Overview

overview

1

Static

static

1

bugreport-...33.zip

windows7-x64

1

bugreport-...33.zip

windows10-2004-x64

1

FS/data/an...40-512

windows7-x64

FS/data/an...40-512

windows10-2004-x64

FS/data/an...35-562

windows7-x64

FS/data/an...35-562

windows10-2004-x64

FS/data/an...36-657

windows7-x64

FS/data/an...36-657

windows10-2004-x64

FS/data/anr/trace_00

windows7-x64

FS/data/anr/trace_00

windows10-2004-x64

FS/data/mi...03.cfa

windows7-x64

FS/data/mi...03.cfa

windows10-2004-x64

FS/data/mi...ci.log

windows7-x64

1

FS/data/mi...ci.log

windows10-2004-x64

1

FS/data/mi...g.last

windows7-x64

FS/data/mi...g.last

windows10-2004-x64

FS/data/mi...ersion

windows7-x64

FS/data/mi...ersion

windows10-2004-x64

FS/data/mi...sion.1

windows7-x64

FS/data/mi...sion.1

windows10-2004-x64

FS/data/mi...rprint

windows7-x64

FS/data/mi...rprint

windows10-2004-x64

FS/data/mi...rint.1

windows7-x64

FS/data/mi...rint.1

windows10-2004-x64

FS/data/mi...141840

windows7-x64

FS/data/mi...141840

windows10-2004-x64

FS/data/mi...061114

windows7-x64

FS/data/mi...061114

windows10-2004-x64

FS/data/mi...154534

windows7-x64

FS/data/mi...154534

windows10-2004-x64

FS/data/mi...183824

windows7-x64

FS/data/mi...183824

windows10-2004-x64

Resubmissions

14/07/2023, 06:51

230714-hmt48add21 1

14/07/2023, 06:48

230714-hkvmzadc9z 1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bugreport-ellis_t-S3RHS32.20-42-10-4-2-8-2023-07-13-23-03-33.zip

  • Size

    13.1MB

  • Sample

    230714-hmt48add21

  • MD5

    2fc0e59c739c0b454e6a285d3276041a

  • SHA1

    f052a1c8072101d96985d2e23d53d9be8d87b9a3

  • SHA256

    fa7d530539fd9eaef8bc913e3870a20ed7a179bbc549cff54c988419b6600021

  • SHA512

    3cf0999ceccfda814633350a17877db40d837be4fcf94859ba1b07b084f8502ed432d78c4d8a79ad7b1c2968d125dd832cd50f22ebab479a77bb7d7ddce6ff31

  • SSDEEP

    393216:/ImGrC6MQ3U9w5oC3vyAw0TkvVRzGfDlDcOA:QmG2Aa0yAw8IVIfDlDvA

Score
1/10

Malware Config

Targets

    • Target

      bugreport-ellis_t-S3RHS32.20-42-10-4-2-8-2023-07-13-23-03-33.zip

    • Size

      13.1MB

    • MD5

      2fc0e59c739c0b454e6a285d3276041a

    • SHA1

      f052a1c8072101d96985d2e23d53d9be8d87b9a3

    • SHA256

      fa7d530539fd9eaef8bc913e3870a20ed7a179bbc549cff54c988419b6600021

    • SHA512

      3cf0999ceccfda814633350a17877db40d837be4fcf94859ba1b07b084f8502ed432d78c4d8a79ad7b1c2968d125dd832cd50f22ebab479a77bb7d7ddce6ff31

    • SSDEEP

      393216:/ImGrC6MQ3U9w5oC3vyAw0TkvVRzGfDlDcOA:QmG2Aa0yAw8IVIfDlDvA

    Score
    1/10
    behavioral1behavioral2

    • Target

      FS/data/anr/anr_2023-07-13-05-07-40-512

    • Size

      782KB

    • MD5

      2da0a1ddea108b91903c6806b9912331

    • SHA1

      603f0847db6d66d9a0ad453df8f389f9ee07ffae

    • SHA256

      79eaf5ef7e37f56849893e8cb323e1eb0ab096c475d3ebdb3d529ed47f81b3a9

    • SHA512

      5d8c4d6b85182445df526fd5da941eacbb368cda3cb9fac0cf87e91566575c7d89062233c30d77739ee90de34c8b495657301723cee045d23356c0106e24a4fd

