Overview

overview

8

Static

static

1

e41e90cdcc...ca.apk

android-9-x86

8

e41e90cdcc...ca.apk

android-10-x64

7

__xadsdk__...__.apk

android-9-x86

__xadsdk__...__.apk

android-10-x64

__xadsdk__...__.apk

android-11-x64

libwbsafeedit_64

ubuntu-18.04-amd64

libwbsafeedit_64

debian-9-armhf

libwbsafeedit_64

debian-9-mips

libwbsafeedit_64

debian-9-mipsel

libwbsafeedit_x86

ubuntu-18.04-amd64

1

libwbsafeedit_x86_64

ubuntu-18.04-amd64

1

omsdk-v1.js

windows7-x64

1

omsdk-v1.js

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    e41e90cdcc41df6485aa6f4b2a4a9988dcb2829775a3c78b0ab6109c1bbaf3ca.bin

  • Size

    4.8MB

  • Sample

    230807-1v17lsba7z

  • MD5

    ebe248db9ee73fa9e2e3973d6955b21f

  • SHA1

    22265556736a8906223623865d405037c8945ce2

  • SHA256

    e41e90cdcc41df6485aa6f4b2a4a9988dcb2829775a3c78b0ab6109c1bbaf3ca

  • SHA512

    3e619b836832ae1b3b55068c52659c9d0316775286d297dd765713bea984cb6eb600020851870b85f35b0fe142b45ce35fcdc867e114262a43a95b15a23526bd

  • SSDEEP

    98304:f7gfcw2ZWrVeRTyTJ5FFJmw12h/P/Q4GCTkr+eYbKKnnKH:T4cw2kZkTeFJDUkqXKH

Score
8/10
androidevasionlinux

Malware Config

Targets

    • Target

      e41e90cdcc41df6485aa6f4b2a4a9988dcb2829775a3c78b0ab6109c1bbaf3ca.bin

    • Size

      4.8MB

    • MD5

      ebe248db9ee73fa9e2e3973d6955b21f

    • SHA1

      22265556736a8906223623865d405037c8945ce2

    • SHA256

      e41e90cdcc41df6485aa6f4b2a4a9988dcb2829775a3c78b0ab6109c1bbaf3ca

    • SHA512

      3e619b836832ae1b3b55068c52659c9d0316775286d297dd765713bea984cb6eb600020851870b85f35b0fe142b45ce35fcdc867e114262a43a95b15a23526bd

    • SSDEEP

      98304:f7gfcw2ZWrVeRTyTJ5FFJmw12h/P/Q4GCTkr+eYbKKnnKH:T4cw2kZkTeFJDUkqXKH

    Score
    8/10
    evasion

    • Makes use of the framework's Accessibility service.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Removes a system notification.

      evasion
    behavioral1behavioral2

    • Target

      __xadsdk__remote__final__.jar

    • Size

      83KB

    • MD5

      607e65052147713115dd87f0866d504c

    • SHA1

      5ff2a1c2ebedeb61236c56edfde6406828a05c6c

    • SHA256

      fe2fe2810faab43ae935927bfde6faafb8c74532f760afbecff9585d4404e741

    • SHA512

      2bc7144ac0c6dfbcf097f778ee110405d9c58f4fc4901356c2cf2622d7a4f6b12ce30a51f168962a8c81fbab9c46a65c2b219633dd2a80cc345dbf255cebf2a1

    • SSDEEP

      1536:eKSS1UbomStT19s4G0/GZzgrF2nPOgfbexVK8RV+0XUv5VzUxwh3MPeUivu5iy:DSYsStT1ZT/ugrFsmgsHWzUxq3MPeUi8

    Score
    1/10
    behavioral3behavioral4behavioral5

    • Target

      libwbsafeedit_64

    • Size

      13KB

    • MD5

      d8cf518b12d6792cbba5271094753840

    • SHA1

      76855a7d56e3c140d4645646f4eaeff1fbf3f667

    • SHA256

      7716c311bb3f164880d294943dbd6bbd4b99f9086514d880d17d3d5cf27134ea

    • SHA512

      1d1773f81012b1c0387186ee90ecc6f73edfc1c90f827121152dbbccc6fb4a49758e5497dac440a9e3a10d0ea0bdce8310e61a180c73b3d98be2cc708e040941

    • SSDEEP

      192:nV+SAyMbn69qMOv5Dpbvcg0OSWmNyExd4ilIXhQ:nASAytqMs7buObS+Q

    Score
    1/10
    behavioral6behavioral7behavioral8behavioral9

    • Target

      libwbsafeedit_x86

    • Size

      9KB

    • MD5

      2bf473ae407721846b987cfd62ac0600

    • SHA1

      e8c28e142d004dfe3fc2dcbc81de3c79f2d85d64

    • SHA256

      f456f5170e24cf69fbf44ded8442eaea1a1113cd6775585ad7fdc0692dc17e15

    • SHA512

      91c70992e3f1bcc098e52732e2cf2ce636d5e7e1d1a000e65733202f0cd5d15b13df83953938493c96c8e8e1d81ef045c820fa71d6416e0945e6b9cdce35b005

    • SSDEEP

      192:NXmX3QSOPgQcLMyn2842fVl0aubAgldL+P6U:2gJUMy2842dBubAgHU

    Score
    1/10
    behavioral10

    • Target

      libwbsafeedit_x86_64

    • Size

      13KB

    • MD5

      3e0a410d334494bb4f02d7a51a8681ef

    • SHA1

      f6bbba3fa2c5f043c2b7ac2a47f6cc727c530237

    • SHA256

      d2d3e44a485655db8137f9840d57fbc6b0652acfc6d5d5f4a91ddb684ba62f7b

    • SHA512

      b456446f98e23b1f6ed793165abb9896924c4184feb98830fc77a76c0bb8523d61ec9d0b1ad6e442736dbd641c54ad18f1040fd7f7a5498c1eb25ebc69906b1b

    • SSDEEP

      192:Rbj8pXgVWAk2LLnHAba/m82UFHZGx1l0k7hm:ZjVHk+LgIvxZGQ

    Score
    1/10
    behavioral11

    • Target

      omsdk-v1.js

    • Size

      38KB

    • MD5

      a82ff78f7ce70d5da28b9b69d7f9127b

    • SHA1

      d68639ddad3b8a9b08f8bda10ecefd9dafb89974

    • SHA256

      972e5dfea3aa699de6ad08636f575bc8b39245382c927a767b0bfac1852f6be2

    • SHA512

      755370f2df79d65150c0b8c0957e07756fcff943f8a75282d2afd6748f3928c91c91569ccb1004e38bf4fd15bc3e3f5a451fb7142189e3e9c11a27187bd8ec1e

    • SSDEEP

      768:X6kymXj28LPXwfBKn3ySNLTcC/XxUsExU58JVzdkmkWqa6W1s+Z7iUVtP9hzCsur:X6kPXqHs3b3ExU58JVzdkmkWqa6W++Zu

    Score
    1/10
    behavioral12behavioral13

MITRE ATT&CK Matrix

Tasks