Overview

overview

7

Static

static

7

c2547dfea0...aa.apk

android-9-x86

7

aps-mraid.js

windows7-x64

1

aps-mraid.js

windows10-2004-x64

1

cb6581722b...0b.ps1

windows7-x64

1

cb6581722b...0b.ps1

windows10-2004-x64

1

closebutton.html

windows7-x64

1

closebutton.html

windows10-2004-x64

1

dtb-m.js

windows7-x64

1

dtb-m.js

windows10-2004-x64

1

fyb_iframe...l.html

windows7-x64

1

fyb_iframe...l.html

windows10-2004-x64

1

fyb_static...l.html

windows7-x64

1

fyb_static...l.html

windows10-2004-x64

1

index.html

windows7-x64

1

index.html

windows10-2004-x64

1

mraid.js

windows7-x64

1

mraid.js

windows10-2004-x64

1

omsdk-v1.js

windows7-x64

1

omsdk-v1.js

windows10-2004-x64

1

tt_nd

ubuntu-18.04-amd64

vpaid_html...e.html

windows7-x64

1

vpaid_html...e.html

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    c2547dfea0e24a3c94b35c9524e538aa.apk

  • Size

    133.8MB

  • Sample

    231010-1ex51see25

  • MD5

    0318392ea5c3d6b1794115f14558625f

  • SHA1

    a628dac8675e06f1adbd670fa6d84fa4c5d8ab1b

  • SHA256

    ec95656974d923d7eb438d44cd972c8e2fb6c81133221b610915176ebd89f190

  • SHA512

    c89383a3ec285a24bd015ee7ad462b3c1694b463c69851556f1a8b4f23d33c9160880aa9957b1635f642cd86b8b0623b740c31a1fc2663efc7649388149caafb

  • SSDEEP

    3145728:mGv/WL00L4j1Uk3FHLqKkvI4raCUxRbtgAJiMzu2ZuoTJEq6/z:ZXWQ1t3xkVwxZthgO751g7

Score
7/10
androidlinux

Malware Config

Targets

    • Target

      c2547dfea0e24a3c94b35c9524e538aa.apk

    • Size

      133.8MB

    • MD5

      0318392ea5c3d6b1794115f14558625f

    • SHA1

      a628dac8675e06f1adbd670fa6d84fa4c5d8ab1b

    • SHA256

      ec95656974d923d7eb438d44cd972c8e2fb6c81133221b610915176ebd89f190

    • SHA512

      c89383a3ec285a24bd015ee7ad462b3c1694b463c69851556f1a8b4f23d33c9160880aa9957b1635f642cd86b8b0623b740c31a1fc2663efc7649388149caafb

    • SSDEEP

      3145728:mGv/WL00L4j1Uk3FHLqKkvI4raCUxRbtgAJiMzu2ZuoTJEq6/z:ZXWQ1t3xkVwxZthgO751g7

    Score
    7/10

    • Acquires the wake lock.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Reads information about phone network operator.

    behavioral1

    • Target

      aps-mraid.js

    • Size

      11KB

    • MD5

      389c19f932d910dc56dd904afc637c9a

    • SHA1

      1fa7df6337eb44cbdd4e11279aa0976185a3c012

    • SHA256

      cb7d05b96bd63ed2156cad6a1696d580eaa9eb21854b70be9b0d9818591daf87

    • SHA512

      a99627c334f047c43ea6764206801d367330ea8de101c3ae8cc1be4d02ab29030832ccb776b8737c81c365876631bd0fd0fabea09b3c6b26ea4c428dca2fa66f

    • SSDEEP

      192:piC6dCpN5+RG3Ry7MtlT6u47zWtahPlwP2i5yMSyN7nwgR046w151JP:pJmCARGA7MtlTjgZlwP2i5yIEo046wJ

    Score
    1/10
    behavioral2behavioral3

    • Target

      cb6581722bb50b44b8442434cbad4a0b

    • Size

      51KB

    • MD5

      63aee2b33ef5d74a8c07dd7753862ce9

    • SHA1

      448d3ae2a0b207dcf543e68f304d066ea5f91672

    • SHA256

      124e72b00eaa4647869478f6b317c1f38b3448d2fbe220bf5b683419b1b19933

    • SHA512

      144bf02aedc0500b8937e6e2650c8110a72f26672d0f33d15da7916b59eb86ec547ad5afa6c99584465eff9013c3c85cce3a860e2d9a9d4c2264641e22963f57

    • SSDEEP

      192:TS+2BQELhiCEGn7AcjW+kt/QCup56L0zr10mOPhCX/9s/CIzlwX9Vbo3E89MfCWV:TjpELhBjnUcjW+kOTPS0zhbO52zo/Yhp

    Score
    1/10
    behavioral4behavioral5

    • Target

      closebutton.html

    • Size

      980B

    • MD5

      222c28fa7bc9d39dc4a210b4f447b85b

    • SHA1

      1cd29452beb9c6f178dc385878f357d972480b40

    • SHA256

      a9731f9a7fd1c359f1d86b80794db8a869d117e13f821974aba00fc1885b1fa1

    • SHA512

      ce3d332317a204aecaeaaa4ea7729dd179d0b1200605bc15e856b6a4e927c6aac3088e687404f1ea952e37de42ec259ce262da06b723308845ca3415b30f4440

    Score
    1/10
    behavioral6behavioral7

    • Target

      dtb-m.js

    • Size

      39KB

    • MD5

      86bac92a5901d8b063e93419775d8eec

    • SHA1

      dd9028acc20ebfdfacc6fc7588692c1a6e1f20d0

    • SHA256

      b94fad9c2b75a4339610f5f8164b14a9999b2cc74ca1cc44d263ae8b41e2ee42

    • SHA512

      adcc55a0210d7de5d6f5dbce0bbe8bad67bd07c097171acc40fa2b87d98ace45976f5c5413043722f7388a3965688436bec82b08a23ef9cb4caebd11078447c7