    • SSDEEP

      6144:hsvklCXn7kfdj2kfEkW7k5NkiU3k3ukvDkHPxkuOkr+rknWPskz:hs8+nAjPMklUyXGPHj+DP5

    Score
    1/10
    behavioral3behavioral4

    • Target

      FS/data/anr/anr_2023-07-13-17-15-35-562

    • Size

      1.5MB

    • MD5

      ba8d5b1139ed6cdd768ee7089859554d

    • SHA1

      12d304bb4cac155b38af6c2ed5b49adae1c759d2

    • SHA256

      a158044a265705dfc7d715e0b8757507ae4a620e11df0987fe5017a9dae2514c

    • SHA512

      400be87c8d2a9a5c2822f39a33e39458e01aa43e1074046d4208181e87c039bc60b1118fc0a516842b14f37c25ada24ae802e3a13c66117eb9c23cb1a5a2ef12

    • SSDEEP

      12288:2UW6SlnEfNKeL6P5wcau+F8PsO5ODF3+J:avZ

    Score
    1/10
    behavioral5behavioral6

    • Target

      FS/data/anr/anr_2023-07-13-20-06-36-657

    • Size

      1.5MB

    • MD5

      2e9cd4ad65bd8e0372c7ddaef4509f3e

    • SHA1

      1c64f918f14ae12ee9ea867036d5b364e22ab529

    • SHA256

      3fac9ed875b91377980bf22e81333155895017583871efd604e99beba8c68f75

    • SHA512

      29d09231e2d600ed8c1363809102f04078dcd476c41bab22b52dae5c1c218f2fc53551c0ffcec12848a6aed0befa988b0c16929f62b349fcb2431d3c2bad03ed

    • SSDEEP

      12288:eYbXcDtXp7fTqKS5C//ih4DsId2Ot3FZuaRN:VE/uaRN

    Score
    1/10
    behavioral7behavioral8

    • Target

      FS/data/anr/trace_00

    • Size

      148KB

    • MD5

      3991862000a3b76c804527a3cdc632a5

    • SHA1

      8b3c38c01217f6b1e3282152e5c1319daf44dd8f

    • SHA256

      a6410291b28d538f4e28ce139f7a74863f2ced54a150b21453ff480f94018f91

    • SHA512

      0e614aa03a0cc6764deac68a2b8845166aab20ea7d1210218730fc72e4c26e1518903048e294868a647ca04ee0b89fe090f4d37ba58b15b34896db864d4026be

    • SSDEEP

      1536:3ZoEu7nV2OBDjvqf1NfU/GVrgcDUE66H1hN7:JLwnV2OGf66fN7

    Score
    1/10
    behavioral10behavioral9

    • Target

      FS/data/misc/bluetooth/logs/BT_HCI_2023_0627_180203.cfa

    • Size

      5KB

    • MD5

      c025d7e51b9a50a60702b1622a13e78e

    • SHA1

      399e37be677dab37b2478f5ad8d34d542dd61519

    • SHA256

      498f46646d539e3b612583e6c87820f25d0b1bf22dd4b16d993635660f30aba1

    • SHA512

      276ef8b12a47a9533fb70de3ac63e83af6380c322dfc391b6654c7f98ee0a1c031bc2ac8bd0c1dce2c9ea47287586d7ce22a5aafd3021aae29b2a03d406793bf

