General

  • Target

    TeraBox- Cloud Storage Space_3.14.5_Apkpure.apk

  • Size

    91.7MB

  • Sample

    230705-z9ndmaga32

  • MD5

    200e5b2e717db95ab0734c2708b4c2f2

  • SHA1

    d5e6a267fd945154c595a62612143fabbe3961a6

  • SHA256

    637fc5d1236a31c26781bbab719589d69bb4d044d73510c3086974ae59744efb

  • SHA512

    926423b3056c71255bfe06c0dffc9d0cadc8c7f2423598dea64b33ee006b5698f5af95624f606d151cdddf7f77f58862bc195d191792c3a44424c05066b591ab

  • SSDEEP

    1572864:t0NqCFbBJnvsyXgmLTPjvgHM9dkxR2XMyDBxwpxUYh4KVZW4W5eSx6a:mYq1wirjvgsiR2xXwpxPVZ00Sx9

Malware Config

Targets

    • Target

      TeraBox- Cloud Storage Space_3.14.5_Apkpure.apk

    • Size

      91.7MB

    • MD5

      200e5b2e717db95ab0734c2708b4c2f2

    • SHA1

      d5e6a267fd945154c595a62612143fabbe3961a6

    • SHA256

      637fc5d1236a31c26781bbab719589d69bb4d044d73510c3086974ae59744efb

    • SHA512

      926423b3056c71255bfe06c0dffc9d0cadc8c7f2423598dea64b33ee006b5698f5af95624f606d151cdddf7f77f58862bc195d191792c3a44424c05066b591ab

    • SSDEEP

      1572864:t0NqCFbBJnvsyXgmLTPjvgHM9dkxR2XMyDBxwpxUYh4KVZW4W5eSx6a:mYq1wirjvgsiR2xXwpxPVZ00Sx9

    Score
    7/10
    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Reads information about phone network operator.

    • Uses Crypto APIs (Might try to encrypt user data).

    • Target

      badjs.min.2.1.2.terabox.js

    • Size

      6KB

    • MD5

      8513584cc02795770597289daa3a893c

    • SHA1

      b945de05350d27b64de3f6bcfb86cf16a4d93f6d

    • SHA256

      42c0b1ca5382a38cf90b48bff3bdc932fbdcdc27db3727a2e836db91764e95c6

    • SHA512

      9104391ea62b01707f032d6d67b270a4e7cf7d4aca255b1e4cdc038eee7c6cafda224ac351eb20b7a3c0af46260d5f8415fef7b28d5d9e9c35c6290280b0d324

    • SSDEEP

      192:eXxKKwitpoE3TO8ciQXSYLMFwByZYLMFfB/DXAZTh7tCRq0JoUyq6a:7qoE3TOq3Fg4Fp/DwN9fyzL

    Score
    1/10
    • Target

      chunk-2d0b653b.eb295f3c.js

    • Size

      1KB

    • MD5

      2ff1d7f0817b19dce0a9a2a633f9e53d

    • SHA1

      df546ffcc395d0a4fedef7d3087c93244f4f073e

    • SHA256

      53a7b8883b57203ee7a39e214dab33da328b913444e9516b2b311aaffccf0860

    • SHA512

      a8785403c978d4fcbd2a085f961dd2398ebe675935666c2323d1c9124b8a73a28f35f31c493294bcb517de88531420b90271355ccf6b556a3de7ac413bc30843

    Score
    1/10
    • Target

      chunk-c7b51554.bb9c1a17.js

    • Size

      19KB

    • MD5

      46bb61aff95f856a76cb88a0527c2b95

    • SHA1

      9788e9ceee4b9f27d9f1d97c6b02e05f71bffcb4

    • SHA256

      c16cbedf64b3d500408657addb94b87abd82bb51214707ba82fb669e73c2e6bf

    • SHA512

      f0e696a964496d8254f6b2816cc510ac3735127d37217b0f54ceaa02698bd4da65b95fe208e720e6d693e66537885d50da07a28816c5cf02942af8dbc05c37e3

