Resubmissions

03/10/2023, 14:56

231003-sbdm7scb8z 7

03/10/2023, 14:35

231003-rx4abadf82 7

02/10/2023, 22:39

231002-2k417afa8s 7

02/10/2023, 21:20

231002-z68v6aeg3z 7

General

  • Target

    ItsOnFire.apk

  • Size

    13.2MB

  • Sample

    231002-z68v6aeg3z

  • MD5

    cea708ffddb35f64582582e761e6bc8d

  • SHA1

    fac7bd6c9596cfac1060ba288375597b3b18efbe

  • SHA256

    eb6e69930b39a97ea4fa8a3c50d54ab7f13ea1223fa9bd2bedca0bbd000b0d92

  • SHA512

    82a12cbd56f07312b0a8ed5c864dfe3943c368eeccaea6b5b75d48acd6a16d2854ec7b4df35e96ac813b1137b291f91e2c5bf18f4dc139066e2ca126bc463cf6

  • SSDEEP

    98304:7X8xSwWqfNCYHg9AHRhfd5K62u5MyAlQVkojh9RPltTaHcAhhCRz:77WXslukoJ3TaHcb

Score
7/10

Malware Config

Targets

    • Target

      ItsOnFire.apk

    • Size

      13.2MB

    • MD5

      cea708ffddb35f64582582e761e6bc8d

    • SHA1

      fac7bd6c9596cfac1060ba288375597b3b18efbe

    • SHA256

      eb6e69930b39a97ea4fa8a3c50d54ab7f13ea1223fa9bd2bedca0bbd000b0d92

    • SHA512

      82a12cbd56f07312b0a8ed5c864dfe3943c368eeccaea6b5b75d48acd6a16d2854ec7b4df35e96ac813b1137b291f91e2c5bf18f4dc139066e2ca126bc463cf6

    • SSDEEP

      98304:7X8xSwWqfNCYHg9AHRhfd5K62u5MyAlQVkojh9RPltTaHcAhhCRz:77WXslukoJ3TaHcb

    Score
    1/10
    • Target

      baseline.prof

    • Size

      4KB

    • MD5

      c0005febcc06500ffc1ddb2694b441a0

    • SHA1

      1c4b85bed78d385b12297d23927ef3da14c62418

    • SHA256

      56cbf8db20ca474791006480e26347722ba94e5a251b206a670654eb4c185613

    • SHA512

      4d79fbc7b4cb86a9fe14eecc372966bd62818a2e6681ac563ab8046b608e700fec2caf93740d97d808ba9c2061c938128d2ba4e0310c0ade43749d4ae3c4a48f

    • SSDEEP

      96:qasxxxx2XoTjBT7TlgWewHRABhIZOiWsea8L11cDHmC3d5aswSZXDWSiw:qtxxxx20jZTlzeOCBIf8SHhd8BSZX6Sd

    Score
    3/10
    • Target

      baseline.profm

    • Size

      221B

    • MD5

      0377ae1a0ef1536640de059558dfe2f1

    • SHA1

      3bfb2902495195c40c7a52249ba4a56376c82b51

    • SHA256

      fdecd30928773b75e9b77f358d5d984ce44d5a74ed75b5ea03f62b3080295882

    • SHA512

      6e4d4ecae173bcc1094e1a26d743bf4808ab4a59983cde0f1b34c06274da122c1f77ff8fd5328e4a52cdd8e9f494112390f00d354773cd6899440fd2c0a6d716

    Score
    3/10
    • Target

      damageshelter.ogg

    • Size

      16KB

    • MD5

      26df32d00fe1e5a754c43590eca08b8a

    • SHA1

      e2061ea74213ee1fa73e62f4cb00e5ca2d498b17

    • SHA256

      49eff40d58068528f8a4aeaef67027fa308f3d4b75a8e5e1c572d1fbfa5f710d

    • SHA512

      94e9859be87afd04b7eb4347530f00d54cd9e7f6e80d545fbc374374dbfb100a39997ecd4f4af09bfda5e4a4635f48dcac85abc833724728df3a4f04d0bfe899

