General

  • Target

    Marcação de Ponto 2.0 HCM_2.12.25_Apkpure.apk

  • Size

    9.1MB

  • Sample

    231011-ys91mabh94

  • MD5

    9e57f2db0a81340049c0a6715332d41d

  • SHA1

    5e938536682da5002566d06107b4276ae31afb99

  • SHA256

    17886f555b4c292c135b87137c9b49316543ec52d1c5bb74da25d8e23dcfe749

  • SHA512

    54338e9dd340135a6c4b10c56f677b73d68b9c04053876ee5553ab81201a7fa3eb4a1e209e9036e5e5ca6c0e8d5ac2036a7e04f9ddf5d301efa9997ae25e9565

  • SSDEEP

    196608:pxwVLFrJkFHbblNi2R+LWvybYJmzu6CzBJcMZgUpf16IBTvI6LRmHY43lnOxRJ5k:nwVLFrJgeLWvy6mzultqOBf16Sf143ll

Malware Config

Targets

    • Target

      Marcação de Ponto 2.0 HCM_2.12.25_Apkpure.apk

    • Size

      9.1MB

    • MD5

      9e57f2db0a81340049c0a6715332d41d

    • SHA1

      5e938536682da5002566d06107b4276ae31afb99

    • SHA256

      17886f555b4c292c135b87137c9b49316543ec52d1c5bb74da25d8e23dcfe749

    • SHA512

      54338e9dd340135a6c4b10c56f677b73d68b9c04053876ee5553ab81201a7fa3eb4a1e209e9036e5e5ca6c0e8d5ac2036a7e04f9ddf5d301efa9997ae25e9565

    • SSDEEP

      196608:pxwVLFrJkFHbblNi2R+LWvybYJmzu6CzBJcMZgUpf16IBTvI6LRmHY43lnOxRJ5k:nwVLFrJgeLWvy6mzultqOBf16Sf143ll

    • AxBanker

      AxBanker is an Android banking trojan that targets bank customers information distributed through fake bank applications.

    • Target

      global-configs.js

    • Size

      290B

    • MD5

      70df1ec34bb9e83d0602eef9ea3dd7e5

    • SHA1

      3504ab87296271ff8a6f7f56ee4426c61d65a203

    • SHA256

      6583ed1a65fb9e8d66c6303b310cbec1c7f53c6ed674767e3be4a93615ec942d

    • SHA512

      5469b0963cca235e17df382bfa862c2614e5276e2a62176d895b1ed685d155f4811a1e0b00c7739681d5e8580cff409548cd2b3492861214b123b0e14749d17f

    Score
    1/10
    • Target

      helpers.js

    • Size

      15KB

    • MD5

      137ac47364b9ab0a2066626a0f26b410

    • SHA1

      95cf0118f1764a4d5d74c741ad376655651fa294

    • SHA256

      cebbf51623b5b1a93b4377c7ef23734661188d2f7afe88521bb75cb52ab93cc5

    • SHA512

      21f8a40bb1e8d80441bbd6297c6186dd77004acfba3d6bfa6068e7084eef4f507d60e8943c2fc6b5de3389972fa038d597c3c2e076c14c85ecb5755077d60e50

    • SSDEEP

      192:TTAPKYUowUnkqeuKQonwnMxVjTOc5QMmQv8rphlULPesjnNkvFJmRC1pEWiyuOYC:fAPPBOERvF1E5D/E5

    Score
    1/10
    • Target

      inappbrowser.js

    • Size

      4KB

    • MD5

      5010dfcf240390961dfe04901c44b715

    • SHA1

      0cdb8ed11230cc43de06bf01596536052fcbf494

    • SHA256

      c5862ccd44f8768006baff31d4c20713449ede291f5fdaa1716bb8d88d931b8e

    • SHA512

      b60cf62f9166bd6b691e4bcf59fe3928b8db10bf3925b9114520a7063206f262e1526ab2f99754f44e04b1c196ef1660dbe3c879451f2dad8788aa5298c3d99e

    • SSDEEP

      96:/xQ0N7B/dHfivo6cvjVw/+KCS/xHR0n5iXhyvcaRdAR/v+eIl:/D7NdHA4vjvKCS/xHR0n5ixyvJRdAR/g

