Size

      648B

    • MD5

      00afda385226fc12c0ff63f0fc065278

    • SHA1

      b40143e306c45e09b99f3431ffdb02c0d70932c5

    • SHA256

      e36c965275a591eb12b4eb64bf9d69e59b73526d86fb6bb1ffc2ddec12523d33

    • SHA512

      2ec7d3fa444986a48a7f8ab3707b7e45518bf6408709189a2c2a1fa420e8919612b1136deb2d1dacd7bedf1cf6e3746fff985935aeb92de50808566bb8f6c91b

    Score
    1/10
    behavioral6behavioral7

    • Target

      changelog-ar.html

    • Size

      72KB

    • MD5

      c651bb94e9f83dc0e7c948c60eb1db60

    • SHA1

      9d982fef2dc879c8e91d9003d398de221d3ba9f3

    • SHA256

      cd0453a82a7ed5379049a5d3f3d91ab36e673761418e777d91c4c944d1912a81

    • SHA512

      3e234e7e0167967e1600dd8dbb5b3d0c119205d67eab93e09bb9d2a6bba470dc6f324edf787cd54bcf3cbfd77680eaa32b128bde7a023dbd619bc37094d952a1

    • SSDEEP

      1536:aQweFu6MydzhX0iYvTqrSFL7pGXtiEmfxZb6JOL4suMApYlvpENCdjWbFlrQ9ZLW:DBu6Mydz90TqmFL7pGdiEMxZb6JO0suP

    Score
    1/10
    behavioral8behavioral9

    • Target

      changelog.html

    • Size

      74KB

    • MD5

      de665303b7be08ecf0864e311e94a494

    • SHA1

      24a439da462073f0bad6cb46fbb563d1853c6eb8

    • SHA256

      96b893c1582a878bc721d0a19229e7bc99aaaae107002c651d57fd5bf5bdf9b7

    • SHA512

      102893fd6dc7dc340cfd453619b281f5b6db285847d76058ca6ca2db829d9080e46c965eaeb0ff5db63adf1501a2fc8bc8490af31b6eb16afe7495cec22b456a

    • SSDEEP

      1536:6eTlYbDk68dvzfMBBx+N24Dt2XGyjdwa8cID20+ADN6z+yH0ZyQmbvfZ/4OAS9vr:nTEDk68dreB0N24DsXGSwaZIDH+ADN6P

    Score
    1/10
    behavioral10behavioral11

    • Target

      cl-messages_en_us.properties

    • Size

      1KB

    • MD5

      35c5cc3173e8077f14a2f281855e750c

    • SHA1

      3c8a782a9732c3d627f1f487be91ad5f6c5f826a

    • SHA256

      4510dd1cba41cadfaf4115b5e27b543ac0ddcd94e746faaac610654a0ff62b94

    • SHA512

      0c552132dfb8725e5f52cb0677d98273f87e45be456bbb7c090d2a82c2926bb0e3f43ad602a9f39e84270eba6486fa6e4a1307db42ba4dbba73a3ee6121741a2

    Score
    3/10
    behavioral12behavioral13

    • Target

      clockDarkTheme.svg

    • Size

      1KB

    • MD5

      663e33bfbbb0d14830694114d49c457d

    • SHA1

      3231baf54a3c1f336f1b11d9a7011bc5502a9d4a

    • SHA256

      43b0cd84c7344f57b2656d66d5bf215a4f1d1713a8117e0ecf92226b8ce1a200

    • SHA512

      c116ffaf6c1f8ad9bd6a1d85de318c9ca2c3b6d4931a1aa165dc7ef7351c80fbddc7ca1371c81dee35b3e12720fee2d3146d7a510b54026c3aba9202dee5f1b8

    Score
    1/10
    behavioral14behavioral15

    • Target

      clockLightTheme.svg

    • Size

      3KB

    • MD5

      2235609a58ada82f2110d941341a720d

    • SHA1

      d3b06251eb8f131034ba1ea3b0db982cb31bd813

    • SHA256

      d89ab1d4bc636a73d64ef1d8976d517f13449a11af28d70e88ca3d0c40e114a7

    • SHA512

      ff7543b27941add4a92579f1a55f3b40a16cd8ec8cc43b678b229be38a3878267fcdbb80b040e91132fd938082c47e6e237f62ac3903422ad9499cf7164228d5

    Score
    1/10
    behavioral16behavioral17

    • Target

      credits.html

    • Size

      3KB

    • MD5

      64ecc35282113e2de83eb80221a9c379

    • SHA1

      236417851a07204647043cbec1570bd2c86d1b3f

    • SHA256

      98573f2746aafd2c7dd8313b12021da2fc47d7b0111a1a0b79eab18c4730fae9

    • SHA512

      39cbeae68f7ce7d22510c22c6542168969ed789c6ab66d9d41c3d443fe0815c84571b833eff7e4f5139a61b7776114ec7194c1d1d87b2c7058ad5b51381212d1