    • SSDEEP

      192:XKv+FWxZknNi8XWWwbMIbkrk7lQ719rm663DIIIIIxyIIIII+ZF2HU39n8HUqUTa:XKqWQUCMb6k7iBZ634SIw9nrYvws

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Target

      invaderexplode.ogg

    • Size

      55KB

    • MD5

      537c9151405a39433ec115b8c794b1c2

    • SHA1

      911360abe13ca8e6292e9faa5932b362f3d01589

    • SHA256

      cee092248f0b79f0b6e854451d54fe73d23b2d250ed7e2dd3ca7d3aabe7231cf

    • SHA512

      4f38045acf6ecbb534d088f44ff2d6f319056225c747bbe8919da618b0d59fe01a86f1c53494d01c97849aa5f18781b2ccffd3d23c4ca014d9905e84125942bb

    • SSDEEP

      1536:7loX67Qpwx3e7Wn02DaM/89xUrb8HcUND:7l4cQ2he7emM/8UrIcm

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Target

      oh.ogg

    • Size

      10KB

    • MD5

      cfe9690ba3e211c18e62c72fd79eef19

    • SHA1

      7abe861a5152f09f9e787e82a1db82a1deac157b

    • SHA256

      18e02aec04c077843b0deee0ffffc2199d413da7e2058c5f121f65bfc184e8c2

    • SHA512

      1beb6ca6ee6026eff9cda637f0cf2694521de95056938d6f142f38d103610d227b1b3e2b13e05e5d1f5cd056d5de54bc86285746a46c613154612994bb98c6b8

    • SSDEEP

      192:umP9hVauKEoLHMb+Etefm0+7UXtztAzyTLu8:umVhmbwbxtm3Zyu

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Target

      playerexplode.ogg

    • Size

      163KB

    • MD5

      af660e185dbbfb72f7e30311bbd28013

    • SHA1

      a50e062feed661b45a79c51cccf43bcb9a6cb42a

    • SHA256

      f5b62c0027d8cd680f08533702f800ae13217d84f81cf426bffc1b99af3cefab

    • SHA512

      4d950b45847904898ded4309f9e20c4b9bc3de8e7d0f50c4f12626b6cbb50153d263478dac176eebc635607946aa934c3ea351a6246d329046354c436ac77fcb

    • SSDEEP

      3072:LQkpg15Mej4fskkkkkO3AFDxo2dBFCHJ4:0kC/7kkkkkOExo2dBFCp

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Target

      shoot.ogg

    • Size

      43KB

    • MD5

      ef629770d6b4871e9bb640d164cb201d

    • SHA1

      8c8bef0e4195df67bff3692bdd50154d25a8b3fc

    • SHA256

      649f7c795519e022479451575ca0fa064e5479d0b484c8deb2a82cfb9034eae3

    • SHA512

      0923bc22009234839ea8410ccd3922aef7733df1f5c1403255c854c8dc21234d0fd4c2bee2327f7a302cbbf1e3c0c043e41d92a4dc3532d10fb2f3303e1aa4e5

    • SSDEEP

      768:66zL8fIoH4zjb4nHbAM5Tn/eJHIkUx1IAdvErAMKr9ZgAk+Khy2:66z8I34n7X5T/FrGhow7l

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Target

      uh.ogg

    • Size

      14KB

    • MD5

      9223b207343d8cea833932df3ee65218

    • SHA1

      c4d216d376b6a498b3917d88d8c120ee30bb109b

    • SHA256

      bd7bfac235f120e746e0e31374df5a2fb20844a80e79551324fe76387d5d7395

    • SHA512

      d3d2d9824972088d8856bb4318304a81e3224fe4f41a3ac537e306827de3d5cb4c24b76dc03d7f8ff0b6917de84a36e41eaeb2d5751e9467653e3c281ad2fc43

    • SSDEEP

      192:Eqk+XioqPKNLKt9AadirT9NayoNGa9eDT9NayoNGa9eDT9hCMT2cGt/RwSFbjkmB:EGi4xOi3Xay2ePXay2ePYHtJ1Fbjk

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v15

Tasks