    • SSDEEP

      768:wm5hDgB3X78OZvpAVSZDyZgs+rACp5+lW8wZ+H+:wegRLZvpwoMgPPNp

    Score
    1/10
    behavioral8behavioral9

    • Target

      fyb_iframe_endcard_tmpl.html

    • Size

      520B

    • MD5

      7844cba73b7b4b439b587dd501e92d82

    • SHA1

      25a452bc6886d0e05d4a73da785021fd4c477a04

    • SHA256

      e042e304cecd19bb6816de0150d3895e2717e66dda91f7e189610687c049dae6

    • SHA512

      f54c2d7c0b265aa7c6feb18b8fb6740e01c9e3aeb19bf420d39832737fa59eed8fb959c8aa8a99c0efc87ca3399a244a918f0b4e90b0ee831a87e8afefdf2711

    Score
    1/10
    behavioral10behavioral11

    • Target

      fyb_static_endcard_tmpl.html

    • Size

      3KB

    • MD5

      d18fb1787ce0e84567496b8564e452aa

    • SHA1

      007033d0824685600611af6992060577e127dd23

    • SHA256

      2ae5e0576febb1a1cd63b10bf71644f99fcfd0fe7fb1f2d19525594165294e51

    • SHA512

      ba5225a80941e3ee4ff18401b910968a6cab47634914ecb68213599b96fd4b39c8722e82bf2883faf355d9416a6f2acaa36151a5d8969079cfcd4c6795f6003b

    Score
    1/10
    behavioral12behavioral13

    • Target

      index.html

    • Size

      2KB

    • MD5

      2cb8afce15ab2cee2410097a7dc43606

    • SHA1

      fc90fc4a7e7d1be057783c3b602d36282a6ffc5f

    • SHA256

      413a4195cc9d3ed959cc7b5e9ca2032d92608e26526d1a913e9756584e4992a4

    • SHA512

      bc34bb3121a5bfbc3d515912b8f1aabc021b2beb7fd5ee13ea9016a2290d512c4f98df3e651475b9d7a5cdb1048cfed617eba394ce5969c298c96e743e03985d

    Score
    1/10
    behavioral14behavioral15

    • Target

      mraid.js

    • Size

      40KB

    • MD5

      f097180ec2741c125a5d9aff5fb46a54

    • SHA1

      5d8e09c4e228aef59a2fcd09d49ef7c24e948567

    • SHA256

      1662726579767bf959bc34e4ceea32c730e1d7452119688ad5a5e4599ec52f89

    • SHA512

      839176de6575447ebaf67f2a7024f91b985dace82205b31076b4f295aed698cfefd848ca4447c306eb4204301157c17c53c650db6a4bae24a222fa00fc54af2e

    • SSDEEP

      384:EYSdGfT2QJIGCOIyzuP2QESHmz/SXZ3hsyGENyyFXHjFeYSpyObjw7NLhdlrdT9r:RXaoyFX7SIXEmD

    Score
    1/10
    behavioral16behavioral17

    • Target

      omsdk-v1.js

    • Size

      38KB

    • MD5

      497c3d33cc100ffe210aa776d132ed94

    • SHA1

      7815fb9cf1b97a1f2b58f9ee3664f796992bcef6

    • SHA256

      04247270adccf47bea173c0eaaf55db68352efd84208ff06c44b0161293152fb

    • SHA512

      c824b2920d3a810b702609980490f1716d99143f83692e5d79d0fce6872d2dda2d7c839cc01337c2bcab4b9875af9e726b1ad8678eb0c2739f9ac9ff81effdd3

    • SSDEEP

      768:X6kymXj28XPXwfBKn3ySNLTcC/XxUsExU58JVzdkmkWqa6W1s+Z7iUVtP9hzCsu7:X6kPXqrs3b3ExU58JVzdkmkWqa6W++ZM

    Score
    1/10
    behavioral18behavioral19

    • Target

      tt_nd

    • Size

      5KB

    • MD5

      cfb58d5a778a4da98783db9388bacfc5

    • SHA1

      4e826b8e65f7a81ee0c30836f132632054f338e7

    • SHA256

      64f11eb5134f29bcff547988289baff229b05faf93adac63d3a3bfe97c7f810a

    • SHA512

      1cac2288c9d222dbd195e3b929aebb887e5ff8d13c46675bcc879c762d09311b97a1e331389df520165cb994f1717ee5debf1a97a7563c474130943d5cd4267c

    • SSDEEP

      96:PWuzrX8H2mrqoAuRJff9SgbhWFllXU+9z:PlrXWRJ9Sgbh0l5

    Score
    1/10
    behavioral20

    • Target

      vpaid_html_template.html

    • Size

      16KB

    • MD5

      e276e92e96646fdac5a1988074f33954

    • SHA1

      1a7aa338deba5f148ea18666ec1ec4fbf5ea148e

    • SHA256

      4b8fd03cf268f9cd2f7432e13e8a7862760f7a6ed10bbf96dcc8232d2d382b42

    • SHA512

      8425f53afde718047c310fc74a8d3924ce47f61f33fbb99d52147364244b9252b87ce1ebaac80db9d27151d0969537737c042e0f615e354bf2edaac6b13ce065

    • SSDEEP

      192:mrLYJFkVvGFQshArPtP842+Lw1wOEeR6kad8bWXSrJEBOn8TsjNC4ck8aanlDTt2:8U42Fn9qW4+EQNuSXIlodoG

    Score
    1/10
    behavioral21behavioral22

MITRE ATT&CK Enterprise v15

Tasks