Overview

overview

8

Static

static

6

6e4e9d46d8...fc.apk

android-9-x86

8

6e4e9d46d8...fc.apk

android-10-x64

8

SohuFixHack.apk

android-9-x86

SohuFixHack.apk

android-10-x64

SohuFixHack.apk

android-11-x64

bdxadsdk.apk

android-9-x86

bdxadsdk.apk

android-10-x64

bdxadsdk.apk

android-11-x64

com.felink...5a.apk

android-9-x86

4

com.felink...5a.apk

android-10-x64

4

com.felink...5a.apk

android-11-x64

4

com.nd.hil...aa.apk

android-9-x86

1

com.nd.hil...aa.apk

android-10-x64

1

com.nd.hil...aa.apk

android-11-x64

1

gdtadv2.apk

android-9-x86

nd.apk

android-9-x86

nd.apk

android-10-x64

nd.apk

android-11-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    6e4e9d46d8dd702d36ccbffcc0893958d967a50249df23663ea8f0298ff52dfc

  • Size

    24.0MB

  • Sample

    231223-xh46ysfgc7

  • MD5

    7bb97436f2457ec4261a13e3d62d71d5

  • SHA1

    369b5bc44c03eed8f92d6759bcdd8512f4332cda

  • SHA256

    6e4e9d46d8dd702d36ccbffcc0893958d967a50249df23663ea8f0298ff52dfc

  • SHA512

    d0a13d3ef19e601271840ec39e411ee45a5497dcccf8916a3b2577bc67781a89cf0ff374939ccbe5ed317861da02a739c55d8996bc461052d214ebbb55220e6b

  • SSDEEP

    393216:4h3r43n6zwsbgntOJSg1OOLUSS+GTso/VcCcJHwLgaVO69ZmZplBXuw3:4x43nSwsPIgcMrGTvaWcaVO6kHB+C

Score
8/10
android

Malware Config

Targets

    • Target

      6e4e9d46d8dd702d36ccbffcc0893958d967a50249df23663ea8f0298ff52dfc

    • Size

      24.0MB

    • MD5

      7bb97436f2457ec4261a13e3d62d71d5

    • SHA1

      369b5bc44c03eed8f92d6759bcdd8512f4332cda

    • SHA256

      6e4e9d46d8dd702d36ccbffcc0893958d967a50249df23663ea8f0298ff52dfc

    • SHA512

      d0a13d3ef19e601271840ec39e411ee45a5497dcccf8916a3b2577bc67781a89cf0ff374939ccbe5ed317861da02a739c55d8996bc461052d214ebbb55220e6b

    • SSDEEP

      393216:4h3r43n6zwsbgntOJSg1OOLUSS+GTso/VcCcJHwLgaVO69ZmZplBXuw3:4x43nSwsPIgcMrGTvaWcaVO6kHB+C

    Score
    8/10

    • Requests cell location

      Uses Android APIs to to get current cell location.

    • Checks Android system properties for emulator presence.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Reads information about phone network operator.

    behavioral1behavioral2

    • Target

      SohuFixHack.jar

    • Size

      1KB

    • MD5

      95b556d27272769e1fed513dfb27f181

    • SHA1

      d9c4c138acdc7f9c41f51604b4e44c5a48bd68f8

    • SHA256

      ac7e3b8dfdfc35ddd03e44964abffff860115fc962fbb21e6c862d59d5bda837

    • SHA512

      ac1967d6b38c5e6285ef2edc52af8361f9ada50311ec4cbe1ff86a047c3ab1a91be7e179adbc9bade3b6dcc457a812996e083b85a1a0c9d705468c9ce47a9a2d

    Score
    1/10
    behavioral3behavioral4behavioral5

    • Target

      bdxadsdk.jar

    • Size

      195KB

    • MD5

      c3b999326b7187bdd85fd971f93376d6

    • SHA1

      978fa76710506b2aa2dc1502e2697355cc64e34e

    • SHA256

      555e565b45d2b030652d914830ad427d15182797886316024a2f04df6ac81d5e

    • SHA512

      240981a457a3df5ce7f51ae1e0b323efc37b349a261e21d52ef8e9256d758f5c7dd4bcd6411ca2dc247de1beec2ad1a0f7f49d2370971c8c65f95b0d6c14b31e

    • SSDEEP

      3072:bFg/OTNG1obNXB45vAEsreszccGiXzU+wtBJPkyzy4H/mqku/DjEWKVQNCDu:u/Ow+x69ftc9XzStBJ8y5mqkYDjv3Gu

    Score
    1/10
    behavioral6behavioral7behavioral8

    • Target

      com.felink.videopaper.plugin_V_21_M_0e0c944ddc587cb09fb66e410e8b805a.jar

    • Size

      2.5MB

    • MD5

      ba2d54fb30979277a97ddfb07ddf42b7

    • SHA1

      7c2c64640bc2248e1b1cf2ec298605d3779bd5b4

    • SHA256

      869dadb80779da6c92854db4a905267360893fd8720bd9815f2c69d1ed7050ef

    • SHA512

      03fd3445a4c3caff890a9958d440ee65107d9d2d96a6498909a3d77307a6d8f7a8a9bd16d6195d37ecf14b42ee66116c8dbc3ab824fd79586255e7f98856ac82

    • SSDEEP

      49152:2XhEqTmwwdsIskHcofXgwVu0rm6+dg57CHko954XRnjeyX:8hEymHSIsk9/bu0rm6+dg57EFyX

    Score
    4/10
    behavioral10behavioral11behavioral9

    • Target

      com.nd.hilauncherdev.plugin.navigation_V_81_M_f5098ecfe61e2286fadfe2a0d6f407aa.jar

    • Size

      2.1MB

    • MD5

      ebb85de141f60d424347a6465ddb0524

    • SHA1

      67aa83fbacff93137b1aa2866a273e131b7f234e

    • SHA256

      318750d1d26b3169f8f2135fd09483529cbe52b433113947adf7f68f73aa4c34

    • SHA512

      30d59ca3eb3f9e3fd8d0251e92937be4bf41ebdcf4cca724e41bdfb21616d332542f9d0699c97d617ba6510539f97e2403ef5215281de438a90057131d259cae

    • SSDEEP

      24576:/M9LEoMUl8BMYY4KdL9d/9/tjNewYpBRKdkICWLvARhDl4b/ClSsUT0kgLLKurSo:/M9LEkp1/fYpBsdkrRhib2I0rD+G

    Score
    1/10
    behavioral12behavioral13behavioral14

    • Target

      gdtadv2.jar

    • Size

      622KB

    • MD5

      925c89def267b4f087278431a2ea1ba2

    • SHA1

      f512786fbd277978de2ddbd3855db0aa730e4305

    • SHA256

      7dedfed3255e64dea6cbe43789a32583c9e3a9214d527c8125071be4ad7c1d1d

    • SHA512

      f2b414ad33fa2f176162ec0e4e9fd1fa53233cd40395e616c52a60e5fcfb820be0d464520cb8c568c7090a3fbed4be2eb1d9999b6fa487e3de5851d6aed65dc9

    • SSDEEP

      12288:WpStF524rz2xSbYm5iXuT/w+GMeoZNsAQvoMn+f+BY8CXGec:WAtbfrzZquT/e1aWAQAM8+

    Score
    1/10
    behavioral15

    • Target

      nd.jar

    • Size

      3KB

    • MD5

      330e5a7a65f3d6593b4e3693cb6b581a

    • SHA1

      97ed25af93827667740ddc0f5f20efaa0db79f2f

    • SHA256

      effd679a8cfef061b537814b41f2733a9785d80d1d11f8c61216a78b35c747ca

    • SHA512

      3b2234d683cfbfde304d23150678595076eff41c691269dfc0d1d035b784113879e84d19ec732b257ea2146b4170edda2d8ece79449c2a33d948d0ae4e777328

    Score
    1/10
    behavioral16behavioral17behavioral18

MITRE ATT&CK Matrix

Tasks