    • SSDEEP

      384:rLzhAVmyKZ1NPxqxM0V2iE8OFB6Y9sLjUmRIW:r3Hh1NPwBrEJ6Y9sLj9RIW

    Score
    1/10
    • Target

      chunk-vendors.2223937f.js

    • Size

      908KB

    • MD5

      114605497dfb84779c1b7ebf96c0c37c

    • SHA1

      995b7d871d73a39a01d523a258343316d38dea64

    • SHA256

      d52d12b46ed138825736ba7eecb91028c71b2a6b4eedc22b94aa6150f8e22c77

    • SHA512

      3005262f5d49e25926133e3b42a4ffffac788f1d93814393d6e3c1602beea1db3ecb5cb76af9583c9318c15eb09e5a6b1177e9e548f6606e30dd5e69e795ecf7

    • SSDEEP

      24576:0Hrmpwrmpm8aXu8bAxmcPJ5UlrcPkcP+1XJmrhNmrhmrDNmrGjVatnhgQch61D5b:0Hrmpwrmpm8aXu8bAxmcPbUlrcPkcPW5

    Score
    1/10
    • Target

      chunk-vendors.c677869b.js

    • Size

      839KB

    • MD5

      3a09ebabe88306a915b44a649aebfd75

    • SHA1

      4eef75ccad3c83aa09fc15b51b24fce653f2c714

    • SHA256

      f3e9467f9145d18f1bce23f15be3d74444e3f44faf1003b99e689afd9266345a

    • SHA512

      f868a1bea9b692e6db8da181d7f401082a8238135b700d6109e723275284d89af2cda5b932a3419cf625a4705229f44bd33ff9457e0cfa16f9253327be06443d

    • SSDEEP

      24576:NrmpCrmp1kE/vU5ekOH/lEHcPMncPPxPgmrtNmr5mr/NmrRFzBYtnhgQchO1D5Mt:NrmpCrmp1kE/vU5ekOflEHcPMncPSmrU

    Score
    1/10
    • Target

      common_detect.js

    • Size

      1KB

    • MD5

      b08e090ba24c63c1c4dc34885231bf1d

    • SHA1

      83db8ca6fd0ecd304ab192df5eb1f112b6ea0544

    • SHA256

      0616e0dacb31337c72532f1111054b2097ac92f0fe28b1de36b30447975f513a

    • SHA512

      dd58de8af9084f388fb5aed7311903c0038d946f39378426e56bb09f3dda7d27a5701c77527c41a2bdcdbc818d9a40ea31ec95cc84b9ce871c110c5411105e5b

    Score
    1/10
    • Target

      fb_ins_detect.js

    • Size

      1KB

    • MD5

      685fe954940a422e9cb3ee06032cbbbb

    • SHA1

      bc76b71d0878633b0ee8d591d4ef0cea9b91ac3a

    • SHA256

      81528b90fad767a6b6e8669c7b4a97d5478912e5debabbca2dcb2c837a0d1ed5

    • SHA512

      7165a677f8da214b8a359720427daa4a7d55615ea7d9b1f5d75a7ef92b04613b3d54bc639f8c0326da0a8db838ae9dedda76ed695446e9db3506ba1ea6a5bdc7

    Score
    1/10
    • Target

      iconfont.14eb97e4.svg

    • Size

      7KB

    • MD5

      14eb97e4d85c91653c080403dcf81129

    • SHA1

      1d1b49cc7baf9a2f47d38212902e4c9740c16af8

    • SHA256

      3dc2a51e0d043d22fd44a7070a721c7d52f0cb50ff08fa6522a2554a3150df71

    • SHA512

      998a24d3d768da0982904e9e90ed8223c6ed9dfa1fa8c6f126c42d14b379d33490aa5f598e37f20d1057dd914d9fd044609644c3c18812f632539b4422205ad2

    • SSDEEP

      192:TxnOjxXcinfVIfNmd/POgdQDn4nvqsyhbpaEBqEcv:TxOjxXcinfVIfNmd1QDn4CdhbUEIEy

    Score
    1/10
    • Target

      loginCenter.f8509df1.js

    • Size

      1.0MB

    • MD5

      118a329dd1a5fbb152cc50b88a093f25

    • SHA1

      67086d18df50fb9eb631376e317bac080b709123

    • SHA256

      047255a62713f79aa3bc9d81fb1885d63f0d173e52afab49f9cbbd6dc60d1525

    • SHA512

      4d0aeb1086e844e3d663c97d68330b7ab732e0a4bd610e84e67c09b452ac7b25ee33c9c0fca189ae8c380f928e901829f40b7373678770e30077d7cbfc127e1d

