Overview

overview

1

Static

static

1

FS/data/mi...rprint

windows7-x64

FS/data/mi...rprint

windows10-2004-x64

FS/data/mi...rint.1

windows7-x64

FS/data/mi...rint.1

windows10-2004-x64

FS/data/mi...154534

windows7-x64

FS/data/mi...154534

windows10-2004-x64

FS/data/mi...210832

windows7-x64

FS/data/mi...210832

windows10-2004-x64

FS/data/to...one_02

windows7-x64

FS/data/to...one_02

windows10-2004-x64

FS/data/to..._16.pb

windows7-x64

FS/data/to..._16.pb

windows10-2004-x64

FS/data/to..._27.pb

windows7-x64

FS/data/to..._27.pb

windows10-2004-x64

FS/data/to...one_28

windows7-x64

FS/data/to...one_28

windows10-2004-x64

FS/data/to...one_31

windows7-x64

FS/data/to...one_31

windows10-2004-x64

FS/proc/12...ntinfo

windows7-x64

FS/proc/12...ntinfo

windows10-2004-x64

FS/proc/12...ntinfo

windows7-x64

FS/proc/12...ntinfo

windows10-2004-x64

FS/proc/12...ntinfo

windows7-x64

FS/proc/12...ntinfo

windows10-2004-x64

FS/proc/12...ntinfo

windows7-x64

FS/proc/12...ntinfo

windows10-2004-x64

FS/sys/fs/....depth

windows7-x64

FS/sys/fs/....depth

windows10-2004-x64

FS/sys/fs/...ndants

windows7-x64

FS/sys/fs/...ndants

windows10-2004-x64

FS/sys/fs/....procs

windows7-x64

FS/sys/fs/....procs

windows10-2004-x64

Resubmissions

14/07/2023, 06:51

230714-hmt48add21 1

14/07/2023, 06:48

230714-hkvmzadc9z 1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bugreport-ellis_t-S3RHS32.20-42-10-4-2-8-2023-07-13-23-03-33.zip

  • Size

    13.1MB

  • Sample

    230714-hkvmzadc9z

  • MD5

    2fc0e59c739c0b454e6a285d3276041a

  • SHA1

    f052a1c8072101d96985d2e23d53d9be8d87b9a3

  • SHA256

    fa7d530539fd9eaef8bc913e3870a20ed7a179bbc549cff54c988419b6600021

  • SHA512

    3cf0999ceccfda814633350a17877db40d837be4fcf94859ba1b07b084f8502ed432d78c4d8a79ad7b1c2968d125dd832cd50f22ebab479a77bb7d7ddce6ff31

  • SSDEEP

    393216:/ImGrC6MQ3U9w5oC3vyAw0TkvVRzGfDlDcOA:QmG2Aa0yAw8IVIfDlDvA

Score
1/10

Malware Config

Targets

    • Target

      FS/data/misc/recovery/ro.build.fingerprint

    • Size

      72B

    • MD5

      babe55d18baab36c16d374fef63bc67e

    • SHA1

      e17499f93f8006e2fbfc80c77fc4d4c05309dd58

    • SHA256

      5edaff183d6065b551606de0de86cb6abd86b8d02f944f430b726376b6c52e28

    • SHA512

      fc438a865f71c71831bca0d8d538f85209979f401a3a3d4c945286cf14bbb1a96800cfa3d8930d6d5323a390db390f30a02a79c7e5aeb7520a1fe030dae3a66b

    Score
    1/10
    behavioral1behavioral2

    • Target

      FS/data/misc/recovery/ro.build.fingerprint.1

    • Size

      72B

    • MD5

      babe55d18baab36c16d374fef63bc67e

    • SHA1

      e17499f93f8006e2fbfc80c77fc4d4c05309dd58

    • SHA256

      5edaff183d6065b551606de0de86cb6abd86b8d02f944f430b726376b6c52e28

    • SHA512

      fc438a865f71c71831bca0d8d538f85209979f401a3a3d4c945286cf14bbb1a96800cfa3d8930d6d5323a390db390f30a02a79c7e5aeb7520a1fe030dae3a66b

