General

  • Target

    SA_B7363pxz.apk

  • Size

    79.2MB

  • Sample

    230907-vv5xxacc21

  • MD5

    8e093e7b922037486e7059f2db228f38

  • SHA1

    8505430c240155b308f26531e2d8dccf39d9a7ee

  • SHA256

    f4d8b494fd1730b4563c9857b3c4f41abe9b3cc634f128486285fc442f7f654b

  • SHA512

    746d16b4fe10ab722f692a9be1cd7ddbec8146411ac9db082ac0c6704124e579e59b45b7f27c6ebf5d74a6bb57624168a2f58a74629bcdbff1ef7292b2a23466

  • SSDEEP

    1572864:2YniefzCf/WBKvaGG+kvzRZuvq9D9MOUehY/YPxJdNSK1Fw4qbF/Y:2yiWzMWBoaJvzRZuSF963/wJ8gFwtpQ

Malware Config

Targets

    • Target

      SA_B7363pxz.apk

    • Size

      79.2MB

    • MD5

      8e093e7b922037486e7059f2db228f38

    • SHA1

      8505430c240155b308f26531e2d8dccf39d9a7ee

    • SHA256

      f4d8b494fd1730b4563c9857b3c4f41abe9b3cc634f128486285fc442f7f654b

    • SHA512

      746d16b4fe10ab722f692a9be1cd7ddbec8146411ac9db082ac0c6704124e579e59b45b7f27c6ebf5d74a6bb57624168a2f58a74629bcdbff1ef7292b2a23466

    • SSDEEP

      1572864:2YniefzCf/WBKvaGG+kvzRZuvq9D9MOUehY/YPxJdNSK1Fw4qbF/Y:2yiWzMWBoaJvzRZuSF963/wJ8gFwtpQ

    • Target

      YOWA.html

    • Size

      648B

    • MD5

      ef14c11378b0dc4dd189cf73252dcd05

    • SHA1

      265f50dd560f0c0a50592fe44c0942c90c08889b

    • SHA256

      09e344b53d5408688c0912395a94f265ffd2fe4df1936acd662127665746ef9f

    • SHA512

      3e6c279043278e06cf962fc450a9bf63d94aa04d48f35e44ad4d48cb03622a7eab22a27272915e32705761aa4b5b136b336d7a62a9d2dc70ed5151c884dbbcda

    Score
    1/10
    • Target

      changelog-ar.html

    • Size

      74KB

    • MD5

      e7075cb78534b08db5f15054b1834fe3

    • SHA1

      028f6772bc7f7bc6bee394e39cd0c02c55884db3

    • SHA256

      bcac510def61094e74d30796886866d35866b74b8afa32422d20cb0bd84899ed

    • SHA512

      f7aa9eb2efad9a532295f8eac9ab216ed7444139ad7830d74c5176b29071edb9dd05bd6cc0aeab8a2504d44aaff1685fb147802c84d1c43988350e1c34d325ee

    • SSDEEP

      1536:0Hpk9zQweFu6MydzhX0iYvTqrSFL7pGXtiEmfxZb6JOL4suMApYlvpENCdjWbFll:Spk9kBu6Mydz90TqmFL7pGdiEMxZb6JJ

    Score
    1/10
    • Target

      changelog.html

    • Size

      75KB

    • MD5

      f9e42b8ef70b3096b39a456141659cf1

    • SHA1

      058ed7d8e12511adb04f6d5be8615cdb62be9da6

    • SHA256

      cdfbd3848a97722a64a2ede540f6a7df9dc61fb389ea4a7e336894615e8f3ba5

    • SHA512

      9d6e0d376db9a50e95f4862ac319cf1296e9b133d582a22fab672fee5e0e7e11f70f14ae7e0dc93f08a39a33efe1424bd728d7b4e0b863ae5d48317612e7af32

    • SSDEEP

      1536:6UU56uT4YbDk68dvzfMBBx+N24Dt2XGyjdwa8cID20+ADN6z+yH0ZyQmbvfZ/4Ob:3U5bTFDk68dreB0N24DsXGSwaZIDH+Ao

    Score
    1/10
    • Target

      clockDarkTheme.svg

    • Size

      1KB

    • MD5

      663e33bfbbb0d14830694114d49c457d

    • SHA1

      3231baf54a3c1f336f1b11d9a7011bc5502a9d4a

    • SHA256

      43b0cd84c7344f57b2656d66d5bf215a4f1d1713a8117e0ecf92226b8ce1a200

    • SHA512

      c116ffaf6c1f8ad9bd6a1d85de318c9ca2c3b6d4931a1aa165dc7ef7351c80fbddc7ca1371c81dee35b3e12720fee2d3146d7a510b54026c3aba9202dee5f1b8

