Overview

overview

8

Static

static

1

HiWaifu_AI...d).apk

android-9-x86

8

1.html

windows7-x64

1

1.html

windows10-2004-x64

1

2.html

windows7-x64

1

2.html

windows10-2004-x64

1

3.html

windows7-x64

1

3.html

windows10-2004-x64

1

4.html

windows7-x64

1

4.html

windows10-2004-x64

1

a.html

windows7-x64

1

a.html

windows10-2004-x64

1

a2.html

windows7-x64

1

a2.html

windows10-2004-x64

1

a3.html

windows7-x64

1

a3.html

windows10-2004-x64

1

a4.html

windows7-x64

1

a4.html

windows10-2004-x64

1

b.html

windows7-x64

1

b.html

windows10-2004-x64

1

c.html

windows7-x64

1

c.html

windows10-2004-x64

1

d.html

windows7-x64

1

d.html

windows10-2004-x64

1

e.html

windows7-x64

1

e.html

windows10-2004-x64

1

f.html

windows7-x64

1

f.html

windows10-2004-x64

1

g.html

windows7-x64

1

g.html

windows10-2004-x64

1

h.html

windows7-x64

1

h.html

windows10-2004-x64

1

i.html

windows7-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    HiWaifu_AI_Friend_amp_Waifu_Hub_MOD_APK_(Premium_Unlocked).apk

  • Size

    14.8MB

  • Sample

    231011-vty3zadc34

  • MD5

    efee500cc9e5a97707024eeac9d500ea

  • SHA1

    ee63be5b211da35bd34b8100f7bd3c02f3e675a5

  • SHA256

    1e8d9549c48831fa6cda54485e61338f92ed3d5058222602082d9517c31a83db

  • SHA512

    fe11e46f1b1935fc914022bb6c34718d8ac3f4e08a84e25a82788962f9e5d32571ec835da35f957661378c162c9a4761049c1b9a14f53e1d5762768595f69b02

  • SSDEEP

    393216:ecBsT4E7nKHUbx9xW6ME+NOL0ZkgxNu2Ts5wkI0k6dr:eKsT4Ee0boRkMg59I0k6dr

Score
8/10
androidbankerevasionransomware

Malware Config

Targets

    • Target

      HiWaifu_AI_Friend_amp_Waifu_Hub_MOD_APK_(Premium_Unlocked).apk

    • Size

      14.8MB

    • MD5

      efee500cc9e5a97707024eeac9d500ea

    • SHA1

      ee63be5b211da35bd34b8100f7bd3c02f3e675a5

    • SHA256

      1e8d9549c48831fa6cda54485e61338f92ed3d5058222602082d9517c31a83db

    • SHA512

      fe11e46f1b1935fc914022bb6c34718d8ac3f4e08a84e25a82788962f9e5d32571ec835da35f957661378c162c9a4761049c1b9a14f53e1d5762768595f69b02

    • SSDEEP

      393216:ecBsT4E7nKHUbx9xW6ME+NOL0ZkgxNu2Ts5wkI0k6dr:eKsT4Ee0boRkMg59I0k6dr

    Score
    8/10
    bankerevasionransomware

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps).

      banker

    • Checks Android system properties for emulator presence.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Reads information about phone network operator.

    • Removes a system notification.

      evasion

    • Uses Crypto APIs (Might try to encrypt user data).

      ransomware
    behavioral1

    • Target

      1.html

    • Size

      6KB

    • MD5

      01468f16d0d26cd6563cb08a9ee81277

    • SHA1

      274599e5974679673337626de4d25edcf98bce61

    • SHA256

      ebdf02e5d97212e699587956c86e1a16daa606cabe99f2d3c0d309d07fb0f111

    • SHA512

      6c04cf4996c7c324626c8e3cf1cee3402377ea465013e86a68b028a307120adc74d9af4829ccb68849b992f58fbcd14dcc9ee277fbfe8d0a7ebb63b6d16fe4bd

    • SSDEEP

      96:kHbYcZSgieqpLelQIEc0cco8gNAgZC3a3dxfxIDunOc9a/Ijv7/7Fv+X9Ea9Qh0R:4Jci1x46CKtzM5Ut78XgTCQbE

    Score
    1/10
    behavioral2behavioral3

    • Target

      2.html

    • Size

      11KB

    • MD5

      ecc3d21bc38684abe75fd4bb95654e6e

    • SHA1

      f35c0888a30fea63cc95b482d7d992b7372fc465

    • SHA256

      2e8573a9662784ef8bac704f8ad8b3ec311d0b4f09a0ebff71ee9f3a0b8c3f82

    • SHA512

      c7e0433a6f673edc5759c563ce73d8a449a4301dd9aa002fa174716940862a4a0b4932cd75d69040fece09baf3cee1662c1ccc5fbb690c0860d34776aaea15aa

    • SSDEEP

      192:QefarenePrXanSFxpe7eEM9EEljXp6Y1MUTY8XgVpDgLUDTyzrTWMHtkj0Qmulnq:Qefarenejw+e7eEMEEljX/dg3ELUDTyp

    Score
    1/10
    behavioral4behavioral5

    • Target

      3.html

    • Size

      1KB

    • MD5

      4faeecfe57bc125dc206dc6021d7cd0e

    • SHA1

      c5217d163cb509531376ff1a092de2ca79751224

    • SHA256

      af1a0c7b6f7e76ef8372afa3484c0c631174b07854d3a6246462fc8b4d02b59b

    • SHA512

      b99d7d5b09e8d363da9d7c815f34c91c6584c907ef41793c737e05dfa096a9a02914cdf2f48dd4e45a5679fdf71e5cecc3659ad9c4ba6b3f58ddf6a4e342f474

    Score
    1/10
    behavioral6behavioral7

    • Target

      4.html

    • Size

      5KB

    • MD5

      ea47b888fcff3909ac3cbce4a5b18f31

    • SHA1

      2dfcca3efc5cdad9f52a14fb5d972b40a989b643

    • SHA256

      c3ecd752b7da83a350ee4d7fcfda2f697405006004206e5bd10ffc738b45b0b2

    • SHA512

      f291dde1e52ecc6ed6c2766bcfbfe337cd8f7d97dd634093f46469859fd8c51c546431aa71321cb4abd9ebb5642aa940e394c9b11ac64a93b0601b84e94478ed

    • SSDEEP

      96:kRfRITHfEP0jWTA1EkcxG8ktRlyDEMAhBa8kVJK9F6nb4hPQGh/hBATSBvkYqPHi:12HEj8PFJjGXS/QWi

    Score
    1/10
    behavioral8behavioral9

    • Target

      a.html

    • Size

      2KB

    • MD5

      2350600c09a742d3a68917a5d36108de

    • SHA1

      ee521b56b5fb83dfa4c15dab556b90c70260534f

    • SHA256

      4aba37c73ab25df1042e5c22230b7441c8ef011e5d510bd4eb5a30385ff1aade

    • SHA512

      a507bdd8881281e730d8a78c420d0c44dad52a86a4366e231f07a67914371c555884402505606a2cd0565b9ed0be586eafb51d217378d3397a2f26419220100d

    Score
    1/10
    behavioral10behavioral11

    • Target

      a2.html

    • Size

      3KB

    • MD5

      41c22139e87f8edffe2f3faf9c418291

    • SHA1

      e1c78ed9f6d198fa9ddc320244af1271e36d10e7

    • SHA256

      3af0316db011921822fd3a22e676108a8e6574daafa7bd7c17c73206d87af5d6

    • SHA512

      cc402810ae71ccb8026dc673f0a48d0479e938e9749e98a8b9b849cc4eaa5a1ef49d7b1ceecced69e341426be9ff711c64bd268b945028fbdc3d644966fc92d9

    Score
    1/10
    behavioral12behavioral13

    • Target

      a3.html

    • Size

      5KB

    • MD5

      c1d018e3a3ff9ae7425d84696bd1bc4f

    • SHA1

      be65c22222deb8ae69ff66716465f925d92e67ee

    • SHA256

      7a24f32b015363b1a22f2ca01a15873139a30b7283fa4a61eecd4b466be9670e

    • SHA512

      1a2dca08d8f7be4135f06c49a61883482dcab8e963b6f25fe1c9f6dfba4bcd11f45e8f5d6c2f43883471d4f2a9385da2760bf1757a0c030055df59c69d6b1183

    • SSDEEP

      96:uBKfU67lbSUDv6XSRi0jcB0jVCXOiXcOV3HrWi7qPAxY3QRD03ceVJ2C1f6hF2Fv:E6/zFZQwj2s

    Score
    1/10
    behavioral14behavioral15

    • Target

      a4.html

    • Size

      4KB

    • MD5

      cd3bd81c014c5943341cf536513c0e44

    • SHA1

      7ead817904553be9e5c3c9c492916c3d25c7f2c4

    • SHA256

      917dcff2a6c2ebe4c2f2ffb84224924c1964ce15e02ec2b1f81c2155726b84de

    • SHA512

      37f4fd312ef6da9b7e7e8905e965885984b342d6f9badeff859c4e307434a8152435395b42e588f7b29cded08d252f2b9438195824aa1c489deda9dab0ba4b4c

    • SSDEEP

      96:uXfUSzJwpsgqM13EWNzuvT4RM00tS3Zx7ag4UCNpTGzt0ilcFUvA5epJYh0PE6Pf:3ks79F4wBJc0PNAP+

    Score
    1/10
    behavioral16behavioral17

    • Target

      b.html

    • Size

      3KB

    • MD5

      ba42b30e00e7d230889a6240a68efcb1

    • SHA1

      b4171c5787e53279bb41ef1c5d730d623e303d0d

    • SHA256

      a94c4cae303c9ee1d4ec050a7b39a3139c924b890b12b208d08c3feb2acaa01b

    • SHA512

      8b69c07dc529b43ff37b14181825bb028a23b52373ebb17bbc211f532894f4846622a5663c7d8fb508f156dca074a5805eba5f86803f2ab0e43758ebf5ff0066

    Score
    1/10
    behavioral18behavioral19

    • Target

      c.html

    • Size

      1KB

    • MD5

      de171ce9b77990ea5e7efdcaf672f9b4

    • SHA1

      b7ae6e05eb7665f1fd5488986af7e10c839ae98c

    • SHA256

      4d774295475fcb51ea234f0204b2da457e88efc21712cc443a8648ebf0a748d7

    • SHA512

      f42c63d9a55044a78e10c12b09628e348eb25160be67dfa25089e26e926badf62fb870fc29e153c0aa5e3c2a60a925d5ae2a4aa2be1656e06e1831e326309a8d

    Score
    1/10
    behavioral20behavioral21

    • Target

      d.html

    • Size

      4KB

    • MD5

      ca4d3aef3f3b966ccd379f3d1e882fa9

    • SHA1

      d431cc19430784340a1f243523f24a745d920353

    • SHA256

      a37577ea9e338d0da8981e9e6916678c15d37ff8fccec4ecfb5e9e02e5ae8f7d

    • SHA512

      1a2fa6351b4ef818d786882270d4eebbb6f4aa041062919692eb4373a229847791606b37de123ddcf4e30bd32795ad4a5121a5733d07f0d5fb103e1260eba400

    • SSDEEP

      96:DgrefZks0cHamFDs87DVoB85nkYKQs5yPgtiyRgzXVNpPQkLDVQPa:Erefdng8nbhFLSa

    Score
    1/10
    behavioral22behavioral23

    • Target

      e.html

    • Size

      2KB

    • MD5

      460c27fe62c5bad8673043a86019e625

    • SHA1

      8ffc01a783e1b26207b2e4781ff27bdf60f78411

    • SHA256

      3fac586d0065058a5e527a0a890e7e462fc478d0fa816c5e1afab7af4f00c386

    • SHA512

      846439e12643da9af8d5ae6d47e8e605a2f7f348eecdc56463208e6c6b62ef7a2d7ebd648e3e9d0a60f033429337e0f8890c39babf60cee3bf58fa8a69c8c112

    Score
    1/10
    behavioral24behavioral25

    • Target

      f.html

    • Size

      4KB

    • MD5

      1f7613a6e6380ef75e6bd2bd5b889829

    • SHA1

      5a065a164eb64d6d4f0ca45e01894e64601f8f7d

    • SHA256

      6bfd89279cdfcd5141a635f6c1f18addf21136e3ac7bf8c2099653b2806203de

    • SHA512

      ebb0819de102ce32cb999f0bd63d95a010774af2c4b68f7855ef32c20623f810739998d37b67787971570a30c06f768571cba3e3a768e48c7488f4b1bfba8865

    • SSDEEP

      48:eNpMSnGY4mLjnGY4mco0vIF8ppvXKaAUgJTLfmJVS58Hjz0s/xcL6Aq9Z5M9irxq:3b1btKMTw4nPYZ6fSHMs

    Score
    1/10
    behavioral26behavioral27

    • Target

      g.html

    • Size

      1KB

    • MD5

      03f6ee63003bca6e3efbb8dc1a2b5d22

    • SHA1

      407d5ae34a8d5833fb32c08b449962c067e8103b

    • SHA256

      c8fd67e8b5957b8b99aea865a9796a74ddd96db793c543601ec5cee72f86942a

    • SHA512

      712da676620e4b9fa5f04b7a03bc61f0ab9fa12bcc9fedd2cd12c187cca04ad31f013b3757bbf1f786b3747c31ae8aae32e7284188110b9d898377e1e9ce4ba8

    Score
    1/10
    behavioral28behavioral29

    • Target

      h.html

    • Size

      2KB

    • MD5

      69564e7c9c0633dcfe3d6e254f790751

    • SHA1

      6751e0abbe1972dd094eec347fe6c3b3054888e0

    • SHA256

      d6c9f2bc7661f6fa5b498b781519f5697ee114748a8806bb33741e5a2bc39abd

    • SHA512

      1bef32f439d4f41e38dc6739e13897da03cccfd6863e15fee96ea2410e045b6a5e45346a1522a134d7dfa2dc7ecfa6e63e76677563f2efce0075e2038574e508

    Score
    1/10
    behavioral30behavioral31

    • Target

      i.html

    • Size

      2KB

    • MD5

      218c5edf19a0e00e9a7e8b2c10c0f1c2

    • SHA1

      126f6594906b57e35096fdf2bb8c9bef99fd3fba

    • SHA256

      29e411c63b4d1e2f834366e02b8f4684226fcbac4cb1478ff4f8fd7fa0c655bb

    • SHA512

      240eb2cfb08b103bdbb154b2d3f7bdd8a2f7a68cbf7d16cf74c9710392004ca2bb157fc16492cb049ee3a9c949f20d0326959b1b9775992b1399b87ee43236cd

    Score
    1/10
    behavioral32

MITRE ATT&CK Enterprise v15

Tasks

static1

Score
1/10

behavioral1

bankerevasionransomware
Score
8/10

behavioral2

Score
1/10

behavioral3

Score
1/10

behavioral4

Score
1/10

behavioral5

Score
1/10

behavioral6

Score
1/10

behavioral7

Score
1/10

behavioral8

Score
1/10

behavioral9

Score
1/10

behavioral10

Score
1/10

behavioral11

Score
1/10

behavioral12

Score
1/10

behavioral13

Score
1/10

behavioral14

Score
1/10

behavioral15

Score
1/10

behavioral16

Score
1/10

behavioral17

Score
1/10

behavioral18

Score
1/10

behavioral19

Score
1/10

behavioral20

Score
1/10

behavioral21

Score
1/10

behavioral22

Score
1/10

behavioral23

Score
1/10

behavioral24

Score
1/10

behavioral25

Score
1/10

behavioral26

Score
1/10

behavioral27

Score
1/10

behavioral28

Score
1/10

behavioral29

Score
1/10

behavioral30

Score
1/10

behavioral31

Score
1/10

behavioral32

Score
1/10