    Score
    1/10
    behavioral3behavioral4

    • Target

      FS/data/misc/update_engine_log/update_engine.20230713-154534

    • Size

      6KB

    • MD5

      3df61f453d9f4f3b3523bd2ab7b3b95d

    • SHA1

      05de2a17010db835baff1cae9ca9986dbe36bec0

    • SHA256

      cbaf8616a55f79f10d58dc2d9bd66daf48523b8b4f89b600591d14f60b10e064

    • SHA512

      4215ac99943a97772cc9ce16893907ab9508e9200299d7ab8c1efeda5bc2a097cded1689d14d84673b88207d8829b20ba7107e9d83e090b43663758431516d43

    • SSDEEP

      96:XqnB4QWBtWR7WWfRWFHWxs2vmSR+bpLg2OEw+gXdN9cfZxRFPyD5d66PA6YsDNC:YU5Mo61DNC

    Score
    1/10
    behavioral5behavioral6

    • Target

      FS/data/misc/update_engine_log/update_engine.20230713-210832

    • Size

      6KB

    • MD5

      baf3ec3655160e18a46b12cdd0f083b3

    • SHA1

      3df3af4a134857acfde9800ce907449f36b8989e

    • SHA256

      0f45a446fa328145f94422f22a515b9e124434af98fea5328a26825ffb31c3f6

    • SHA512

      1c14e204868a80fccce7fc5590b2feadddd0d02ee9efa18a90dcb98b18f2c106b441f06b20d4b98f0f13197d05b81d989c494712d4c9b0b26bb34604a2a6359f

    • SSDEEP

      96:TyBMlaBpECWjYAO5HSkJ4OPhg7+yL8OXHUaZR8bf1ltwdl74Zw:gju+yL8OXHUaZ+bfntw/74Zw

    Score
    1/10
    behavioral7behavioral8

    • Target

      FS/data/tombstones/tombstone_02

    • Size

      604KB

    • MD5

      58194aeb4ad61df2945fcca8850531d2

    • SHA1

      35fe9a4761ade5bb1a18bd63f865f5322aa6563c

    • SHA256

      c3f58148bdde9e41d2d8eb800b1d7044ed743d983e5c57b41e2a21d2a90e2a2a

    • SHA512

      865050d58b7e66c36a26d43d3994930102f82ad1759ebcbfd1feb4ae31c846f35143680da6e89e742d6748faa92d08be34ecc26db08a53401b7665fa28ff0fea

    • SSDEEP

      3072:eVCE346x5VZj1G7jHzm28hNCSNd1DdYmBuwoALO9HV5ctFFX+XAb34AtYdTngWi/:eAE34y1G7jHOCSNdc2b34/HBSbdbU74

    Score
    1/10
    behavioral10behavioral9

    • Target

      FS/data/tombstones/tombstone_16.pb

    • Size

      477KB

    • MD5

      d312e95cbd90d8eea5738fa07b3d8419

    • SHA1

      057fa27686069975aa4999bc7840b647cd7a339a

    • SHA256

      dec467e3f7ee0c43141c508375a7dca725de8262c94c8bbf4197e7fe1d4069cd

    • SHA512

      8647b4a15cccbaced56c0870b2a2f823e7ec96a64758cd768347e564cb5324a06e66090e9e563dc04eb4ec21465d0f61f875c8e3502575dbeb4a292736762b3d

    • SSDEEP

      6144:utr5pqUPBCC26ocMloP1PC+KhiuTBa/jmcjVbYgji/dHmm:Ukb+4oP15oiuTBR/dHmm

    Score
    1/10
    behavioral11behavioral12

    • Target

      FS/data/tombstones/tombstone_27.pb

    • Size

      461KB

    • MD5

      f95526a0ca5544960b838cbe091852fb

    • SHA1

      f2b7c4f27368a22218ba4f4bc03216c3e453579f

    • SHA256

      b6df66ce637a57e3692a99bccf8d88a64ae145eb1097d64dc321ff5228271128

    • SHA512

      6e7e29a724458b619a87b781876e2a3e8cfb50c2b2a64f96f3a63a8ef12e122de24186c57549409315420178eba85ff1e8d2ab14ffefbbdfe7294621fb006c53

