Overview

overview

8

Static

static

6

ROOT/APK/G...ak.apk

 

ROOT/APK/G...ak.apk

android-10-x64

ROOT/APK/G...ak.apk

android-11-x64

superuser.apk

 

superuser.apk

android-10-x64

8

superuser.apk

android-11-x64

8

ROOT/APK/S...er.apk

 

ROOT/APK/S...er.apk

android-10-x64

ROOT/APK/S...er.apk

android-11-x64

ROOT/APK/su

debian-9-armhf

ROOT/APK/�...��.apk

 

ROOT/APK/�...��.apk

android-10-x64

ROOT/APK/�...��.apk

android-11-x64

ROOT/AdbWinApi.dll

windows7-x64

3

ROOT/AdbWinApi.dll

windows10-2004-x64

3

ROOT/AdbWinUsbApi.dll

windows7-x64

1

ROOT/AdbWinUsbApi.dll

windows10-2004-x64

3

ROOT/Root.bat

windows7-x64

1

ROOT/Root.bat

windows10-2004-x64

1

ROOT/adb.exe

windows7-x64

1

ROOT/adb.exe

windows10-2004-x64

1

ROOT/zergRush

debian-9-armhf

删除文�...��.xls

windows7-x64

1

删除文�...��.xls

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    eae884e6cdadf62b212f792d54a6d89a

  • Size

    851KB

  • Sample

    231222-tnftrsggb5

  • MD5

    eae884e6cdadf62b212f792d54a6d89a

  • SHA1

    14b316dd67488aacd0890a05330bf469c4f83df1

  • SHA256

    f19af04d56368d43704812d08b6b7dcf73e62b9a993489444933f604c35f1790

  • SHA512

    10e6ab5e71875c54970e19bccb692e94f4bfc50d2d0ee00879301e3d73772ec08be45a1e8b81bfd4a06e46efae01c7609dbbb173f3ef9d59e6b5bd0f87cf1b5e

  • SSDEEP

    24576:y+LkatFmqyAU4tVVt4dzmABUAyHZSSXTCcXgH:y+gafEiVydSABkHZvTCcXgH

Score
8/10
androidbanker

Malware Config

Targets

    • Target

      ROOT/APK/GingerBreak.apk

    • Size

      295KB

    • MD5

      a124c285169bdaf536c14cc91b7d6c81

    • SHA1

      50cabb31690d6407219cc2e75d488fb905e9c686

    • SHA256

      62161683d71c190290ab6442bb586d21ea3bd88274097696a656eb4ed82608f2

    • SHA512

      ccc16e896bee0ac7300cd043d9078169673528ad4509dec94ca0375e6c5d4fbf81ce28c2149c26a0f51a8025fed8630d0eb508fda56e60c045bebea97bb871f8

    • SSDEEP

      6144:fin/R7ACcvFKUdFsXoIxrdQ502JUpNTOsxgBpcsVl:AAvdKmeokrdQ50jLXWZz

    Score
    1/10
    behavioral1behavioral2behavioral3

    • Target

      superuser.png

    • Size

      191KB

    • MD5

      4ec9e96986478cb000f9d58f374f39f5

    • SHA1

      7479e11f4df198c743bd430ef54f94999690c73b

    • SHA256

      df3c4cbe2b41398bf8e1e807f5ca1b8a6ca2ebe3f1686f95bc36ea83bbea694e

    • SHA512

      66014107235633919b12ec22437d95651b9f00ea6a0eee5e90ee957b6a4e12b05cecd6a217d4b92e206d8e38442a9e10a754c4275a50fcf19c984b41edaf32f9

    • SSDEEP

      3072:ysF8CMXMGIIFzrdQ5023X9phSTt6rUKaJ/O4OroXB2Nda6B5Hpb2/:dFsXoIxrdQ502JUpNTOsxgBpc/

    Score
    8/10
    banker

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

      banker
    behavioral4behavioral5behavioral6

    • Target

      ROOT/APK/Superuser.apk

    • Size

      739KB

    • MD5

      83902a8cd3a16b8d7ec021d217334240

    • SHA1

      075272be2a0382fdb577fa3d267d6b263f26be9e

    • SHA256

      623e4154f5921f72563b1a78790a10a38311535849c38cbb5d28646aa94a61f3

    • SHA512

      ae1b50483f2574f0d56d211ef311cb57352d407068302759e4debdccf5f8ccb426f450a48cbbcc370b37aa4931a18cabd88cabb32a8decba26ed53eb30758452

    • SSDEEP

      12288:s0FdQ050H294ENKWjP/fLDReA1mokfw28TZmkblL9YtV:zTKO/6iAkblL9Yz

    Score
    1/10
    behavioral7behavioral8behavioral9

    • Target

      ROOT/APK/su

    • Size

      21KB

    • MD5

      69b9e0a7bb69d59b286e48e17e90dc38

    • SHA1

      e8ed61a91eca85afa058abab9d1c6283915d3b74

    • SHA256

      10addec98f002575324420a4f0cc1511893c70d7f1b5dbe8f77fb1b9bdc72b1b

    • SHA512

      4660cbdc0a0b6b97bec9f122aafdb5840fb1811afb9e3c64ee7ee770c5f9bc1cedf9763be8a014325ddbee7f13eb9bde2bee902d1a44c9e593f63f4a6aced5e8

    • SSDEEP

      192:0IIHPrGsZNzPVoP5SB9t5M4uc4yNYJvDwKkfqp7rOqa8hXu6S:0dzLzPVq+9t5M4ucVGbYq7qqbhhS

    Score
    1/10
    behavioral10

    • Target

      ROOT/APK/系统程序卸载器V3.0汉化版.apk

    • Size

      40KB

    • MD5

      906b07dae433278484e5b98ebb556b9a

    • SHA1

      52c9789e63541ea2d419d70b8e13fce43154a334

    • SHA256

      60b357fe66f0abcf85797a110684d5ebd7a9e84bdc46dacfb6305eff75ae4b20

    • SHA512

      1b10cfd6d946239c7027f94d917982f4034b2a8ad84f7a99af5c1eb47cb8cd7c7314ab6f8cba86b3af086302af581b547351804d58a9f98792f155cda418adf2

    • SSDEEP

      768:F97bRMaUciEpGgYywcPlnFa2KM3ZzRE2k1vS3UP5vSKM3ZzNCsSqCfr:YcfYyDfj3ZzRE2rU9Sj3ZzNCFj

    Score
    1/10
    behavioral11behavioral12behavioral13

    • Target

      ROOT/AdbWinApi.dll

    • Size

      94KB

    • MD5

      47a6ee3f186b2c2f5057028906bac0c6

    • SHA1

      fde9c22a2cfcd5e566cec2e987d942b78a4eeae8

    • SHA256

      14a51482aa003db79a400f4b15c158397fe6d57ee6606b3d633fa431a7bfdf4b

    • SHA512

      6a2675de0c445c75f7d5664ebe8f0e2f69c3312c50156161e483927e40235140d5e28e340112ac552d6462366143890a8ce32dbf65bd37e27cb1ea290fe14584

    • SSDEEP

      1536:npCxybY0FS6MqS6WvgD9xj03TabrFvY5J6sCGt:npo0k6ZWVTaif6sCG

    Score
    3/10
    behavioral14behavioral15

    • Target

      ROOT/AdbWinUsbApi.dll

    • Size

      59KB

    • MD5

      5f23f2f936bdfac90bb0a4970ad365cf

    • SHA1

      12e14244b1a5d04a261759547c3d930547f52fa3

    • SHA256

      041c6859bb4fc78d3a903dd901298cd1ecfb75b6be0646b74954cd722280a407

    • SHA512

      49a7769d5e6cb2fda9249039d90465f7a4e612805bba48b7036456a3bbd230e4d13da72e4ade5155ddc08fe460735ec8d6df3bb11b72ff28e1149221e2fc3048

    • SSDEEP

      768:HLNk0yiFYWkgALpW+QvSugX0wUepQNXTQXdF+Q+An70edrqqOkIW:+yY8wugEwOVEXdz70e4gI

    Score
    3/10
    behavioral16behavioral17

    • Target

      ROOT/Root.bat

    • Size

      515B

    • MD5

      0778c2a5b9244385fa2b3e1e34ca31e1

    • SHA1

      4ddc458b354d5a33354bc38c9159bacfa417a79d

    • SHA256

      44d3ffa0e995fc8a622be37a5a87d38208eb8128b155fcc636303fc0562da2eb

    • SHA512

      4fc3c8d2522030724eda4a901aeb48d5f5aa9c1853def0923bca60f90aa59c93949896ebcb047c1697a5bb638906e8d193896a8c4fb329e043c6d1e930412118

    Score
    1/10
    behavioral18behavioral19

    • Target

      ROOT/adb.exe

    • Size

      401KB

    • MD5

      0717be6b32a22d03fe020d6632a72254

    • SHA1

      88455686faee52779e30d8ef17717075bc50e7ae

    • SHA256

      e2891042c110b2057d77af9383ae379d205abbd92ef5481b1a87047ee95f3bf5

    • SHA512

      16a6cda40b339aa2e696f4c20266be123e6c071475409cc5ae3bf5d8724bc818fb77d2b98a7945d63fdd9750de681f4c36a31d2d3e37991e48160a298613a91b

    • SSDEEP

      12288:15aUajz9j0rThRjGesX9a1oAKmTqU/phLdsGsrU:6bIThf4sL

    Score
    1/10
    behavioral20behavioral21

    • Target

      ROOT/zergRush

    • Size

      22KB

    • MD5

      3cf8a3fbceb667121d91f4ef1a66684c

    • SHA1

      d7f78393c81ce39b7b94a403ffac0f5c7bb39783

    • SHA256

      7665548a34de7b6089863fb9b6821af4a6e759ef5df3d074e50b9737d5971257

    • SHA512

      281e8f440424ee9831d6d19b9157f0af9fdd3f638fb86abb0a0349b1951d041a641e52f29a3be327ef8cba5ecaa24af7334129af92b29dde6c70b7042be7b87b

    • SSDEEP

      192:klpfAbk3CTsSWygfiCTtooD2Vsra3+TFK1NasjRc4p/IM7xXFqC6wKz5nin/O4rL:kNSTlNSD2VsW3tdc9I1F7KpM

    Score
    1/10
    behavioral22

    • Target

      删除文件对照表.xls

    • Size

      27KB

    • MD5

      dfc9c5b36cddf8d531ad46b52e06b483

    • SHA1

      c9bcdff2650942b874f63a7ddbfd9057aebf27cf

    • SHA256

      5fc36b5a013de34af3ec9a87769cb512c43f0b563b00b96c18c3bfde432ee04d

    • SHA512

      292e779986b18b0e75e58c0c861702cda9f8c416d6988aac7bf3b186d11fc8d277be49c0d6255a00d165b81328a2039ef2a1e4cac54f3e8ff76a87b9023f0b7b

    • SSDEEP

      384:hmmmmnR2+iEK2zBXfjg875jxSuxE/S8pK3YFm6w0hCvQ9eLsZ6nI1WD2RQRyfAtG:hmmmmnR2+iN2zBU0clmDVlqRoD4hDf

    Score
    1/10
    behavioral23behavioral24

MITRE ATT&CK Enterprise v15

Tasks