Overview

overview

3

Static

static

1

7ccc89d824...a4.apk

android-9-x86

1

7ccc89d824...a4.apk

android-10-x64

1

7ccc89d824...a4.apk

android-11-x64

1

main.js

windows7-x64

1

main.js

windows10-2004-x64

1

cnb.js

windows7-x64

1

cnb.js

windows10-2004-x64

1

ms_com.sankuai.png

windows7-x64

3

ms_com.sankuai.png

windows10-2004-x64

3

mscwxjs.js

windows7-x64

1

mscwxjs.js

windows10-2004-x64

1

native-bundle-main.js

windows7-x64

1

native-bundle-main.js

windows10-2004-x64

1

picasso-co...dle.js

windows7-x64

1

picasso-co...dle.js

windows10-2004-x64

1

web-holder.html

windows7-x64

1

web-holder.html

windows10-2004-x64

1

wxjs.js

windows7-x64

1

wxjs.js

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7ccc89d8248cf5a36ca14d3682a42b17826dccd40e57d46ebe903158f11380a4.bin

  • Size

    4.0MB

  • Sample

    230829-1wm2dabc9t

  • MD5

    983f58f0cfcb3a0511e4449a94fb2466

  • SHA1

    7265fb3c66693dad7eb497279a1fe44ee93a1341

  • SHA256

    7ccc89d8248cf5a36ca14d3682a42b17826dccd40e57d46ebe903158f11380a4

  • SHA512

    4d07b09fa5396141e54200ce6a1d189e260ff905feb3aa8817db3bf6be250c48f24c0eecdfd14ace961cf43c712be0bddd0c7b8eb3bd371983b19d9c8c483fa9

  • SSDEEP

    98304:GQatqDs1Tbap/1Z6lPRWEjk+P+4LSZF2lVYywF9IM/n7y0DhFpT0:H+qDsheN1Z6rg+P+4O0lM9Iundxw

Score
3/10
android

Malware Config

Targets

    • Target

      7ccc89d8248cf5a36ca14d3682a42b17826dccd40e57d46ebe903158f11380a4.bin

    • Size

      4.0MB

    • MD5

      983f58f0cfcb3a0511e4449a94fb2466

    • SHA1

      7265fb3c66693dad7eb497279a1fe44ee93a1341

    • SHA256

      7ccc89d8248cf5a36ca14d3682a42b17826dccd40e57d46ebe903158f11380a4

    • SHA512

      4d07b09fa5396141e54200ce6a1d189e260ff905feb3aa8817db3bf6be250c48f24c0eecdfd14ace961cf43c712be0bddd0c7b8eb3bd371983b19d9c8c483fa9

    • SSDEEP

      98304:GQatqDs1Tbap/1Z6lPRWEjk+P+4LSZF2lVYywF9IM/n7y0DhFpT0:H+qDsheN1Z6rg+P+4O0lM9Iundxw

    Score
    1/10
    behavioral1behavioral2behavioral3

    • Target

      main.js

    • Size

      28KB

    • MD5

      aac85d43a2fc50df03f1f168ad0bc678

    • SHA1

      02b7041f16c99112059486ed986dbaa5e59292d5

    • SHA256

      23d0b5c6670c8805c43b235f64e34491026703b92f4652b3bcbeaff7620c0a9b

    • SHA512

      9e2b3b2460241ff21cdff9f2481489d5b5f2af7845c641ad401d91903df5964108adf2f24ffd4dbc693ee1cf3c68ad931121ee1d0021261e7a18a71f8403a3e0

    • SSDEEP

      768:gdty/XpsIniX8CrPKZkZpZ5Hkr43hJ22q6ov1sZ7ma2Qw:ASXpsIniMCjjmU+Ie3qw

    Score
    1/10
    behavioral4behavioral5

    • Target

      cnb.js

    • Size

      282B

    • MD5

      14928a50db47461aa39918441ffc7ee6

    • SHA1

      3944f275b967c50ad9de297facf99d0fa1768364

    • SHA256

      7847e649ce44744050db9d0225844a08e28de2eadcb39918d23c85f31655fb84

    • SHA512

      1214fa86c77cacd8a11e94b7d82a706a01e3086cf8e70ae1396b6f89ff3bfb72aee1ab977e1cd16013937d2e03ab8c164c89dd3e8c090673654cb4e53343d81e