    Score
    1/10
    behavioral18behavioral19

    • Target

      animations/lf30_editor_cjab5ej6.json

    • Size

      41KB

    • MD5

      891d8d9d1b99cc444ef159c72349097d

    • SHA1

      493be2f3109c01243280c72893b21dba695871d1

    • SHA256

      32f0f87470de304b244a7a87971466824a597b4433eed9fb193fc2063a9256df

    • SHA512

      366524565d0c5e5fa53af454de2b17a2690b838fe8cbb908eabdad5c19915ab466c05bb9cd2ae113303bd453266e932b8089131b4274cb01138ad6b48c9c2b1e

    • SSDEEP

      384:jGZC6H4WCtUBvnz0uCZd7OzGZC6H4WCtUrnz0uCZda/T3SVv/k/NBsM6jt+DVpv1:jzfHpczfxpYkIUk

    Score
    3/10
    behavioral20behavioral21

    • Target

      manifest.json

    • Size

      195B

    • MD5

      54dc1a0b1650fa4a1bd7d23c057207c1

    • SHA1

      54bb6b9263ee3f53795fd31270b48aa7c8b90a4c

    • SHA256

      e78846def210925db8458af6804cecd2f04d9026a4635ce74ca68da7b42d3f11

    • SHA512

      8385ec4fa9f14c42855ac1c6e345aa16eb7f42df003461b993125f55c19c7ef0193b346f0b7f2dea5ba87c7a2e6fdfab4ef3649367da0126ff0902407ac6bb51

    Score
    3/10
    behavioral22behavioral23

    • Target

      ic_content_sticker_location.svg

    • Size

      1KB

    • MD5

      4e1bfd935af6c3abdbde4cd2eba4a72b

    • SHA1

      a698232554fe0e28e65556549d97977a4fcf375e

    • SHA256

      b887e3205ff5b8e38c1ad986ea7f534c73c2a28f989639fc1f4fb672521e1e3a

    • SHA512

      697f7b42c02f1ce5fde22474c5c10cc1adc838eab76eb47269cccf4c7fc1cdebbe3de1f81d231c87cc3c8bf090502c4e405fba92ccf345163644d17d17baf84f

    Score
    1/10
    behavioral24behavioral25

    • Target

      ic_content_sticker_location_60_percent_black.svg

    • Size

      1KB

    • MD5

      a3c9e4e574c26a244e4660e3412d803c

    • SHA1

      98c4d769e0efa91892b72887ff5075944b3547a6

    • SHA256

      1b6c02ff1e1e60d73f6b31c1c53faebe6d1f57782e3caf3c4328a65b4929648e

    • SHA512

      f0660665f035131c70589a70955b2bfa8c7c8b9c45053f914bad335be06a2f8c23246c24348e3e469a03ae4449811796e39843a07a275cca1806dfed10df1610

    Score
    1/10
    behavioral26behavioral27

    • Target

      ic_content_sticker_location_black.svg

    • Size

      1KB

    • MD5

      fb77f4f57cfc4c4a6016d10c56e879d9

    • SHA1

      d98ed1a853a61e722f35525e47b16616d5b56fce

    • SHA256

      c6f4e62c0d25cc789058a5563bcc546bd10f492f2e95fa5cd3824951680f1b1b

    • SHA512

      78ec21798b9adca5822ac03446a8e66017281c6767d99114e524c57952942c745699e58e3228441e54ba42654f91156ee5a26fd8025afbe4e5543e053d63f627

    Score
    1/10
    behavioral28behavioral29

    • Target

      ic_content_sticker_location_emerald.svg

    • Size

      1KB

    • MD5

      aadfe32db3ccc31c96197f0591e0fa18

    • SHA1

      59ce2e9a22fff2e9a1b68578c429f5d710463d0e

    • SHA256

      71d43fecf9f2ef6e37022c8446194d74f11b7c05816ce321f6a84279c870b4fc

    • SHA512

      914f19b03527d440752bc284fa46af19ae7cf9f4d2c11cb7bb2753fd50526181e6ca5abed68c695236227b5d8e39db1b5f9359c2d0470a4eaa147c244cc91ddd

    Score
    1/10
    behavioral30behavioral31

    • Target

      l17846d7a_a32.so

    • Size

      3.4MB

    • MD5

      6caa2de5e4c827d872335f0504111450

    • SHA1

      2f616a5fb0ffcc3e71fc068057eb0af9fb26f111

    • SHA256

      8187c84be99248d1d9c7b2dbfc7d7a4ad1e633185e09edee0458b49f458cf99c

    • SHA512

      b4d4ff14aec235017830f5e6c7934a063253845d59be12366b746e5f3dcea61df6b45b8193621de0525811331ff5f470adef9f76a76deb7c38419acb72d6a8ce

    • SSDEEP

      49152:uO0BAi97ysh4BghnynVpmnBpkSETLUECe:uOEAZBgRyVIBphETLUy

    Score
    1/10
    behavioral32

MITRE ATT&CK Enterprise v6

Tasks