    Score
    3/10
    • Target

      clockLightTheme.svg

    • Size

      3KB

    • MD5

      2235609a58ada82f2110d941341a720d

    • SHA1

      d3b06251eb8f131034ba1ea3b0db982cb31bd813

    • SHA256

      d89ab1d4bc636a73d64ef1d8976d517f13449a11af28d70e88ca3d0c40e114a7

    • SHA512

      ff7543b27941add4a92579f1a55f3b40a16cd8ec8cc43b678b229be38a3878267fcdbb80b040e91132fd938082c47e6e237f62ac3903422ad9499cf7164228d5

    Score
    3/10
    • Target

      credits.html

    • Size

      3KB

    • MD5

      ea1e972a3d9b04f75f1943eb2d5d3434

    • SHA1

      62891a235aa91562b87ebc9aed81b22aa950fdf1

    • SHA256

      bc73b55c5ff82dbba70814aa0239ff32f3e4b3324bcda900c1860d109b2220a6

    • SHA512

      209cb5be7070b602d2344c239e24340322d22e9d8334981f02875e85f86d060d145f9acaeb4047ae57a6e0478184906042908479ad866107651d91e01b1927b1

    Score
    5/10
    • Drops file in System32 directory

    • Target

      ic_content_sticker_location.svg

    • Size

      1KB

    • MD5

      4e1bfd935af6c3abdbde4cd2eba4a72b

    • SHA1

      a698232554fe0e28e65556549d97977a4fcf375e

    • SHA256

      b887e3205ff5b8e38c1ad986ea7f534c73c2a28f989639fc1f4fb672521e1e3a

    • SHA512

      697f7b42c02f1ce5fde22474c5c10cc1adc838eab76eb47269cccf4c7fc1cdebbe3de1f81d231c87cc3c8bf090502c4e405fba92ccf345163644d17d17baf84f

    Score
    1/10
    • Target

      ic_content_sticker_location_60_percent_black.svg

    • Size

      1KB

    • MD5

      a3c9e4e574c26a244e4660e3412d803c

    • SHA1

      98c4d769e0efa91892b72887ff5075944b3547a6

    • SHA256

      1b6c02ff1e1e60d73f6b31c1c53faebe6d1f57782e3caf3c4328a65b4929648e

    • SHA512

      f0660665f035131c70589a70955b2bfa8c7c8b9c45053f914bad335be06a2f8c23246c24348e3e469a03ae4449811796e39843a07a275cca1806dfed10df1610

    Score
    3/10
    • Target

      ic_content_sticker_location_black.svg

    • Size

      1KB

    • MD5

      fb77f4f57cfc4c4a6016d10c56e879d9

    • SHA1

      d98ed1a853a61e722f35525e47b16616d5b56fce

    • SHA256

      c6f4e62c0d25cc789058a5563bcc546bd10f492f2e95fa5cd3824951680f1b1b

    • SHA512

      78ec21798b9adca5822ac03446a8e66017281c6767d99114e524c57952942c745699e58e3228441e54ba42654f91156ee5a26fd8025afbe4e5543e053d63f627

    Score
    3/10
    • Target

      ic_content_sticker_location_emerald.svg

    • Size

      1KB

    • MD5

      aadfe32db3ccc31c96197f0591e0fa18

    • SHA1

      59ce2e9a22fff2e9a1b68578c429f5d710463d0e

    • SHA256

      71d43fecf9f2ef6e37022c8446194d74f11b7c05816ce321f6a84279c870b4fc

    • SHA512

      914f19b03527d440752bc284fa46af19ae7cf9f4d2c11cb7bb2753fd50526181e6ca5abed68c695236227b5d8e39db1b5f9359c2d0470a4eaa147c244cc91ddd

    Score
    3/10
    • Target

      l3d4aa6fd_a32.so

    • Size

      3.3MB

    • MD5

      3a171116e1a3cc7c0b37f5da2a8c04d4

    • SHA1

      89d9d98c2678cc19abe90513fa33c441780dd1d6

    • SHA256

      0b5a4230298b9ef49ae76fc316ec8ffaa2234382de947dea10fed8e4525fbc6d

    • SHA512

      64f1038d8227e5b528e77f0d5194bfbba2a91c9f2fc8ab7b2be4c2a1202b0c6a17e574f862396f619757f1ec121432753706be238e327e5034ed3ed9bf8c5807

    • SSDEEP

      24576:xJBj44sZUiEqzrjHcPrSb9waukTvdM3ynCH293fjhHNXId4C/P1k4sgJpNj1nVLd:yrjVYichxnVpmnBpXc5wy

    Score
    1/10
    • Target

      l3d4aa6fd_a64.so

    • Size

      4.7MB

    • MD5

      517cf6ab9cfa0845c99157239b393ce3

    • SHA1

      d31761e9d611133069fcff06625cdd193ac697c9

    • SHA256

      cba8593bc1136b44b54944f3f75ee711bce2b2d7246447ee60e3607c15f9b1ac

    • SHA512

      833f3dad8979acff4468728d55932bac465683f11de0c303ac1e0c4423c770edea7bea6ff8e3bf836236b9f41afc12368464cc19d5b199458b75b107b67d1c14

