Overview
overview
8Static
static
6badcb40f82...2d.apk
android-9-x86
8BannerPlugin-1.2.apk
android-9-x86
1BannerPlugin-1.2.apk
android-10-x64
1BannerPlugin-1.2.apk
android-11-x64
1CommonPlugin-2.7.apk
android-9-x86
1CommonPlugin-2.7.apk
android-10-x64
1CommonPlugin-2.7.apk
android-11-x64
1ContainerP....1.apk
android-9-x86
1ContainerP....1.apk
android-10-x64
1ContainerP....1.apk
android-11-x64
1FeedPlugin-1.2.apk
android-9-x86
1FeedPlugin-1.2.apk
android-10-x64
1FeedPlugin-1.2.apk
android-11-x64
1FrameworkP....8.apk
android-9-x86
1FrameworkP....8.apk
android-10-x64
1FrameworkP....8.apk
android-11-x64
1TAEPlugin-1.4.apk
android-9-x86
1TAEPlugin-1.4.apk
android-11-x64
1__pasys_re...ll.apk
android-9-x86
__pasys_re...ll.apk
android-10-x64
__pasys_re...ll.apk
android-11-x64
__xadsdk__...__.apk
android-9-x86
__xadsdk__...__.apk
android-10-x64
__xadsdk__...__.apk
android-11-x64
gdtadv2.apk
android-9-x86
gdtadv2.apk
android-10-x64
gdtadv2.apk
android-11-x64
qhad_dynamic1113.apk
android-9-x86
qhad_dynamic1113.apk
android-10-x64
qhad_dynamic1113.apk
android-11-x64
General
-
Target
badcb40f82a75cd376f4db300d411ba0c63b57365d579ffae0a3a054c3513a2d
-
Size
6.9MB
-
Sample
231224-cqek2sfgf8
-
MD5
2ad0a208692aa8a6455f6684b2a284be
-
SHA1
6a77d74e805bd105d8ef690c4acfb85929add745
-
SHA256
badcb40f82a75cd376f4db300d411ba0c63b57365d579ffae0a3a054c3513a2d
-
SHA512
9add7b0d2bbab8c83cfffb71dd36bdebf1b769f3b556f675974ce33acaeecdb092a8732ae7a8c88e1524a9528e6ad46059259db24f88a80533e1e417d32949d2
-
SSDEEP
196608:XcWql+PYp/mJjnuGkcjK2fjZUFLnkRduAwJqW1y74NUT1F:sVlm8sruGkcW27ZbduAuqW1hmF
Static task
static1
Behavioral task
behavioral1
Sample
badcb40f82a75cd376f4db300d411ba0c63b57365d579ffae0a3a054c3513a2d.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral2
Sample
BannerPlugin-1.2.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral3
Sample
BannerPlugin-1.2.apk
Resource
android-x64-20231215-en
Behavioral task
behavioral4
Sample
BannerPlugin-1.2.apk
Resource
android-x64-arm64-20231215-en
Behavioral task
behavioral5
Sample
CommonPlugin-2.7.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral6
Sample
CommonPlugin-2.7.apk
Resource
android-x64-20231215-en
Behavioral task
behavioral7
Sample
CommonPlugin-2.7.apk
Resource
android-x64-arm64-20231215-en
Behavioral task
behavioral8
Sample
ContainerPlugin-2.1.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral9
Sample
ContainerPlugin-2.1.apk
Resource
android-x64-20231215-en
Behavioral task
behavioral10
Sample
ContainerPlugin-2.1.apk
Resource
android-x64-arm64-20231215-en
Behavioral task
behavioral11
Sample
FeedPlugin-1.2.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral12
Sample
FeedPlugin-1.2.apk
Resource
android-x64-20231215-en
Behavioral task
behavioral13
Sample
FeedPlugin-1.2.apk
Resource
android-x64-arm64-20231215-en
Behavioral task
behavioral14
Sample
FrameworkPlugin-2.8.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral15
Sample
FrameworkPlugin-2.8.apk
Resource
android-x64-20231215-en
Behavioral task
behavioral16
Sample
FrameworkPlugin-2.8.apk
Resource
android-x64-arm64-20231215-en
Behavioral task
behavioral17
Sample
TAEPlugin-1.4.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral18
Sample
TAEPlugin-1.4.apk
Resource
android-x64-arm64-20231215-en
Behavioral task
behavioral19
Sample
__pasys_remote_offer_wall.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral20
Sample
__pasys_remote_offer_wall.apk
Resource
android-x64-20231215-en
Behavioral task
behavioral21
Sample
__pasys_remote_offer_wall.apk
Resource
android-x64-arm64-20231215-en
Behavioral task
behavioral22
Sample
__xadsdk__remote__final__.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral23
Sample
__xadsdk__remote__final__.apk
Resource
android-x64-20231215-en
Behavioral task
behavioral24
Sample
__xadsdk__remote__final__.apk
Resource
android-x64-arm64-20231215-en
Behavioral task
behavioral25
Sample
gdtadv2.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral26
Sample
gdtadv2.apk
Resource
android-x64-20231215-en
Behavioral task
behavioral27
Sample
gdtadv2.apk
Resource
android-x64-arm64-20231215-en
Behavioral task
behavioral28
Sample
qhad_dynamic1113.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral29
Sample
qhad_dynamic1113.apk
Resource
android-x64-20231215-en
Behavioral task
behavioral30
Sample
qhad_dynamic1113.apk
Resource
android-x64-arm64-20231215-en
Malware Config
Targets
-
-
Target
badcb40f82a75cd376f4db300d411ba0c63b57365d579ffae0a3a054c3513a2d
-
Size
6.9MB
-
MD5
2ad0a208692aa8a6455f6684b2a284be
-
SHA1
6a77d74e805bd105d8ef690c4acfb85929add745
-
SHA256
badcb40f82a75cd376f4db300d411ba0c63b57365d579ffae0a3a054c3513a2d
-
SHA512
9add7b0d2bbab8c83cfffb71dd36bdebf1b769f3b556f675974ce33acaeecdb092a8732ae7a8c88e1524a9528e6ad46059259db24f88a80533e1e417d32949d2
-
SSDEEP
196608:XcWql+PYp/mJjnuGkcjK2fjZUFLnkRduAwJqW1y74NUT1F:sVlm8sruGkcW27ZbduAuqW1hmF
Score8/10-
Requests cell location
Uses Android APIs to to get current cell location.