    • SSDEEP

      6144:UkaNV8HWpD8P0CqNUHN+iKaer7BYUCPRLdoqDBeNlw8Js5:Au0PcKBYUCLoflw8+

    Score
    1/10
    behavioral13behavioral14

    • Target

      FS/data/tombstones/tombstone_28

    • Size

      620KB

    • MD5

      d895c1bea533e401499964d117973616

    • SHA1

      da2275270ae114db5c73d2447ea00586cd01afe3

    • SHA256

      b3dea76ce67940294c5cd41b8a212411fd2fec14ac70386b7575999cd3c27393

    • SHA512

      07570007adbe27a6d329fb251c5a70f5571b40e7468920b98722961beff51dd1e8476f94929b5a4cb4485b11be94c1bdc16408139cdf068b6e91ca4b9440df62

    • SSDEEP

      6144:2lTw/jWNkRq+K44Q3vCQOsB3lQdDk7666ZOFU+7d:STwVq+K4dOsB+dDk7lFUYd

    Score
    1/10
    behavioral15behavioral16

    • Target

      FS/data/tombstones/tombstone_31

    • Size

      613KB

    • MD5

      4c38bd8f88f39ca78dac2cb575c39158

    • SHA1

      6b858a1cf61a377e97749266a81f37c6f83721bf

    • SHA256

      f5b211b272cb7699167763b9e1ed26ca4718d969d4f34285f3abd3d5deebac6f

    • SHA512

      27950bb22dd4827a3a8a6ac1a54816c92278c1bc44fe8f7e1d8e1ca88e37aa2db8f30ff16062f36dfb91a36b03b3285144c5c970fe2fd440c23d2dfdf5aeab02

    • SSDEEP

      3072:xY0dhAnFpBKH/HscNY3QF96JMnEogedhEblBEKs6PADbgx5lo+tVu5DuFDmS67k6:ZdhAsRO7ydhEHZoDbgJoQ5fy5RHTH+U

    Score
    1/10
    behavioral17behavioral18

    • Target

      FS/proc/12552/mountinfo

    • Size

      19KB

    • MD5

      5880cd8cc15dafff75499601882e5cc0

    • SHA1

      0a2d7a5d966f72d605fbba79f2dfece5776e8dff

    • SHA256

      ebf7e4ea2f72100028e7726f9e029916aef4532208066bf494cb16cb55963f37

    • SHA512

      b3dbf057095e862d0932027bee5d3accf8aff51d781fa882ea3c450e97e5d1cd52ad767864fa603177b8732134cd15529659182e473dc7a25478b2ddf59f88cd

    • SSDEEP

      192:F0iVkw7hf6YI4e5ujRiHr0BE97D6GsPo1dVgKN7UO2x8sTneL2zbrfPTuWK2jPkk:SiVvftI4I0BE97D6cL46L2zhPLn

    Score
    1/10
    behavioral19behavioral20

    • Target

      FS/proc/12666/mountinfo

    • Size

      19KB

    • MD5

      2b7a6c23a76408ea201559997ba75ff3

    • SHA1

      b81a6e9c45ad70138e5b278806b12e4e684a9f38

    • SHA256

      deb97986eb9f0a115ebe4b6a506e4865a3e66033a578c04ec41a7cef07de671a

    • SHA512

      de87b6b978e083a713cd70e4be931f1830d9637b7fdf0c89e22d7550f576ef7658907d73f45bc62a057364655d864fb0158f76c620fe42a7761a5a8e9c59d56f

    • SSDEEP

      192:Qo/ckOfK4YoM6efkBTrAwxBbAmkMYOVde94Yhrg2NtxQJwLuotK9Md38d9lKxiF0:n/cC4zM6zxBbAmkMxYN77K9MYF7bsF