    • SSDEEP

      12288:SY/HSk3SGy/0e51yd2wRs1kgSr3s0E0GKJKIF5keRWLFle11:SOHSk3fy10EIEIFWecPez

    Score
    1/10
    • Target

      loginCenter.html

    • Size

      9KB

    • MD5

      94d31607fd331236d33396d9825a9e4d

    • SHA1

      049bb4924954d2d4a957c3f8a88dd2a7cff781c0

    • SHA256

      9f4154b1cbbb1d5ecdaa3330681e05d91849e627358474890f0f2139336c3e06

    • SHA512

      ef56fecad75139a242a8b2d3cc56b8359292e71bd2791c9b15ce2608bd9f08a02a5b5b6e4eed78eb9cd2bc0a2802bf95a9da4b709e83b13e02b2e883dca200d3

    • SSDEEP

      192:7Enh4XxKKwitpoE3TO8ciQXSYLMFwByZYLMFfB/DXAZTh7tCRq0JoUyq68asPVt+:YnhpqoE3TOq3Fg4Fp/DwN9fyzLt7A

    Score
    1/10
    • Target

      loginHome.b174164e.js

    • Size

      546KB

    • MD5

      90fa539d44289d5e4cb5b2508fa70c58

    • SHA1

      3fe6011d9c202f72e8d920142e8fde9fbfe155a7

    • SHA256

      2081067ce5b7a9b19dfdb42ab5797604ac325e83ba5fc9584d93f0395dfc0535

    • SHA512

      c53871df672b55c00a0c3de40f412ae8ec6d947e45ecaab5ed2dc83d266723e9f9b277d381529e5f4cd764df21762b94ae1858e090c0c5d51bbf6be72cd2a7e7

    • SSDEEP

      6144:LLY/RADArolea887EIfTDPNhLh/e51yd2wRs1kZSr3OdvST:PY514R887EUDvh/e51yd2wRs1kZSr3Uu

    Score
    1/10
    • Target

      loginHome.html

    • Size

      9KB

    • MD5

      f03a917c9380b3ada0bd13ccb6c840e9

    • SHA1

      d3f0510ec8dd855297223a94099e55980daca163

    • SHA256

      43b4148e3655c485888c84eb0c5e0a11448409a6fd944751d549691fd264c667

    • SHA512

      eec1217d60a03c7efd8640a959ef85a9ee5c8d5e4222981f05cdd8ec198a08ef64381b15881d80633521891c477541ddd39318aa2871c567e36aed19802c5c25

    • SSDEEP

      192:7Enh4XxKKwitpoE3TO8ciQXSYLMFwByZYLMFfB/DXAZTh7tCRq0JoUyq68asPVt3:YnhpqoE3TOq3Fg4Fp/DwN9fyzL07Y

    Score
    1/10
    • Target

      docx/docx.html

    • Size

      355B

    • MD5

      5222213abbcc001bf3f4065d273c7e33

    • SHA1

      75bc1bd0aabeecc942f393e7ff4afc86cd4b2146

    • SHA256

      9d29ca3315a31d3439cab6de90261ad70a4be47a18f7705732534b4e04c652da

    • SHA512

      9d644c9457da20855cbfca5498ce2d9f4ab96be3c8c39b2865ebf8a6e91f391eafabf60d82d113676401294cfd587bd6e37a1aa65e9326c1f3c9ded34aaec976

    Score
    1/10
    • Target

      docx/docx.js

    • Size

      1KB

    • MD5

      8a975eea44232f835a11e2a46f5b1acd

    • SHA1

      a2c7776729ad86d808e8122d3f428d481493192d

    • SHA256

      12c32722a8f95f089b59819ade9ee9b5bbd9cfaa397e55fc9db0eb307afaa65c

    • SHA512

      0f7b01b5a75fa7cc0e322b5fbf18f766b95ac1a6af6889c86b45a32d7fd27b74f025f906d1e933990f91efbb68976ac96c0f958af2d5b0b901f0b2b2daab99c3