    Score
    1/10
    behavioral6behavioral7

    • Target

      ms_com.sankuai.meituan

    • Size

      4KB

    • MD5

      6578061508d77e9177a0bb64218ec165

    • SHA1

      53b58a8b3471694ebd68fc2c95b149db09337d0a

    • SHA256

      6ebc77c83c109501a767773adc98cfc094e0c7354b60f0d97621f910ea5fd72c

    • SHA512

      e96009207c1d25702d520156ac815056dbe0bb8e37f9a0ab02f12f0024a1dcf393386e4e94bc90a8591cb2546727edd27404dbb209b1288978368a356d198883

    • SSDEEP

      96:AAzK8YReyKa2KKz9FOSM3X6rKPMDTl9cZrK0I+Z9KWIRsDWmTTG69:AA5aeZFb+PMvl9cM6IWIKDWY6c

    Score
    3/10
    behavioral8behavioral9

    • Target

      mscwxjs.js

    • Size

      4KB

    • MD5

      22de3d90a9b5b5f842d16dc8c318004d

    • SHA1

      ee134430137e113b77e8a33e4e2eb16f1d373472

    • SHA256

      b8efb6292a9205b4719766a35bab754e8c098de451ed7b9156946f8c9fa5f6e7

    • SHA512

      47b1f4629076dd781b7e17c0e0f673ef7a821a295ea7f92b67afca057a8c8539bece5550ce8c8d5dda7181666f61c4daa7bb8adfcb28e36d151f4b27a6d7d801

    • SSDEEP

      96:pT+N3HxSUGySyL72cACF+Garz5yM3hCMCMJICZ43g:VahSXySyeHhrz5p3ghMJ/Zt

    Score
    1/10
    behavioral10behavioral11

    • Target

      native-bundle-main.js

    • Size

      4KB

    • MD5

      9856b23b8140b7fbfd821e2eef008354

    • SHA1

      9148672b986dbf2ed0d4608836258b12c2fa4ba3

    • SHA256

      59156a26f2a7c366cdeb1646e0b4d83320ef4e893b51d3e20241f4877238f43a

    • SHA512

      90aaa971497a07747e361078f278fd6436a407ad45f92e5da9552324baa6411fc83edc988705fc1ea86513733af16554f2ecec0e34478b625c8e4468814d8157

    • SSDEEP

      96:eSOBKX56McpufuNPMuQVtW2qK28s9qPKJX7EaC:eSOcp3cpyyPMXVtW2G8IoKqaC

    Score
    1/10
    behavioral12behavioral13

    • Target

      picasso-controller-bundle.js

    • Size

      304B

    • MD5

      93866666c5ed9925506d75a7a5777856

    • SHA1

      e62a12fa419db3a1b3db5e820405eb6154a85dc1

    • SHA256

      70db04c4d7b6cb2e29d9bc2561005ac8de14b043395fe6c0182084649ff83307

    • SHA512

      41e2014a0d20f7ef34fef83563077477304239203b47bf07dda1664c2cdb59b1144045baa400c9d44d3345b74f7d6061aa5d14ff86e6369a901a33d07a50a11a

    Score
    1/10
    behavioral14behavioral15

    • Target

      web-holder.html

    • Size

      987B

    • MD5

      e2651ac08bf8304bcbcae8d542352f29

    • SHA1

      8f4d51cce8318d70b5dd6314a9bcb330e2c92b83

    • SHA256

      f8b90ce2cd1442702ec972bed4ed4a853b7ac3df3884b39612676e2510b51a0b

    • SHA512

      fa969934d8145c440a38e66bb8bc9efab061dc5853d05e2dc22fd60bae43ed5329e4c9849f8cf0dfcc00f493c41a80c0d10baa0241cc3aa047a1a07fb3fb0114

    Score
    1/10
    behavioral16behavioral17

    • Target

      wxjs.js

    • Size

      8KB

    • MD5

      8951dc4c364ea42d5fb2140dbc55c205

    • SHA1

      ce2923dbbdd9ebde7fa4c48f2934f5568590782a

    • SHA256

      d26485f1aff8e4e425e23c63ddec987ddf027544a0f2dd5a0824146f3e2071f8

    • SHA512

      e813bdb1dba97322d0dfc56be415ad769ef1f3d0368071d00cee978d9f96567a49880bb862e96daf6faa05d1773dd818c6db20569dc303c1b8b2342a977f9cbf

    • SSDEEP

      192:VaS24CJyQkJUQz7+pAstSXySyqr9mUm/5JBOyghMJ/ZBCyc/ytta:VF29UCZm/

    Score
    1/10
    behavioral18behavioral19

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks