Overview

overview

7

Static

static

6

51dd446c60...39.apk

android-9-x86

7

51dd446c60...39.apk

android-10-x64

7

51dd446c60...39.apk

android-11-x64

7

AdServer.apk

android-9-x86

AdServer.apk

android-10-x64

AdServer.apk

android-11-x64

analytics_core.apk

android-9-x86

1

fendou_d.apk

android-9-x86

fendou_d.apk

android-10-x64

fendou_d.apk

android-11-x64

gdtadv2.apk

android-9-x86

gdtadv2.apk

android-10-x64

gdtadv2.apk

android-11-x64

nearme.apk

android-9-x86

1

oppo_game_...12.apk

android-9-x86

oppo_game_...12.apk

android-10-x64

oppo_game_...12.apk

android-11-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    51dd446c60e04cb5ed4d5ff33e7473f137889cf2834e95f2370f6b78c5006139

  • Size

    17.2MB

  • Sample

    231223-vj7mcscfa5

  • MD5

    2921de9afcb5224614e35eefbc948158

  • SHA1

    66ccffdf82c88b38d01cbfa1e0b09ad878e97888

  • SHA256

    51dd446c60e04cb5ed4d5ff33e7473f137889cf2834e95f2370f6b78c5006139

  • SHA512

    5bbb1fc0104b9987d5789bb58bb591d0de3280b7a56e6b857e6ba7cd323c45ed9ed78a99ee2c63a980dd7fcbfea1723ef4306f9b7d677935a21fb256a9ad9a0b

  • SSDEEP

    393216:EZ3ReQ/xvDgvRGE0UbYJxMeBO6430qZ89GZknudWgd:EzeADeOb2kW89Fu4U

Score
7/10
androidevasion

Malware Config

Targets

    • Target

      51dd446c60e04cb5ed4d5ff33e7473f137889cf2834e95f2370f6b78c5006139

    • Size

      17.2MB

    • MD5

      2921de9afcb5224614e35eefbc948158

    • SHA1

      66ccffdf82c88b38d01cbfa1e0b09ad878e97888

    • SHA256

      51dd446c60e04cb5ed4d5ff33e7473f137889cf2834e95f2370f6b78c5006139

    • SHA512

      5bbb1fc0104b9987d5789bb58bb591d0de3280b7a56e6b857e6ba7cd323c45ed9ed78a99ee2c63a980dd7fcbfea1723ef4306f9b7d677935a21fb256a9ad9a0b

    • SSDEEP

      393216:EZ3ReQ/xvDgvRGE0UbYJxMeBO6430qZ89GZknudWgd:EzeADeOb2kW89Fu4U

    Score
    7/10
    evasion

    • Checks Android system properties for emulator presence.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Reads information about phone network operator.

    • Checks the presence of a debugger

      evasion
    behavioral1behavioral2behavioral3

    • Target

      AdServer.apk

    • Size

      186KB

    • MD5

      b1b274ad5d78902aaacc102a3645ee90

    • SHA1

      b28d5cfa7972b5627488773ce79b0f1fd57aa3b0

    • SHA256

      8786508218ed4c5f0411e0468486b8876e97b470fc8eb9078e9fe66ecc968f0d

    • SHA512

      1e259f21dd256ae3172b1d61b22b8dbef4f866ff9ed7ce9c54accc9fb65170a522e75f5f45e74b43b9c1b70acda456e13978b074dd8230c3c5f9ba3ad9098d4c

    • SSDEEP

      3072:dYIKxlMXLyZOdyA/XV50Em6ypt2eDMA8tu8ilQWmxEC2tP925620:dYIm4LyQkKl5xm6ypt2IF8tnJaC2tP9N

    Score
    1/10
    behavioral4behavioral5behavioral6

    • Target

      analytics_core.apk

    • Size

      159KB

    • MD5

      d2e90bb505f20fc73baf25805b0273aa

    • SHA1

      240fbbfda194a65761baed6f3546bc4c744a1850

    • SHA256

      77060ad812f5e6e9e896c39bc548f8295238eaa9941e1986e8e024e7d2114309

    • SHA512

      c2ef3f79b6cfb171b0904ff8138238cbf985344d91d6d9ec35472d14233d1b108cc0234259e8286cbb099747cc8d9d2f74c8c7394ab3a6dcfc2cc95e168c8c85

    • SSDEEP

      3072:/vnDHScqJUCqi8p27PhJkqOjvxSWnNoPuKAaSWk8V4rpCPd7H7sl3eX0emR7KDD:7ScaCioePDaZdnNdFDJCPJoKvmtiD

    Score
    1/10
    behavioral7

    • Target

      fendou_d

    • Size

      413KB

    • MD5

      e65bc745749787bb5fc3dee14154b5fb

    • SHA1

      c6c3b7cc648ae5208f09a053bf024aa1c7034c65

    • SHA256

      5053bc34a32650e43e39ef773c14ac48524c647319a6926c0b34cc259650ac86

    • SHA512

      9598a8c80bdb8d8d09833554786fec9ba8f1c6cbe7dd59f8c22dd29943e1c2418584e3ed476bbb0bc115ae85d2df95ac4b38cc06482be1c985f4cea9a6107d17

    • SSDEEP

      12288:1C21GqmJ3NsG14usHEqwDLNpk2Go6Z5jH:w39/1ikNLg2Z6/H

    Score
    1/10
    behavioral10behavioral8behavioral9

    • Target

      gdtadv2.jar

    • Size

      88KB

    • MD5

      0586f3074966b353fe050ec4055ca09c

    • SHA1

      645839dc107ba400711b8f4d8e4495dc29ac8ee0

    • SHA256

      e365ac88dc01033ccf02fe965d5e1eee9044c4ca1a3d9d96085be6a427a5274a

    • SHA512

      e76d878ec99c64cff35a11a5837237206bb02b1cc2d35ff2c0f03c72519bc19813138f54a6aca6c775b33de532a011dee7949ecddb7b57e4264380d70b81e4a5

    • SSDEEP

      1536:ZIyPme+AtVhpPhvh8Ba1e6Z5KgXJMfl24RnuFo398/FhluO4HyafAtQOz672r:9OefrzPhyh0KgXJ2l2nqt8/FhwfWQ1y

    Score
    1/10
    behavioral11behavioral12behavioral13

    • Target

      nearme.apk

    • Size

      2.4MB

    • MD5

      591fec398caec35234b1f253c0050c20

    • SHA1

      849b32bb2067bda1218197bf175f2d51abee1dac

    • SHA256

      3c4c9de19cd86b2455831fc00421816e41157561e34c2c95e8dd929e2f5bafcf

    • SHA512

      a11e3faa9e930ef66fca12a07270a0a547fd54b880970687bf275370a2f1327fff1f54ff622a274e62c8e4a43374968659d2a41d01099a4ae5aed3ccfce2322b

    • SSDEEP

      49152:URrhJMVufmshkvyjt/N+pim9i+qX6CEgMqFSg:UphJhf4vkt0gm9lC9Sg

    Score
    1/10
    behavioral14

    • Target

      oppo_game_service_212.so

    • Size

      985KB

    • MD5

      6879084e6b214f5f7bc972684e1a4167

    • SHA1

      0507db88e264647a808859b9937d391d0bd2d69d

    • SHA256

      1998cec1544789084f81323ad4695d15bd1876348c81b9a39885e12c4a84e907

    • SHA512

      656ec36e21c5c22a5e912feea7d9c09a11345d1ff81041cc5de6e6d1006ce4622924028fac651033dbdcb7c86a7507090515ad03434365c23445851a0d83a73e

    • SSDEEP

      24576:IEgMxszZqP1uNsumaRcf/KC4AfEoOyts8stmgUskwSw:FgPdSlaRcGNoh4tmgRGw

    Score
    1/10
    behavioral15behavioral16behavioral17

MITRE ATT&CK Matrix

Tasks