    Score
    1/10
    • Target

      docx/mammoth.browser.min.js

    • Size

      536KB

    • MD5

      28775b784272c5133bd19d39f1a803be

    • SHA1

      6157cc9799aa202fb7e09d79b360d04f29950aff

    • SHA256

      d7e793a61ba5d50f338ab61b6e27f41d99649a92dc31667dc4a08e8d03ee2eb7

    • SHA512

      2eef73f10605b64019a147a6a31cbfd7b8da3fd0c48b832232e9093e743b7c909555bb8f511f89fc4a5ece2c147b1d96a4d9d0d73e8dd324c1a7fd2884e1841f

    • SSDEEP

      6144:8E3XlW7xA+XlAv8mD9dlnpYJJLN3NNVO0xPP8hLrzCrzJYYz4PMm0stcd:8EI7xA+XlAv8mZvnpiJYYz4Pg

    Score
    1/10
    • Target

      excel/excel/excelscript.js

    • Size

      100B

    • MD5

      40564f1e9c7ccb700e3c01ebc2c53f9f

    • SHA1

      3c45e0403bafcbbeae9125b916732fd34f35f069

    • SHA256

      7729e58872a868b1a08c6b88ca1ed47744fd92794486df26fe91a635340e4b45

    • SHA512

      65d4bd4fcee75603056e5944788710519ec62635135e16d062d77b21be3b73b52f08e590b7ceb2437a383627da1f548917edec9bb59146ae66a6796d81aef22e

    Score
    1/10
    • Target

      excel/highcharts.js

    • Size

      158KB

    • MD5

      f53d0da8f11133ce56f1493cd311f7b6

    • SHA1

      2b7cb593874c56023bd7d297b688e8b57fe7a923

    • SHA256

      9a8b60603fbf7cc02d9f8499677d53186b83dc02bca31ceb4ea50bf8c90aca79

    • SHA512

      7e14d7847a2cf5aea57f44963377d477930f0872abfa5fae65de217ef25cdb0fe88af4723ef5100fa9c310dd3e104c429861f29628518c3757e30e694bb7ee82

    • SSDEEP

      1536:h/4saGYjm8o4lh2fLJK3HVxESwdL7pg/liw3Cb0HzNYA7zXBxL7EKDMwI9PrXHcv:h/OjmgWFK3M7p4NCb3zwmPr8r

    Score
    1/10
    • Target

      jquery-1.11.3.min.js

    • Size

      93KB

    • MD5

      895323ed2f7258af4fae2c738c8aea49

    • SHA1

      276c87ff3e1e3155679c318938e74e5c1b76d809

    • SHA256

      ecb916133a9376911f10bc5c659952eb0031e457f5df367cde560edbfba38fb8

    • SHA512

      c40111c3cc0754e90cf71f72f7f16f43b835b7e808423dfd99f90dd5177538b702e64ff1d9ee8d3bc86aeaa11b6f7a0ef826184e354b162158839ffb75d174cc

    • SSDEEP

      1536:OP10iSi65U/dXXeyhzeBuG+HYE0WEeLDFoNqLTW8+S5VRZIVI6xSb8xh2ZbQnRmc:R+41ZqLTW8xRrqSb8qGH77da98Hrf

    Score
    1/10
    • Target

      pptx/js/FileSaver.min.js

    • Size

      3KB

    • MD5

      2b3d66a7b7d778a5a3d8ed701f38b5a0

    • SHA1

      6dec00a150196f782cd05a67d18193e99ff2e7a9

    • SHA256

      9e256b5a2ef1c268470dbafbce9d35142c200cde05a00c64aff0066a591dcc4f

    • SHA512

      b32201ee951c2fa77d38c8e758fbf4e4548d2d8a28c1f3eabd4fc88d87f47e040a4ec350fae107a8c76f21fb000195c7875f888652610a6f64384abfda501774

    Score
    1/10
    • Target

      resourcePlaza.7643860c.js

    • Size

      81KB

    • MD5

      ee3feb2a1602fb2354f0e2cc08360437

    • SHA1

      d42dd0f2db34f96c669f586ae83f8752ff43d47c

    • SHA256

      76ddd4f3385311fff06f9791340343ed94057d0cd1c184a3bef82eed9c56c55d

    • SHA512

      9387d442343b4bfc9f4f5d5deba7a9a4cd4e362ec8ed723d12c0c32b398c1d8ca87e733e8ebc62bafa6aa7a27c84dadb23e968ec785eb9592a8a6aec6d848ca9

    • SSDEEP

      1536:axAQobmxxtd1AyYy0X7cvmMYtXQ5BWBUBXmMYtXI1mMYtX3FmMYtXJJ:aD+mx5sAvmMuKDmMuWmMuVmMu7

    Score
    1/10
    • Target

      tiktok_detect.js

    • Size

      2KB

    • MD5

      239f284283ebbb963447819f469e736b

    • SHA1

      3f53873fc2e2dc81f640495996f5798b774c0aae

    • SHA256

      7273b8e1db73c1d2a451a1d7427d354ace1f07c2d2bf1b9801dc34e07e8d686a

    • SHA512

      0a5da89ce6f064a76d72a6ab41cf3205704f5272e98b4dd4535b1d4db6befc4a351a83176c81e6b6bf7937cb05acfcc9f54213d1fa015e244b83b094640d5c52

    Score
    1/10
    • Target

      index.html

    • Size

      989B

    • MD5

      5e8600dd6fb5bdb550ceb1525b99fdda

    • SHA1

      11cb5eb86f26301e73bdccfc3cf702562c1c654a

    • SHA256

      2287813d8c8dadd14575ec9d9c91702af8428742cefb4ec64efbeb4215e3a036

    • SHA512

      013ec340410c7711c0be3aed6b6e1fd75dfd40d2b9e37562e3ebaa446cb21f96a3303a8870e5f0a1904c0b5af117504b898590425b14ef69d114754c0404cdff

    Score
    1/10
    • Target

      js/error.dbfcb.js

    • Size

      2KB

    • MD5

      49019627ca62151e16abf16e853f45b9

    • SHA1

      9e52ce7524d8432de3e5408b006e7bcd74e85b2d

    • SHA256

      d1810af0be8903efd61e761221d51dd14b4dc49697eb63f023c2d1971d72d14d

    • SHA512

      c19bcca5ff54449c8aa8c753afa78376903b50fdac153360439d9ff455284fd9438be31a99bf8367dc9dee736499d0a9ee9b9a665a6c8e76e9d6ea1b222bb3bc

    Score
    1/10
    • Target

      js/main.dbfcb.js

    • Size

      19KB

    • MD5

      9b2e75883809872603c9bd103ec651bd

    • SHA1

      7281805b081ea67c5881ea39e116d8bce4209cb8

    • SHA256

      6d2f400f516368b2fe58bca23e6b923cd2d16d6d3a6e9987a1646f7f5cd5feef

    • SHA512

      711e6d3bbfc5db9ce0a7c9a5bddedc968fd93da544db05edf2b9da4006e9f2d98280ef854e03f872400d91d3ae8c8a8afd47e5769e4f58279faae6fdf288ab6f

    • SSDEEP

      384:Q797eRGdY3R7GekRgJ6WlEL6wE4yRyfOI9nkAoj9wN5DoilC:Q797eRGdW7HWMDjr8fOMnkAo88

    Score
    1/10
    • Target

      js/slides.dbfcb.js

    • Size

      75KB

    • MD5

      3d90e10ac1da5727b45a05de3603c6d0

    • SHA1

      25e58d416bbb1ada34b3623a93cedd79cc7df89e

    • SHA256

      acfd38d54360e7df1692dc9de4722839e8c508ce4847dca138ec86bdc244bbe1

    • SHA512

      67b51cdaee42d7207af68bef8df82f399c2c6c40a349008d129d7787a620c90fd4bbb45b0030e0e654582b357818fbdf547fb771c924975d062bf6cff616c02c

    • SSDEEP

      1536:3gaZSOdxwla3GA0A7pw9ozJe764gDywK7NXKNpw4h:35qA0ApkORK7RKNNh

    Score
    1/10
    • Target

      js/slides~word.dbfcb.js

    • Size

      73KB

    • MD5

      55019b079a7f5891da46d3ec5d66c7fe

    • SHA1

      03a63d205c4f82dd1720b466f07ddd77430387b9

    • SHA256

      c51813385eb025334c29f6ca7abd74bb787f8248eaec9f40aa6b6d3f140e7b1c

    • SHA512

      a955a35c5285820c97c6e2cb68fd5377707621c83f0be51da1b87afaa95e95fe02a38d32f99306f00b28997838dbd0e61228cb22e5a0fb7eb68681af08ba4972