    • SSDEEP

      96:4d/TV+tliXge0eiogydAQkGLeaqiysRzNW3fP:4WuHiogydAQk4eaqiN5NW3fP

    Score
    1/10
    behavioral11behavioral12

    • Target

      FS/data/misc/bluetooth/logs/btsnoop_hci.log

    • Size

      3KB

    • MD5

      6e854c0051128cba86fdbc56f17b9957

    • SHA1

      8c2b96711ed9e0a5d8ee95a1df0f579a20c8c96b

    • SHA256

      647fcb47dcfe24466c334f17e09e53dfcac5548ba7712248acb83ff5e5a94e5b

    • SHA512

      290847b582604955cb61ec1e9f552ac2b84a8428cd9d6393e855ece42ae845483efc596e0e8256bd63ffb4f0eaa8dd78a6c7b3d0c8b67d148b62840e8f013aff

    Score
    1/10
    behavioral13behavioral14

    • Target

      FS/data/misc/bluetooth/logs/btsnoop_hci.log.last

    • Size

      7KB

    • MD5

      5f14d0138dcbc24735719a7e7c628c50

    • SHA1

      8e86398a9bc76f6e789b5ee3864689b7030a1ee3

    • SHA256

      cd203a0314faadf7f149d7abaccc2d6c7e7d5fc3c492390ac761f6bc9af3bebb

    • SHA512

      a45ed63dbd7eeb381eceb2c7c676d3147f79503b1cc6ec403d84c8f952b7f57b5a16ad7d77d55089f3d4ece8b6bd118599d24eb0bd3a3fcea355ac2ff6c43948

    • SSDEEP

      48:6y1/e27QXf++7TUik3wNse1ytHPRNqfs+rP:7/e27QXiose1ytvRNy/

    Score
    1/10
    behavioral15behavioral16

    • Target

      FS/data/misc/recovery/proc/version

    • Size

      327B

    • MD5

      5c0ef545825b6eadfb17eb50a6b8b825

    • SHA1

      8bfbbf942dda9f10a98b665a8f2bfe1f9287517f

    • SHA256

      e7a871d1adb13d90c2ef264061ff4bdd25265af243c99d4899c5622e025150c0

    • SHA512

      978d003083f6fc29a809fa6a32a36018bccbaffe19b8dd716fdf8dda3f0fe52119de4b92b18c97b896b1038a8c0daa65a7e1c7f6ca8f3b9917d5c88dbed38cd3

    Score
    1/10
    behavioral17behavioral18

    • Target

      FS/data/misc/recovery/proc/version.1

    • Size

      327B

    • MD5

      5c0ef545825b6eadfb17eb50a6b8b825

    • SHA1

      8bfbbf942dda9f10a98b665a8f2bfe1f9287517f

    • SHA256

      e7a871d1adb13d90c2ef264061ff4bdd25265af243c99d4899c5622e025150c0

    • SHA512

      978d003083f6fc29a809fa6a32a36018bccbaffe19b8dd716fdf8dda3f0fe52119de4b92b18c97b896b1038a8c0daa65a7e1c7f6ca8f3b9917d5c88dbed38cd3

    Score
    1/10
    behavioral19behavioral20

    • Target

      FS/data/misc/recovery/ro.build.fingerprint

    • Size

      72B

    • MD5

      babe55d18baab36c16d374fef63bc67e

    • SHA1

      e17499f93f8006e2fbfc80c77fc4d4c05309dd58

    • SHA256

      5edaff183d6065b551606de0de86cb6abd86b8d02f944f430b726376b6c52e28

    • SHA512

      fc438a865f71c71831bca0d8d538f85209979f401a3a3d4c945286cf14bbb1a96800cfa3d8930d6d5323a390db390f30a02a79c7e5aeb7520a1fe030dae3a66b

    Score
    1/10
    behavioral21behavioral22

    • Target

      FS/data/misc/recovery/ro.build.fingerprint.1

    • Size

      72B

    • MD5

      babe55d18baab36c16d374fef63bc67e

    • SHA1

      e17499f93f8006e2fbfc80c77fc4d4c05309dd58

    • SHA256

      5edaff183d6065b551606de0de86cb6abd86b8d02f944f430b726376b6c52e28

    • SHA512

      fc438a865f71c71831bca0d8d538f85209979f401a3a3d4c945286cf14bbb1a96800cfa3d8930d6d5323a390db390f30a02a79c7e5aeb7520a1fe030dae3a66b