    Score
    1/10
    behavioral21behavioral22

    • Target

      FS/proc/12735/mountinfo

    • Size

      16KB

    • MD5

      7f88b32a6df57d3a3c6d6aa8b9f09b99

    • SHA1

      6d1a5b8bfc38d809ad657af0f28d0cee5e4b68ab

    • SHA256

      1349332668793a636072e607b00647af0e413f1f5ed254bd668d16339deaf6cf

    • SHA512

      aacc745cbe1c5b58251005a3ac5cbe261956237f561aa6055470e577bed6cade57023d0722b706b0b67e3413432510058f93e3387c8e9c0c4dade5e3261f5132

    • SSDEEP

      384:b6TaZZxQeN1gB6dqt6+BYufQBxAZMBAl5:b6TKxQeTg8dqt6+BYYZMBAl5

    Score
    1/10
    behavioral23behavioral24

    • Target

      FS/proc/12930/mountinfo

    • Size

      19KB

    • MD5

      950f537f78b93cd198f0cd3970867633

    • SHA1

      ce9662c62bdd9fc9d039329fbb4aa851df60986e

    • SHA256

      7ddeaec07ef86038e75318195a15bc25c10cdbbc0d6de497eb90ae23091c5352

    • SHA512

      66fd5abda2acaec4d85ac99a1c09118b4bf9cf5daf6c5f0ff85223cf61069d90d6e13387cb66a15248314d6834e051ba8440bad74ba72c07e7f992a0528959f8

    • SSDEEP

      192:EITkkYtH23hgDieHsN/4BpyBlCW2aPlsf6lNgeNpguoliKn+D28TpVUVnKTLr+3+:vTkD23iDimyBlCW2advzD28Xr+u

    Score
    1/10
    behavioral25behavioral26

    • Target

      FS/sys/fs/cgroup/cgroup.max.depth

    • Size

      4B

    • MD5

      7c1a5d12744dec24641ab8ca14fff597

    • SHA1

      5a3ee3d5187c65d8b00ed898b105e8c98911d58c

    • SHA256

      dbe7218fd3953d71eac340668b850fe4b57278326a462a0cf0ad506efbf8b02e

    • SHA512

      0d25423a5f13b5979d60a22ad3acaa4d34446d92fe1c268f310a0b2c574da0a0a9ccfb7f109626592f9bb93ed4113f70db6bb47a3cef9b161cd67d31a39421d2

    Score
    1/10
    behavioral27behavioral28

    • Target

      FS/sys/fs/cgroup/cgroup.max.descendants

    • Size

      4B

    • MD5

      7c1a5d12744dec24641ab8ca14fff597

    • SHA1

      5a3ee3d5187c65d8b00ed898b105e8c98911d58c

    • SHA256

      dbe7218fd3953d71eac340668b850fe4b57278326a462a0cf0ad506efbf8b02e

    • SHA512

      0d25423a5f13b5979d60a22ad3acaa4d34446d92fe1c268f310a0b2c574da0a0a9ccfb7f109626592f9bb93ed4113f70db6bb47a3cef9b161cd67d31a39421d2

    Score
    1/10
    behavioral29behavioral30

    • Target

      FS/sys/fs/cgroup/cgroup.procs

    • Size

      1KB

    • MD5

      0ad944b8cc4f65670986e3a9e56da6e0

    • SHA1

      4fa98b0ebeea11ca3ec1c97bf041c77d32300e1d

    • SHA256

      3cf9495b9a73b51fc28421dce13fb75daab075a635cfbf508a3f611bbb00b826

    • SHA512

      8859f9617a3b921a63c5df5dbddeaed48f8f2be7c8c632ffe2e6972da33e8c7882df1534dfc7e51f76d20a42753c618a29d10d02cf290e125f76218f1c7b0a82

    Score
    1/10
    behavioral31behavioral32

MITRE ATT&CK Matrix

Tasks