    • SSDEEP

      1536:7VUjKl2YNRp1IE4UNn+4Pf7QTI40jgk/ZdF0xd1kLvFEP06xk:hp2YPp13xqTEBZdqD1kLtc06xk

    Score
    1/10
    • Target

      js/vendors~error~slides~word.dbfcb.js

    • Size

      823KB

    • MD5

      63349f2415e3208870fda2f71d810107

    • SHA1

      0276f60aa8ed30bd4b1b1428365934c26d1f113c

    • SHA256

      17af3952c38659219ccbe4687035e93fd6b77355d894c2771b74f2d49b5f480c

    • SHA512

      1127773c54a7b90a5b5bde88cacdb3bf64839e269173c6b99d5425ed2c2604948e5bbec9038913ae14c813e746dcce8f92bbfdcb09f66222e25ed65830823337

    • SSDEEP

      12288:+D1YW3hu8kzvWCmTuB3aBuII8T5JKJUFHzriBggNgrgya:UaW3hnkzDStd5wJqzuBggNIg

    Score
    1/10
    • Target

      js/vendors~main.dbfcb.js

    • Size

      270KB

    • MD5

      92402d586bbf9ab71482d712da589b79

    • SHA1

      cf1971ed719ef577d6b450461b7bbc2be2539909

    • SHA256

      b75cf0a71612e97d51049654b897aa73488bccf05972f50ebf89ebdb50ff28af

    • SHA512

      652a4912e23488e25924f0d7fc29d2307b128dc68270af08ec57ff494971983dc298e9dd5535c561ecd29204b88de4e18757dad77478fb0e9b4d68be60665046

    • SSDEEP

      3072:H0CRTq+AVyogQAnirsZFhAHzPUCrVtiXeJ01F3jIiTIzgsXZFevAJ6gW:H0Gut5gnnigZ8HrUCrVhJ0DIiTI0PrH

    Score
    1/10
    • Target

      tt_nd

    • Size

      5KB

    • MD5

      cfb58d5a778a4da98783db9388bacfc5

    • SHA1

      4e826b8e65f7a81ee0c30836f132632054f338e7

    • SHA256

      64f11eb5134f29bcff547988289baff229b05faf93adac63d3a3bfe97c7f810a

    • SHA512

      1cac2288c9d222dbd195e3b929aebb887e5ff8d13c46675bcc879c762d09311b97a1e331389df520165cb994f1717ee5debf1a97a7563c474130943d5cd4267c

    • SSDEEP

      96:PWuzrX8H2mrqoAuRJff9SgbhWFllXU+9z:PlrXWRJ9Sgbh0l5

    Score
    1/10
    • Target

      video_tag_scan.js

    • Size

      1001B

    • MD5

      8e8d08cc7885d0e8d8da74c6c9984024

    • SHA1

      db86c788d9cd97e5bdcc363c19857e041f9b4301

    • SHA256

      ba5fd085b0638f0b523967b0cf453a059fa5e7260373a6e07f6e793761f56265

    • SHA512

      7ba5ae5d307198d1685180a9e64880371fb273b9b9230defaeb28bea4ca8db67b7ee391d5ae619c04e18f368539b25c7f590103c97ea7b438464a8262e824715

    Score
    1/10
    • Target

      yunfont.66733583.svg

    • Size

      80KB

    • MD5

      66733583789ebc3369b265c1655ac104

    • SHA1

      48b0c1eaad2392174ce85b6334c4c489df620baf

    • SHA256

      198a7be06d87f515e601844ea724ffccdc7328e15d95bdd1a693ce9d5fe321ed

    • SHA512

      b0b94c714d727cc340f1314cde5ed62e34da271a92bf2bbec9e0efec8b85c586cc6180a74a1acce02d744807d0a20e68c9940f7133dccf902c00a5642d0b4d62

    • SSDEEP

      1536:ang3MVT/WCG3uj2HlNSIgg7sbKEsWm4QQICoYqXVPTV8Gos37:eW7+pMNQ/kVPj

    Score
    1/10

MITRE ATT&CK Matrix

Tasks