Overview

overview

7

Static

static

7

Character-...om.apk

android-9-x86

4

Character-...om.apk

android-10-x64

4

AntDesign.ttf

windows7-x64

3

AntDesign.ttf

windows10-2004-x64

7

Asap-Bold.ttf

windows7-x64

3

Asap-Bold.ttf

windows10-2004-x64

7

Asap-BoldItalic.ttf

windows7-x64

3

Asap-BoldItalic.ttf

windows10-2004-x64

7

Asap-Italic.ttf

windows7-x64

3

Asap-Italic.ttf

windows10-2004-x64

7

Asap-Light.ttf

windows7-x64

3

Asap-Light.ttf

windows10-2004-x64

7

Asap-Medium.ttf

windows7-x64

3

Asap-Medium.ttf

windows10-2004-x64

7

Asap-MediumItalic.ttf

windows7-x64

3

Asap-MediumItalic.ttf

windows10-2004-x64

7

Asap-Regular.ttf

windows7-x64

3

Asap-Regular.ttf

windows10-2004-x64

7

Asap-SemiB...ic.ttf

windows7-x64

3

Asap-SemiB...ic.ttf

windows10-2004-x64

7

Entypo.ttf

windows7-x64

3

Entypo.ttf

windows10-2004-x64

7

EvilIcons.ttf

windows7-x64

3

EvilIcons.ttf

windows10-2004-x64

7

Feather.ttf

windows7-x64

3

Feather.ttf

windows10-2004-x64

7

FontAwesome.ttf

windows7-x64

3

FontAwesome.ttf

windows10-2004-x64

7

FontAwesom...ds.ttf

windows7-x64

3

FontAwesom...ds.ttf

windows10-2004-x64

7

FontAwesom...ar.ttf

windows7-x64

3

FontAwesom...ar.ttf

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Character-AI-1.6.6-Modilimitado.Com.apk

  • Size

    70.5MB

  • Sample

    231017-sxt73sch5w

  • MD5

    99c6a95c4bf07263d6dc2a82217d6b61

  • SHA1

    44466a0d689b3e37ab75a9d7b08d081e1197bef2

  • SHA256

    875655906f4b3f03040c9137a6e772418558c210a036c9e28e0873e3bd467eec

  • SHA512

    b9473555e9afe0f2fe58b8e927067dc2d674f719eb7798b01241693b338994eadbffb3a6806d5133ffc8e645a2307b83e68e1173c2e200e20c05fbde53fe0b44

  • SSDEEP

    1572864:PU5Q69V+vbaqzG237tpUbkZnVHuhfNdDnn9Zl0:PYQUV+eN237tpUbkZnVHuhfNdDnn9c

Score
7/10
androidevasion

Malware Config

Targets

    • Target

      Character-AI-1.6.6-Modilimitado.Com.apk

    • Size

      70.5MB

    • MD5

      99c6a95c4bf07263d6dc2a82217d6b61

    • SHA1

      44466a0d689b3e37ab75a9d7b08d081e1197bef2

    • SHA256

      875655906f4b3f03040c9137a6e772418558c210a036c9e28e0873e3bd467eec

    • SHA512

      b9473555e9afe0f2fe58b8e927067dc2d674f719eb7798b01241693b338994eadbffb3a6806d5133ffc8e645a2307b83e68e1173c2e200e20c05fbde53fe0b44

    • SSDEEP

      1572864:PU5Q69V+vbaqzG237tpUbkZnVHuhfNdDnn9Zl0:PYQUV+eN237tpUbkZnVHuhfNdDnn9c

    Score
    4/10
    evasion
    behavioral1behavioral2

    • Target

      AntDesign.ttf

    • Size

      68KB

    • MD5

      3a2ba31570920eeb9b1d217cabe58315

    • SHA1

      4e77868439280fb434d4697c7b911271406c81f3

    • SHA256

      7955ca14127b30412c114eb13cfd702b5dab265feb1880d1695d73caa824cde1

    • SHA512

      41842c1fdea06a042d0faa4fc50e0637e69ed56dfa06ae0e34878b5f4096d624f07cca0ab78e12e3701c2c7bcd40af8b095e8101f8a23e37edc4f1da3d459457

    • SSDEEP

      1536:lUDjuprnwV0C7S6qlvfSlBCBdbirbD24WKkvemVul3Wnq3:yDqw0uS6q4lN24WKkveHll

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral3behavioral4

    • Target

      Asap-Bold.ttf

    • Size

      81KB

    • MD5

      378d3b281b7ac93c44f65434f30afc35

    • SHA1

      dce8a177571cc84d89e787f164754daa128c7e4d

    • SHA256

      eb0bc0e66062ca73ae574dbae6078cd99eb02d571fa39545f568aded6af95772

    • SHA512

      3940f377216227a46ac56d813518cb7023a7bfe80aa12a38bedcacda6ed6889a533d61aaec8097b0e73fc2b933360673981d881a77ba8bbdcaef8eaef435f6c0

    • SSDEEP

      1536:2gmIWUkFD9arHm9rHe470k8Zmoh5Kw+GD6cjA+B3hOXoyd:SrHe1mo5oI1hjyd

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral5behavioral6

    • Target

      Asap-BoldItalic.ttf

    • Size

      87KB

    • MD5

      cecddc6fc839777170fe701ccd21feda

    • SHA1

      5c501fb61819a3eb3fd62bfcc38234c003f88126

    • SHA256

      a2e451ed745dfe5bf4347495c00d4fb6c6ccfbe81faa5235140ec968365913b0

    • SHA512

      547142572bd60d6bcd78556f6a4599d20d8e51662121ff0cc1d8ee6f30c89c139cef29e8ca50efc31b2a9bcf9898e944d8c6b5df67836225e73fc16aceed033e

    • SSDEEP

      1536:u4/kw1p3sCVV7ydaqI98Yi6MNSBr9HIUSJM4e0z2UiuB9Y+B3hgjytsSMhaN3qv:UaqI9d9MQBr9oUWM4H11hbyxaN3qv

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral7behavioral8

    • Target

      Asap-Italic.ttf

    • Size

      87KB

    • MD5

      7cf7e1c60352f86fe1e0c80ccafa5bdf

    • SHA1

      d3f2a9d27fe2ea0186560a0819d6de89435b7ab3

    • SHA256

      81364d50b65e2c5cdceab8c2580bdff31658a97995bd2ad4d67a8c461a34fa17

    • SHA512

      5407fe97dc955e68b1549e63aa5a751fa953fae23ec19483803bf28e1896ab51d754f42296bfe1b0bb195a256bfcb53218436defe42025b9bc9a675a8c424655

    • SSDEEP

      1536:JhUAdduyM1ifb/32Tuh1J68d+t0IEekdDsTQ2k00irLtMZ3dVIY+B3hg5ht5n:JYTuLJUEekdDsTQ2k00irLada1h+tJ

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral10behavioral9

    • Target

      Asap-Light.ttf

    • Size

      81KB

    • MD5

      e6f56f7ad34b81e7edf076c7874ee9b3

    • SHA1

      defb82f3c3e13da04b3348b044df5d0196b84b0e

    • SHA256

      acf0df9f5869b9c36a90a9fb29050135addac6b8f6c39cbf557353348174fb0e

    • SHA512

      24215f8d6f8c304741e8946b6352205ab3f5841642881c7443ca0dd3ce2e2e3124e3ae7108beee409c60ba5604d520ae69480897d53261069da154a6cb47f72e

    • SSDEEP

      1536:nbs13fHs6NDg9tkRABrh1beRzM0oU8NfRcnhfkseA+B3hOVJr:aK1h9n0oU8NZAkP1hI

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral11behavioral12

    • Target

      Asap-Medium.ttf

    • Size

      81KB

    • MD5

      dd632bf0da27c8ee47fbcb070a44895a

    • SHA1

      1687fbda8ea6ec7b37b0866b5cc50ac0003e00f2

    • SHA256

      9d91a37f77e6c746204c0ddb6885b3ad52dcdcd8acbb4ab587d5b6178ae88823

    • SHA512

      1632a94c57f94474d6c69552d11c4742eed78da366ee3abaf265b7a4b5821d9619b6a65d453ac0562136049d7933b4b3872d30f7cda2e5e51f0e8a26273d82b5

    • SSDEEP

      1536:XwG01VSjkx6ymomdxwR8XqlMqx2OW5DCQTcvNooBykAKX1FaA+B3hOPVxWX:Dx1bWQTUT9a1hWxWX

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral13behavioral14

    • Target

      Asap-MediumItalic.ttf

    • Size

      88KB

    • MD5

      5e7aaa344ddf8684dd2f4cb144ac5cd5

    • SHA1

      996d067387317fe462ca2c7b5c892b2b4fa1f0ad

    • SHA256

      d92eb524b54ff77b55b641f2b47d6fabb4662075ec4abc6b6e1efebeb79c0397

    • SHA512

      259c446d4738046d245c65d3d1c67b27d16b6199a16a1fec651227e410efc8480ca7ea60ea8ed17bfd87c945ba5e706b068557a98fca0eb2d7ceaf197dc2c476

    • SSDEEP

      1536:7EwmDsFBNpwyKbvNnxE042i4Tg0D0kiudUXeQIby2uLjDEqUPY+B3hgIcBCO8yJa:+nxEsVUO8E1h2CO8yE

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral15behavioral16

    • Target

      Asap-Regular.ttf

    • Size

      81KB

    • MD5

      c3baa296b36a4b2d634bc5cabe020875

    • SHA1

      98cd15612950e33851f85d8efeea0c741edfa38d

    • SHA256

      f2da89bcafda194e036754e1bb9655a6dd28eb3b8b44a4a344150ebdbc566755

    • SHA512

      d19b6f8577afef577c60c911c3c8287e0a4d676a29a66e0769620ae479cd80e3ce47de7d999ab99332e39525a4bf96edc53254e85a70a6a4029e974d6f068e0a

    • SSDEEP

      1536:Qf5eZ4vnP35qnL/xROIfs3DAGFZ1rR2jWbRjzZ2A+B3hO9793deW:fRO5DAGFZ1l3bu1hY93d/

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral17behavioral18

    • Target

      Asap-SemiBoldItalic.ttf

    • Size

      88KB

    • MD5

      16da77991125e60be4d6ced6be2ebdf1

    • SHA1

      a1e22092b899e91a34d7fb23b446d2963d609845

    • SHA256

      cb808d7510bda0f6d89985c92d71420da290fd8082d3377d55694b0088c6b2e0

    • SHA512

      217e41b01f5f9f67108832733b6402b0cfe7736fdac22c44ade802f29ea5ad97905bf19a57b514e6c492eff80c7f9c84a349340798d0c2c33cc06e586aa6fdcf

    • SSDEEP

      1536:7e1uw32NavFu7GeAOMQLl2wE9lZbq/WxBCnfdS7rAfFQJutpY+B3hghsSQs:7eXO3x2fhCnw7tY1hnSQs

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral19behavioral20

    • Target

      Entypo.ttf

    • Size

      64KB

    • MD5

      31b5ffea3daddc69dd01a1f3d6cf63c5

    • SHA1

      12b5670eb178138f77285d5f2c246d3cc5fa67d6

    • SHA256

      16f92298587bab2b469bc13c0dfc6d5d171bca10bad0c9053ad16bc023bf717d

    • SHA512

      623da02ee5573210b6f30b1ef7d65dd9ea4cc712443884207479362edbb37584c0b437bbb1630c25ce194b014cd76b8aa05e737d64a0a84fc41ca4a3ab07564f