    Score
    1/10
    • Target

      index.html

    • Size

      1KB

    • MD5

      93c8f544c7d93ee8e3f3eb732b3715a6

    • SHA1

      561d555ecbdbd9b1d4a1610154b2ba8cdf68454f

    • SHA256

      53def9f82090ff5f6128aa9c2bd5b9a6c5d66e47aa0392f5e3c92ea9bd3e506c

    • SHA512

      66ded181420fc6c6ea9408b1664b09aabd664bfdcb2b336f085918c90f10f3c44f94ff754808ac4605c43269c3118a3811efd96aab6a67564fafb1e9c8d69897

    Score
    1/10
    • Target

      isChrome.js

    • Size

      1KB

    • MD5

      a3c93a79cab306d5d69c184e8d3f362b

    • SHA1

      909b2cd2cbd43b204fed35fc49ac77c5225d2f3d

    • SHA256

      257fa492cca8da504ca3ff052268f88f07aea96785b5eab8d09236b1695e3d01

    • SHA512

      b40525531012ed0c3c3dce897cd716c00e3c71f5ce282bccd40b8c9308a4b73df51bfa46cb4be2cad3b7fcdbae3a5c132d30d23d41fd6834c067429bec5d2a8d

    Score
    1/10
    • Target

      js-util.js

    • Size

      924B

    • MD5

      ed60180c168a72eb32f3edd50cccc1ae

    • SHA1

      95d39a2f8a39d01db5cb873d08c423029b8ad83a

    • SHA256

      fa651eba6cb2dc3699881717cf6ca1d1fd14feb8fbe9effe58da275d83f24711

    • SHA512

      8a3d3660f03b57ae0950f0298b47d2986b9ae072e8d9515e76732cbd744278d63eea0290fae5ba8ce3698f30293a5837174973ceb7b2751eb8eb3aaaae684faf

    Score
    1/10
    • Target

      keyboard.js

    • Size

      2KB

    • MD5

      3b51f8b05dd9a0046508898535693472

    • SHA1

      d364c8e3730099cffa9ebc1636e127c8d409656e

    • SHA256

      1ba639a61ca50995221d8558ca020da56d160f9c02af9221ead1b3845082ee8d

    • SHA512

      279324eea4a3bea32f14457ee021238339c10f61cd7ad9f5ce147a7dcbd224fdf9de37116e863e48e60a4e43ff3cefec60e94286db09ad81f22047654c34e99b

    Score
    1/10
    • Target

      local-notification.js

    • Size

      29KB

    • MD5

      a2bb7c31adb4f00441ebb37c120fcff8

    • SHA1

      f0070a76ec77a0d9a9ebf1b3b25ae1188e3a1fe0

    • SHA256

      6a9bf7a0bf647dd0344aad610e167a9bd7901b06806daa1428f44527e225dc86

    • SHA512

      b83595ffbc01fbd49700fd56a0c9428c80b513df557ad6a3e97411c2d2077f9e2893dfec1d13da36f7987440fa9474d4082f49ee4f1bcf680b55845fbcc07ba0

    • SSDEEP

      768:ZonTpCZICaCoGPH1K9TBr5kw7lFv5Ugl+:ZonT0PH1K9Td5kwfRUgk

    Score
    1/10
    • Target

      local-storage-store.js

    • Size

      5KB

    • MD5

      c833129bcd6b35bdcdbe5edd4b2e73d2

    • SHA1

      a7920c26e3e98ad8742709f702a7bf7470c7be90

    • SHA256

      097161612fa887d7877b7c6eda857a839fdd98e2b2af8c2f3f941c2b25371f46

    • SHA512

      afa73fb1c92a4bb8ad6eaa5f7220f0d1cc907e8d4f151c9dfd8fc9ee44d372df3076cfccb2357d8cf10e00ebf8ba7a0cf5ea85b25d459062568f899edcf84c94

    • SSDEEP

      96:hQ6QrgtRQHqEo8oUaCH1B2kQX2AjDRhL6UHEt1G3adn1TBd/4dFLYBvn+Zg:hQKRQHRHo7CHD21X2AhL1HEjSadtBd/X