    Score
    1/10
    behavioral23behavioral24

    • Target

      FS/data/misc/update_engine_log/update_engine.20230712-141840

    • Size

      6KB

    • MD5

      3c695e42bb1d741d2fdc9087ddcd1139

    • SHA1

      c737d25e1e0742679fbb9976915980862d96619e

    • SHA256

      053e4ba24e99deb9bb619caf9b14c8d06683d7cd9255d7c97e7705505e9a6b22

    • SHA512

      058367389ee947b6ba32d3029ea661301f8625ff8de33c906760d013132c0fecf5852fec7ba590008a4b7e86dd78d0c05fc94971abc48223831dfa29d2fad30a

    • SSDEEP

      192:djtp2RXADqs4uldG674DPjSxcyBVzxrGYSQXTuvy2NH5WlqrwdB3zjDyYxpL56t0:djtp2RQDqs4uldG68DPjSxcyBVzxrGYR

    Score
    1/10
    behavioral25behavioral26

    • Target

      FS/data/misc/update_engine_log/update_engine.20230713-061114

    • Size

      6KB

    • MD5

      c24998e8bf71bb7b9ef95b9c22931e4a

    • SHA1

      5e2a1e2183128e29dd8e2bafbba8f6481b136991

    • SHA256

      65b5125c4819a9ae8682f74de84ef490b1777cca94af38e756bac39e43ccf4ef

    • SHA512

      ef585701464cbb56013c5e5e56c9b5be5b60f81573ceddf2f81683b4a5880fb06364c78166a94e2eed114cacde2a829292b096eeeb12e1afb4c5a0147f73cd6a

    • SSDEEP

      96:NCj9v/xaA5BpN0R+akqILm1gA/f3zPDOefAfbw:yNwTP6Mibw

    Score
    1/10
    behavioral27behavioral28

    • Target

      FS/data/misc/update_engine_log/update_engine.20230713-154534

    • Size

      6KB

    • MD5

      3df61f453d9f4f3b3523bd2ab7b3b95d

    • SHA1

      05de2a17010db835baff1cae9ca9986dbe36bec0

    • SHA256

      cbaf8616a55f79f10d58dc2d9bd66daf48523b8b4f89b600591d14f60b10e064

    • SHA512

      4215ac99943a97772cc9ce16893907ab9508e9200299d7ab8c1efeda5bc2a097cded1689d14d84673b88207d8829b20ba7107e9d83e090b43663758431516d43

    • SSDEEP

      96:XqnB4QWBtWR7WWfRWFHWxs2vmSR+bpLg2OEw+gXdN9cfZxRFPyD5d66PA6YsDNC:YU5Mo61DNC

    Score
    1/10
    behavioral29behavioral30

    • Target

      FS/data/misc/update_engine_log/update_engine.20230713-183824

    • Size

      6KB

    • MD5

      b9a00012c7a761e9a9451b92672bc2e0

    • SHA1

      78ea8d8c63ead69416fce9e591c29990faab8b79

    • SHA256

      f0a87c79cf715f15fcf5267572ea0f17bb3c7407c9b132bb4d41daf18f90e9d2

    • SHA512

      d72110fbaeb986be83ac9500e86de49193420e043b1f4b45ad9bd79ef8d49c0a664b5190eed866e04b695c900c192d7159f4f5075b8cda997ca2b8af5ed3a40e

    • SSDEEP

      48:0sBweTJXVJKvFcmXV+V5RIo5sAZRAkPETa1Rxy2cuBhEcEgXHcnzwdtBfIoDVw:vzKdll+VDIOsAjAkPEQRMCt8zwNTw

    Score
    1/10
    behavioral31behavioral32

MITRE ATT&CK Matrix

Tasks