    • SSDEEP

      1536:eexaJwd3nwRNmJeBc3lDHbmXtrdoJyLwoQflcrWyu:eeIfNg3mo+Cf+1u

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral21behavioral22

    • Target

      EvilIcons.ttf

    • Size

      13KB

    • MD5

      140c53a7643ea949007aa9a282153849

    • SHA1

      91d377ea3cf47490b256c2ed081704a7dabdae0c

    • SHA256

      a5caeb4d395c5e32f1d5a30acb382aebc664f1badfd149319907f2215e4e3e26

    • SHA512

      90081da193c95239fd2735b710bd019212b3ee545a0d82f756a5cc46e6a04e53b0781c302f9ed2ff3e49b8c72f8233a8ab41c748013f04fc384419d4bc3aa004

    • SSDEEP

      384:29l16YGdU7KcnIXYwmjfj71s6wv35j4eC:2J6YAU7KcnIIwmjfjhpwv3Vw

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral23behavioral24

    • Target

      Feather.ttf

    • Size

      54KB

    • MD5

      a76d309774d33d9856f650bed4292a23

    • SHA1

      e6604258b1ced5efd51360875d782fca65381d47

    • SHA256

      57599360fc9b80bce473b364f7f255b552019ec47462428018cb0e0f838462b4

    • SHA512

      c029b9b3433d958d23c4e26e3bbf6ad5146d960377b87dcc7d89650b2b83a0766e6cb6bf07e20658b88afdf65bc502810b57cd7235c01079eadc5197a1a64933

    • SSDEEP

      1536:bD4BCER+8aUwhcY6sb+xapd9h71oLlLNVUwGuVW0Q/nBY3P4Hwb4rsvAxvrVVRYS:bDUCc+8DwaNsi8pXh71oLlLNVUNocW4f

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral25behavioral26

    • Target

      FontAwesome.ttf

    • Size

      161KB

    • MD5

      b06871f281fee6b241d60582ae9369b9

    • SHA1

      13b1eab65a983c7a73bc7997c479d66943f7c6cb

    • SHA256

      aa58f33f239a0fb02f5c7a6c45c043d7a9ac9a093335806694ecd6d4edc0d6a8

    • SHA512

      9ffb91e68c975172848b4bba25284678cc2c6eb4fb2d42000aa871c36656c4cebc28bf83c94df9afdfbf2407c01fe6b554c660b9b5c11af27c35acadfe6136ac

    • SSDEEP

      3072:3bhEnD+IzsU9z9QJ6/P3Xe2iEiEPGFCMW1JVJG6wVTDsk6BmG6S1yKshojskO+b2:3enD+IzsU9z9QJ6/PO2FiEP2C/DVJG6I

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral27behavioral28

    • Target

      FontAwesome5_Brands.ttf

    • Size

      130KB

    • MD5

      3b89dd103490708d19a95adcae52210e

    • SHA1

      3fa2d67cef22da5c3f3eb5730c6afbd6fecf0372

    • SHA256

      06f4d00923ea24697df5df0b92984175991d8bd25776a02d531bb401e393ec42

    • SHA512

      91d1f49e76f7e560525b71255d632a8b615f03bf5b7a568a07f5ce13bbffd30956e6f43ecc8073343d43ca05f702ccfc951fe89493bb0e51e5cf98572271857c

    • SSDEEP

      3072:MhPzoVcBscZS23Dukm6YSaj57FCvhf4UkWvLc:MhroVZifDfYN9kvhvvzc

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral29behavioral30

    • Target

      FontAwesome5_Regular.ttf

    • Size

      32KB

    • MD5

      1f77739ca9ff2188b539c36f30ffa2be

    • SHA1

      7d849a3981a716e2ba4a84634bc57d0b8054a6a3

    • SHA256

      c651b8a67d3193206f622c3c3b0fbca4a2f2727108c4212b52c1e2a2e84c9b31

    • SHA512

      b5f7c23d735838da837cbc92c47042a9bc196a81b021572f5fc9e6ee9607a1c0b07cba7ff64ef54672bd5d970d6f9c842d0ccf28b9997b95b4ecbb1f2f8aae7d

    • SSDEEP

      384:2aILh/4eF1sQQbC5LbC4TH/s+v4B3Q89h8g6WIHL8ScQUd:2dLZ49tep3/8Bn9vIHL8ScQUd

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral31behavioral32

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

15
T1012

System Information Discovery

30
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks