General

  • Target

    delta593.apk

  • Size

    131.6MB

  • Sample

    231008-qwdslacd5z

  • MD5

    c59df0e9fee73b5d396b393087c5e94a

  • SHA1

    d06cdb923cfa94b71513b7dcb9d3ae48b0844e7f

  • SHA256

    ed9bff0f5156fabb55f9fd7174b6313a250835642baa668816f3f3eb0b8573fd

  • SHA512

    a6a2fa712c976a433eabc83445f4004649a398080cccb7fcd3b64f560ca23ef03f636c08004809f3b0397392a8052e2769e04070fae0325f15e208a70d93c8bf

  • SSDEEP

    3145728:yJQVLbKcQjVzNyKNu1obmN+d8R6lqhnIwty3EMlSAGIK0P:x8JNkKM1oTK6chnI13EySmKW

Malware Config

Targets

    • Target

      delta593.apk

    • Size

      131.6MB

    • MD5

      c59df0e9fee73b5d396b393087c5e94a

    • SHA1

      d06cdb923cfa94b71513b7dcb9d3ae48b0844e7f

    • SHA256

      ed9bff0f5156fabb55f9fd7174b6313a250835642baa668816f3f3eb0b8573fd

    • SHA512

      a6a2fa712c976a433eabc83445f4004649a398080cccb7fcd3b64f560ca23ef03f636c08004809f3b0397392a8052e2769e04070fae0325f15e208a70d93c8bf

    • SSDEEP

      3145728:yJQVLbKcQjVzNyKNu1obmN+d8R6lqhnIwty3EMlSAGIK0P:x8JNkKM1oTK6chnI13EySmKW

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps).

    • Checks Android system properties for emulator presence.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Legitimate hosting services abused for malware hosting/C2

    • Reads information about phone network operator.

    • Removes a system notification.

    • Uses Crypto APIs (Might try to encrypt user data).

    • Target

      main.1.com.roblox.client.obb

    • Size

      75.8MB

    • MD5

      2705202cbf487941a8301fa3b0af30e9

    • SHA1

      87a26d083ea0dae86f113e940398e9742252e1e7

    • SHA256

      652eb582c462ca2b33adce664116d9727f21d4db52d6296308d09105a75b513d

    • SHA512

      dabaa58267da49b57cf3860654630c3c3f57990b3bac5d8e1cb710c7dbb7a19bcc14ba40fe4be23d13cf005e975ad6b7f67ecae826f5284a85db985d522f38f5

    • SSDEEP

      1572864:As2bD0lLl315i7eTqAB9YkMBM4U10fEfIChijD2orxihgoqzgWEs2U9:XlLll5sSqAUJW4U10fEffC2o9LgWEY9

    Score
    1/10

MITRE ATT&CK Enterprise v15

Tasks