    • SSDEEP

      49152:DA8YWG7hJr0OPV9ERkZc9xRsp3gMNy4KYTrrniq:DoYiV9EG3HNztvWq

    Score
    1/10
    • Target

      l3d4aa6fd_x64.so

    • Size

      1.9MB

    • MD5

      e0e6463a22990673f78711871b7cc784

    • SHA1

      ce32d45369807a69958c70575d99a141feb0008e

    • SHA256

      07a14ff3986aefee32a05dcdf8442ff0d56c9e409f3f2a5d28e3b2bbcad04760

    • SHA512

      314a6d9c646634efef79c840d8fa2c7c6691ec42f51b64b4d418fb0902d04d33d78aa1386c7d4902b5d97c1d88ad9ebbd9065ed01e7b71655e38a4706a6b6de3

    • SSDEEP

      49152:v7gEO3ttgStUO8NON++ika/R5B+L0qQP/MJ:3Oa/DBvqQP/MJ

    Score
    1/10
    • Target

      l3d4aa6fd_x86.so

    • Size

      1.9MB

    • MD5

      3ffe2eebf984ede0758917ef4c4e0324

    • SHA1

      2359fa4918d9413c80c64010680b300ac1e5f16d

    • SHA256

      b6ed8e5d0072a8657124bbaf64b7b8e1da194cc2978345405ba354ff5b6fdfee

    • SHA512

      08a880853691d495a04f03e5ef19499876600767f0632e1ef9711aa9c5878043cf10b78581906868d8dc595a4affbee599aa6123ceb3402af6d3a728db9a5e25

    • SSDEEP

      24576:/izG8PtURpwuX6qBm1/8h2Q65Pw4fwegAvOm:aG8PKLKqBs/8Uhntx

    Score
    1/10
    • Target

      stella_e2e.svg

    • Size

      4KB

    • MD5

      deb02e17bcc92fef2298a466d71f9457

    • SHA1

      e4259e3c073d4cb4af07bb3a2147fb1e8d7943cb

    • SHA256

      83d0ffc0ea968c3b71c194ecb47bbeb4512137a06e8f7ff7b3973ca23dc467bf

    • SHA512

      cda1fc10cba541658d1f826d735641c2058fadbaf42a9f05e1d8cd3b25fe146db53187548b131bd248e56f34dfebeb3e7b2c1d53784dbe88c8266731aa7401cc

    • SSDEEP

      96:38fSxf3sWhw3h0A+sJCxox9rxT57OxjrWthy9xFnNLWtEy8PM+cRSjOA+Ay:OSxf3sWhw3hysJCxoxHtSZ6tMNoaPsAw

    Score
    3/10
    • Target

      stella_wa.svg

    • Size

      9KB

    • MD5

      4ee3c0dc45185231589902397c7a4c38

    • SHA1

      28a4882e91c2bbb68562fd9373efe43d24dce3ff

    • SHA256

      8fead4d413917d70a317375083a0cab7bcde24530fed6d9eb39de05bf14348f2

    • SHA512

      c22274e0cfe22cddc65f0d258ec623360ba34d8ddeb09a2e7c88290d949cb20f76cb6e8ba8f02c7f5ee7ef4ab551d2d61f680c1dfa0b9acb30143f76d908eec5

    • SSDEEP

      192:OCxf3sWhw3hysJPiaJfdvLZacjO/SbEgle3iVIept8CMei3ttdLx7Kx:Oa/sW63hNJPV9VZvjbj03ISpei3ttdLI

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks

static1

Score
7/10

behavioral1

gigabudinfostealerrattrojan
Score
10/10

behavioral2

Score
1/10

behavioral3

Score
1/10

behavioral4

Score
1/10

behavioral5

Score
1/10

behavioral6

Score
1/10

behavioral7

Score
1/10

behavioral8

Score
1/10

behavioral9

Score
3/10

behavioral10

Score
1/10

behavioral11

Score
3/10

behavioral12

Score
1/10

behavioral13

Score
5/10

behavioral14

Score
1/10

behavioral15

Score
1/10

behavioral16

Score
1/10

behavioral17

Score
3/10

behavioral18

Score
1/10

behavioral19

Score
3/10

behavioral20

Score
1/10

behavioral21

Score
3/10

behavioral22

Score
1/10

behavioral23

Score
1/10

behavioral24

Score
1/10

behavioral25

Score
1/10

behavioral26

Score
1/10

behavioral27

Score
1/10

behavioral28

Score
1/10

behavioral29

Score
1/10

behavioral30

Score
3/10

behavioral31

Score
1/10

behavioral32

Score
3/10