Resubmissions

27/10/2023, 06:53

231027-hn4p2sed62 10

27/10/2023, 06:52

231027-hnjpwacg3w 10

General

  • Target

    Cinepia Plus_1.1.apk

  • Size

    39.1MB

  • Sample

    231027-hn4p2sed62

  • MD5

    08ea1dd393a9f4b1c4d18ea98e0a8420

  • SHA1

    73d9429d4ecf941279ea686de90697c9df7a5405

  • SHA256

    9fcefb4f8f0dd192d003c25f6558f19de9ab002941f0dfb266db3347fec1e694

  • SHA512

    373ea8dd3e8194f41d918af8842d6b11fd80aebb9bddffc2c3b798bd031e651b4c168af42304d6d249c84e3f155e69a3e9e81f29e672b92e6bd44ab4a270b933

  • SSDEEP

    786432:4Yzvjizw1welzEgxWmZT1y1hK10rIKxBcFwck5mrbcIV6CemWL:4YzvuMEqW1x9cack5+bgaS

Score
10/10

Malware Config

Extracted

Family

axbanker

C2

https://cinepiaplus-default-rtdb.firebaseio.com

Targets

    • Target

      Cinepia Plus_1.1.apk

    • Size

      39.1MB

    • MD5

      08ea1dd393a9f4b1c4d18ea98e0a8420

    • SHA1

      73d9429d4ecf941279ea686de90697c9df7a5405

    • SHA256

      9fcefb4f8f0dd192d003c25f6558f19de9ab002941f0dfb266db3347fec1e694

    • SHA512

      373ea8dd3e8194f41d918af8842d6b11fd80aebb9bddffc2c3b798bd031e651b4c168af42304d6d249c84e3f155e69a3e9e81f29e672b92e6bd44ab4a270b933

    • SSDEEP

      786432:4Yzvjizw1welzEgxWmZT1y1hK10rIKxBcFwck5mrbcIV6CemWL:4YzvuMEqW1x9cack5+bgaS

    Score
    7/10
    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Target

      aps-mraid.js

    • Size

      10KB

    • MD5

      3fee870a8ea9b50a2763ea4247c4f753

    • SHA1

      d1d1c166dd8d09b2a5633fc453f4e9118c8153cb

    • SHA256

      f852ff40ac55cb1e1a55972307c253db4b7e99ad541c116bd356f5af7b9ae1ec

    • SHA512

      baa8ab9597f20431b5d78ea153a7118f3f9578330abd2857c52e29a8c28c648205963c42b4d46cc0a996dbc139fa1ea9713e9a309970e8be29d595d5aa742900

    • SSDEEP

      192:RiCYiIp5RsHMSP2io9SyKMnbCXnBtdyvgVHGlzjTSWiwviX:RJ6VsHVP2io2MnUjyvgVkzP3iv

    Score
    1/10
    • Target

      checkoutJSIntegration.js

    • Size

      1KB

    • MD5

      5ca30d7395c0df80db3058af4c5d194a

    • SHA1

      7480d23539eb6f242d2b8ca6284d56963ea9c597

    • SHA256

      6fcec87162e81480f5b352389270ddafae9c665dcb43ed6acd2ae59fe8d8d610

    • SHA512

      1e6963439d227e810da380af44df05c1f1291b0a64950f0fd08da83462f5f280e4429cd7bfdcfe5216b28b3e1065647f0ab7657e86102febf0be71824939224d

    Score
    1/10
    • Target

      dtb-m.js

    • Size

      33KB

    • MD5

      18ba4c6ce9e10c685f9926d297c3ffc8

    • SHA1

      7d3d1a6841e9b24aecce376966b6bef160e9b658

    • SHA256

      93d2248bd639fc007b4eb1f565e81d2ccbc7179ba43f50df7f5fbd368f0a17fe

    • SHA512

      ca2c1d69afc109fd4e661accede3aaf8bd7c311303e7107dc12470a7c3f97a62bc5ad9125ac806c6e56c89ecedd11fa502457462b07e3ed4a59995630f359004

    • SSDEEP

      768:cM85TLOVEVU3SGgmAms+SBED+tSklU+EV:c1JO6VU3ZymWBUH

    Score
    1/10
    • Target

      omsdk-v1.js

    • Size

      39KB

    • MD5

      7b5d234fac7559511a447554e1830154

    • SHA1

      eb7fe9da6145c8499201442794adef89d110620b

    • SHA256

      d7a8a6e3508e661b9a0f8d1ba2de04d669f299079fa862c7e2d4e747369d2a24

    • SHA512

      47296a52cb9e014b9ca307ca8f6f53e2371d73d30e90e201aaa63d84e8493d919d503eaa217e4898c9de1a9fa82aa5afac0116a0fd258d365b7f72599358db34

    • SSDEEP

      768:X6kymXjv8OPXwfBKn3ySNiTTUpdpnoPq1KMIQ2/9vt5ZBFus9cAZhmUsaezqhKQB:X6kPXzss3v3noPq1KMIQ2/9vt5ZBF59h

    Score
    1/10
    • Target

      tt_nd

    • Size

      5KB

    • MD5

      cfb58d5a778a4da98783db9388bacfc5

    • SHA1

      4e826b8e65f7a81ee0c30836f132632054f338e7

    • SHA256

      64f11eb5134f29bcff547988289baff229b05faf93adac63d3a3bfe97c7f810a

    • SHA512

      1cac2288c9d222dbd195e3b929aebb887e5ff8d13c46675bcc879c762d09311b97a1e331389df520165cb994f1717ee5debf1a97a7563c474130943d5cd4267c

    • SSDEEP

      96:PWuzrX8H2mrqoAuRJff9SgbhWFllXU+9z:PlrXWRJ9Sgbh0l5

    Score
    1/10

MITRE ATT&CK Matrix

Tasks