    Score
    1/10
    • Target

      lodash.js

    • Size

      8KB

    • MD5

      a59b5ca83012c28a8ad4c644f5a99f15

    • SHA1

      5180ddf00c154c7124018d95baa6abc38a87a8d5

    • SHA256

      ee598519ffcd420d52556a7d57a7d62ccf5248fb91184cb1344ea03dca871533

    • SHA512

      3ea7bf604d76b2f6a8f6cc7804ef1961c9998ca9d488cb5c7e8ec471bb34207d750d5324ff47ce65c521cc9612d399ea7a6287694de96e1e5bcfdd0b126db6e3

    • SSDEEP

      192:7PYnR1NiYWEJIhYV5mEbFZXNhgcPFsXeuIYdEwB5lSv:TqR1QmmcFtNjPFJuIuzSv

    Score
    1/10
    • Target

      main.js

    • Size

      583KB

    • MD5

      f13479a0dcc6d585d2e379e5fab31a03

    • SHA1

      5f2017f50b11968ff457e263032420435b447f06

    • SHA256

      55e4867b0add2e5fff291ded59e5a18383e5c12611dd4f22143e673bda024c7d

    • SHA512

      809c469e18f5d9aacba1d810da6d4e151781bb1195a66e0db381d2919130024133d3665e570a289bed26359fd95ed2b0de56ad9add8b873f8973e816d1d17a74

    • SSDEEP

      6144:niedCtT739Q9Xsdh3OFZiea+2+HwYRv8Mmr3Rxag7jAD:niedkdheT/a+2+HwYRv8M0xag7js

    Score
    1/10
    • Target

      messages.js

    • Size

      4KB

    • MD5

      b16f53216392460c293055aac2a90773

    • SHA1

      8c77836357453628224a187546d9c90447dee107

    • SHA256

      c72629e3f735d638afb4c0925b6b847fc0b439c1c4c64ec87aa13338ba82dca3

    • SHA512

      49bf52b3bfc5d0c9942fa36f7ac0877a7536942e61ec858390f1d8a31a41c239d8feb383bdb7448a7371f2ce47413c5cf882a6cc9157168e83ccf45fb93dfcd2

    • SSDEEP

      96:4TtlU7+ViViOzijHtaPhB4TwgcKQesT1VzXGbbr:4TI+VsiOzNVtKleDGz

    Score
    1/10
    • Target

      network.js

    • Size

      3KB

    • MD5

      e0ff71ab2eb6b31eba1f25675c510dfa

    • SHA1

      95b6d676ffa2a9f609f582175db7714a7f2cbeb4

    • SHA256

      99021cf95cf2e97f45b0230263a135f6f2e5d7ae5e6b8356410148a8480ee7ea

    • SHA512

      fe7e766949493f7f46b50b690abf774d8c4f18e1fdf589f2c8d4a99fc7648d1219c13e56ea52cea73fd25953b37702a5776a7f388d8f7c93a581cc06dbcba98c

    Score
    1/10
    • Target

      nfc-animate.svg

    • Size

      14KB

    • MD5

      3e778b960e1def84eba14dca1a549e01

    • SHA1

      a03bef1b237e69e93dffc932c969b8e59198d76a

    • SHA256

      fb29e0d2cb711c2ab9956853ac6234851a4472ecfe3611534a0aab4671cc9eec

    • SHA512

      3d4a9b380aecd456511fd2cd7fa9ac1d59d70e98768fb9f23f4985d8dcf726649a80920b37afbba21086a8361619d2810abafcc03fe9f224c262dc0a59c7dd02

    • SSDEEP

      192:G9cT4tJOEaxAob4Bji43PMRF8GcWH7RqMOvWMXnarKEdH9dgaUINX09q699MZg:G9S7EaxAS00rlRlfOvbnGbxkcUr

    Score
    1/10
    • Target

      permissions.js

    • Size

      12KB

    • MD5

      6919ecec8d9ea220a6eb6b64fb8b6711

    • SHA1

      6c4c0d49e5e7988da43d58844e5fb84a095953ec

    • SHA256

      806a31fdad1fcc74a6bce702001c35498a9680f7739b5971f2e792c28ac4a5e3

    • SHA512

      0612eb396bf3c2f949d4cba3a834d0139e0c7e82c214050b5ecdeefe80247a525ca2637413cd1eb493282f5da76d9b074fbd62c786add37a15c93bed11af84a6

    • SSDEEP

      192:FOoV/Ppjqk7W9HuKwUKHQZHrT3+eCv272A5JM3LWRQWC8wM:Fnqk7W9Hu/UKHQZHrT3+Rr3N7M

    Score
    1/10
    • Target

      phonegap-nfc.js

    • Size

      28KB

    • MD5

      86a6acff23801ee5fc6d6e43a51b034f

    • SHA1

      5961ff65553aca5b1e59e4611b65b2a585c90af0

    • SHA256

      d1564e8336387b2663c36e275be339eee0341eb264a097b1df86383f59dfe375

    • SHA512

      8fda17414a6fdef6a94387d331f74a8dfdfe8c698bda7afddc2e2c7ed371454e4709e18b7d807fcc5c2eabfb4d7670ac67bf1f2ab383d236efb4738c352f3920

    • SSDEEP

      384:Vci1gxWYlQI642kZVxT9XiOQ9hSTADrs/R7s:Vcj/IkuNhST6mR7s

    Score
    1/10
    • Target

      polyfills.js

    • Size

      94KB

    • MD5

      443c697fc904cd88a651d09cf5c2fe2b

    • SHA1

      7eb8dde2d86846e296dd83d2075778247c6f3dbe

    • SHA256

      889b55a9f68c3f0b1b423c124f4876639920d29a171098d4e42d120d401290d7

    • SHA512

      b4637c606d1125aa6d16fe0e772cc561930608612313812a338156e20c38d3d57c9afa575d4b3f1a213b6b6527734b6d4d7d02ebf5b702437a7c2ee5490c0b17

    • SSDEEP

      768:It5Kh6f94jQkdG08Qp2sj2m9eFdZUgFFUG+LoK4N2rxK0/p9hynqnUppR9THjVdX:ImhImc0lp5UF/RFFPIgATp9YqACon

    Score
    1/10
    • Target

      ponyfills.js

    • Size

      1KB

    • MD5

      7c4e7a400aadd5857c0b9e459115d72a

    • SHA1

      207809ffd2de469809a087828021855fc1479700

    • SHA256

      13c5327173b757d02dda59d2cdcdab89c9c32555efb76f5b04ce4e5e913e0727

    • SHA512

      c74b2f97d96b31835e64bb62452712fe311cbe7c313302cd55d19084f00632feb181ac22820431df5ea3350b37503b4fb22516b72a3c49bc1dc61ed9df05beee

    Score
    1/10
    • Target

      promise.js

    • Size

      9KB

    • MD5

      cb864433bfd937b8179568b9947aa88b

    • SHA1

      49a614a2dede50e3bbe0001578181af874a77ff1

    • SHA256

      f42216edfe4393bc842bce03f5ebe041ceabc93869b450c9b429c761e3af580a

    • SHA512

      58340f481664b4c8f973b4c15a531b4b0fb0cbef9063bfd4011bb5f14929bfe9a7a0192f1dec0ffd728c457d698a5f5bc8c8b4f3658ed4594f7386043b9bc5ca

    • SSDEEP

      96:Z5sd7EaqLZgii2wZzIHrF88hYin9/sG2+0DEAvNUF3ofRYNLUqFb1LJR1ZfqcxnX:Z5oEamgiLFdhWG2fYNUsJLCcxVUu1XDH

    Score
    1/10
    • Target

      public-interface.js

    • Size

      8KB

    • MD5

      e1ce105fd4b22b054af374f52971aed4

    • SHA1

      99f8d3d11c43713bd0784e5fea1c9b5ae5873f15

    • SHA256

      f1176eb3a1882ba1868bdaadb4eba4cbfaf1ddc2a8036aecf1bfd21da347f3a9

    • SHA512

      328a80b927adafe60595e07e8021c7f8ba127aac034300cd28560baddb09fa907f0b0f91db82e303a450eaacf6b784791ca0847789e40a97f58d15d1bf158aca

    • SSDEEP

      192:RTGWTfBlOFds2OxkMUM/Hv4knk1nHnCutmY+Mm7z1:hIMHdEH4N

    Score
    1/10
    • Target

      requestFileSystem.js

    • Size

      3KB

    • MD5

      d42bb016d1070ed2c6c6b7dbdce33d2e

    • SHA1

      61fe908e1d48fb7599eb3138e19bf5354c6eaf4c

    • SHA256

      006a7c4f3688591056f7813bfab9e31798a8e54ef06b134d3e5f455b75370613

    • SHA512

      83dab275164cedf6fb65d287df782736cbfbcb24efe68d309c18439180d0fa16c3724bd82d57b75c7ebf660ad9e845a686e09960304d00a774c097175cbbf95a

    Score
    1/10
    • Target

      resolveLocalFileSystemURI.js

    • Size

      4KB

    • MD5

      e22a8925569e9a985fae1cfb68096b51

    • SHA1

      843441389295223a761c7e2e6bfee710322ac95a

    • SHA256

      c472db86a1d5dde1c1787afc51feaa5ca4a2f6add3c49d49e14e53990d5899a9

    • SHA512

      1b80221878718e79b29ab7b58fb766d4f899941b33cf3d529cf28f9e89188ccd91fd1075f1d5f8172586ee027543b8861bc466c085aae353afdffb0e05a5bd6e

    • SSDEEP

      96:xxQ0N7B/dHfijwWO9R50MOOOkJIz9g9HDvDuuCXFyj2hqHFP49/A:xD7NdHZPfOZ7zi5vDYXFyWqHFA+

    Score
    1/10
    • Target

      screenorientation.js

    • Size

      4KB

    • MD5

      7d1f6068ebed38ea3c469946e7a1111d

    • SHA1

      74f0f1396dcb304cb40c7c1072834ba4f2db8d00

    • SHA256

      f9d142c9ff786065891be5ffc7010eeb8867cd4d025be877d4a9c61a2d15071e

    • SHA512

      e6a4803f5fd3ac7721edee2a9804285bb1a7c78668d1d3e8ab9b0f606b6ac9cec71fca0ce2494d61a38dc9c6eb9628ead8150e8954bf6efe0ebe53abc6e504c7

    • SSDEEP

      96:jaxQ0N7B/dHfiX04BFW/tpoXLCa+9Vzj/iFydCD:jaD7NdHJAFGqLn+Tzj6FydCD

    Score
    1/10
    • Target

      service-worker.js

    • Size

      772B

    • MD5

      92e140e20d40d3f3850fb79052a9c81c

    • SHA1

      406120b593b5b93f87d16be50f0f77ee86fe81f3

    • SHA256

      bd84768293401f56f24bb5762260b52cd173826c8bbaaf8757a9054037b0026b

    • SHA512

      93cc1526689c3b939f0befedd5ab04fca2d84f658f891f9f3f9e9bf54eb07c511c764a0135f98961a89bf7ab2c2f73eeda97e9042ef17b712b935600257e1b54

    Score
    1/10
    • Target

      splashscreen.js

    • Size

      1KB

    • MD5

      63c6b117c57f850e0fd8636a843ae644

    • SHA1

      d7ec99779febeee0962233844d74c03f197e454e

    • SHA256

      74f55b9939ec73d2500f393f4f20eaad9c75f63881c5d64d570a9c43a71f030d

    • SHA512

      a022939263b4da2076dded8d661e97bda84843d724cb08929da20d9e945d398540211d1987499b74f74e6357f7e459f2aba802b7502cb4bba5f8f81beb319275

    Score
    1/10
    • Target

      statusbar.js

    • Size

      3KB

    • MD5

      0394e866aee05353773171d35eb0cf01

    • SHA1

      1f3897a6a2413d31c897aaa77b59515af46ea2db

    • SHA256

      ae61337057477e3596a2b5891160942c65c9c45862574fac7b09dc551c85a479

    • SHA512

      502da45a1fe61c2deea4c232e4fa7a005a617963816d2b119608fc130e879ee517f5650378b130681c402df5e6851d509b67ffe4888baa8c757dee5d459465a1

    Score
    1/10
    • Target

      sw-toolbox.js

    • Size

      15KB

    • MD5

      2770efb889cc10c4de88d0b746c2a13c

    • SHA1

      4f5ab2140180ce358c18c22379eb2e81f8ed180c

    • SHA256

      860d7dc41a863a3b243ccef74bcfb24459f0a1da9c1ebc7cb10275bd619982de

    • SHA512

      30a07b8dc9403c26b219fa5a950e304b4594ccbe8745999c195f4abf50754a9c8d955a158dfa448428ed72dcb89a1fbce0bf861b328618d62f7eb057d76dc15b

    • SSDEEP

      384:057PCzH9O/5CNCxDqr0PFVd4jI2DuL5eW66DAQrzxaNzD+8gxxPAVvRmvU:054H95NQPF3l88SAgWU

    Score
    1/10
    • Target

      umd-tough-cookie.js

    • Size

      264KB

    • MD5

      2ee97902376675d68afacbbbae0b4c2b

    • SHA1

      ba20be857dc08d9429c558ae1abd8d5556fec263

    • SHA256

      563931e0ab90e13db19a864bf769ffdbb5b16d7d6323a9ab6ac1b80cb24f4e18

    • SHA512

      c8bf08708b44b55f90765c70ffcc653c629d6feecf132b563415587c3524d759ded048844390d58e7d8206c5ebf188689ef38c143cacc7e2f035648f9cb7e117

    • SSDEEP

      6144:m1Cs0HXOkZvfRV345zS1TRBVV+qw1no4dlpam:n3OavH3456F6no4lam

    Score
    1/10
    • Target

      url-util.js

    • Size

      2KB

    • MD5

      7c1dedd71f077de57d7e832b7f1a25b1

    • SHA1

      d3d6bf21fdd318f478ea0c66cdb4b075b712bc17

    • SHA256

      3f038c96a955cd580865767549b3028c16cd84f52d20499b4b522e1c2e17f851

    • SHA512

      3417721fd002591507732394fc9c652ac035ce2e1306b84a881423121c1e9e7fadd11f72e2a034559649679015e3a95889a4ac7282f297d350a79670324447c4

    Score
    1/10
    • Target

      util.js

    • Size

      968B

    • MD5

      d76fcc544579a6932cf303c05d286127

    • SHA1

      4dce4377f4c859bf406cd98ab9321e7c1c36459d

    • SHA256

      b4def67fb27bf723d6d05e31c6b1be0e5b99f3af875ee4e7aa37a54299bb7709

    • SHA512

      dbcd7ff165cc269d3b2cb341bb493fb9f897225e124d2fc9ecf53b1eab46dad35c18200ec356fbce08da80836f8979558a9a239e65c4e774fbc22509e776891d

    Score
    1/10
    • Target

      vendor.js

    • Size

      3.8MB

    • MD5

      92cae0684f95269aeabd2fa1ec8bcb91

    • SHA1

      71d8ec84cabd47b3766601caf5601c41fcb9522b

    • SHA256

      e3683e6a0e915c32f82f914ae1eeb96cf4f701a4c6b4fa343dbfc0b7d270bfdf

    • SHA512

      363ba56fcccc83546cb4e5500fc48d75f04d573e2c58a405332fcce31ccf1ee6c442efd37d82c89d7b9a90416e5a5460e3423ae05ec068b2857c723d7f4f6555

    • SSDEEP

      98304:oUNjdIMGxSX9SqoHRhljVSUEbbtvV8EAt8a+054u:9V68M

    Score
    1/10

MITRE ATT&CK Matrix

Tasks

static1

Score
7/10

behavioral1

axbankerbankerevasioninfostealer
Score
10/10

behavioral2

Score
1/10

behavioral3

Score
1/10

behavioral4

Score
1/10

behavioral5

Score
1/10

behavioral6

Score
1/10

behavioral7

Score
1/10

behavioral8

Score
1/10

behavioral9

Score
1/10

behavioral10

Score
1/10

behavioral11

Score
1/10

behavioral12

Score
1/10

behavioral13

Score
1/10

behavioral14

Score
1/10

behavioral15

Score
1/10

behavioral16

Score
1/10

behavioral17

Score
1/10

behavioral18

Score
1/10

behavioral19

Score
1/10

behavioral20

Score
1/10

behavioral21

Score
1/10

behavioral22

Score
1/10

behavioral23

Score
1/10

behavioral24

Score
1/10

behavioral25

Score
1/10

behavioral26

Score
1/10

behavioral27

Score
1/10

behavioral28

Score
1/10

behavioral29

Score
1/10

behavioral30

Score
1/10

behavioral31

Score
1/10

behavioral32

Score
1/10