-
Loads dropped Dex/Jar
Runs executable file dropped to the device during analysis.
-
Reads information about phone network operator.
-
-
-
Target
BannerPlugin-1.2.apk
-
Size
21KB
-
MD5
0f4b2a94c789543ede1e78c6ce7c24bc
-
SHA1
8ce2a44709ad81623a75a40c6c954eb56bd6d1ea
-
SHA256
9f9d1adb03656b5443a5ada8acba31e48418cf352c00e00d9936578aac75d9f6
-
SHA512
b92e1186012f1a93f2a93b79678bc1baa1d69236507f5baf3ba2970f25eaf50c083d2379656a648d6e40c36b8a530fcf86a00c87d3bfa47ec9671ab906cbf4ec
-
SSDEEP
384:eU4fUIFpdXNxY38xPyUzwGaEj0dGNR3hoFwtFbQulzjjHYFQkPLw6ZmH:h4sIt03WP8h4tBtRQu5LGQkPLK
Score1/10 -
-
-
Target
CommonPlugin-2.7.apk
-
Size
477KB
-
MD5
90c3c35aece25e782ff0ee0132949e31
-
SHA1
9ad9723cae95a8af753e33132d277824c8d42a2f
-
SHA256
be33329d176ac4e619b9c011c1df7d8d2cfd1ad08dc3afaad99d4133484b6583
-
SHA512
e73276259a46a68ca54143a4de7c2c0605bbaca8451f67268b9217587da981d000cfcff3056b9820f0a9a704507c45a4deed16956054ccae7d5d2a8c3376294b
-
SSDEEP
12288:Ubzt/GODQMa4AEw7U5lMn/mjFKJJebYowzCfIY:OGM64AEw7cuZAJMlY
Score1/10 -
-
-
Target
ContainerPlugin-2.1.apk
-
Size
45KB
-
MD5
219416f3036e114129460121755acf7a
-
SHA1
778ddf06abc65c9aa5d0cd03e534db30d126ac68
-
SHA256
7ca9d3066a3ee566df50345920c9650110d010cfd46a630dad888f100cba9780
-
SHA512
002a57e76796764f0b23f90e26f33382da391ab68cbd6c9160fa2f785fd20162b38acf22bad2ee9779d219aafd21d5cfd3119b40062c9c30b65dcbdbfdffd1ba
-
SSDEEP
768:fnJHKYA8cDcNw9utC21Ftq05M2TbqvlCbL3DUsB4qj4EXMNvo9lVqylxwpG7aU:vJHp0DSw9uHX5MuECwbqjXQo9dwPU
Score1/10 -
-
-
Target
FeedPlugin-1.2.apk
-
Size
46KB
-
MD5
5804ca74fcb4f1c002d7189457f7ee15
-
SHA1
a12107d1cc9343e22ccd733e67ee9fe433a6fec7
-
SHA256
87ab6dec0dd46a0caefeda908ec99b5cb218db64c10e101fa53966136da86849
-
SHA512
5b180795edea6078570d0bfe1f78cfc5fa499bb8aa50489ef0405640b3740a2f60344116dfb15b831851622911f4392fd168b05c585bb75b9b775b15d74545ac
-
SSDEEP
768:aK3ev+1U0YgxaZfDzT3qgxIJTO9sqzbIkYJ6VQNj7xAYaZwc:aDZEapH3WxO9scYdNXxhaZR
Score1/10 -
-
-
Target
FrameworkPlugin-2.8.apk
-
Size
18KB
-
MD5
e999ce1501ddcac1ed5afb06df2e8856
-
SHA1
8e0ca018616d195248f3881a52e16dd0a1814a45
-
SHA256
eab93299ebe5d9159527a175dfc5c4b388b5329a136541da6896580101324893
-
SHA512
c78bedfbfe9c55d31007a912d079fc141027c2cd28ea5a7a724504c928617d2e7c345982c503b25856d0c636e58802e9b3b660bd0b881e12a8d944ffd7e0ae43
-
SSDEEP
384:TifeU/SRORFH+/L4saBPVlqolgXngWTSuJlyR1QF5D:q4w+/L5aMgWTP/yI5D
Score1/10 -
-
-
Target
TAEPlugin-1.4.apk
-
Size
829KB
-
MD5
e62579b2f0047e86e764454d139ee624
-
SHA1
58e90a7330ecf3cc0e6427b95b41683a6ac4ea80
-
SHA256
2b5ad9fd49022d2115d5b47c186a59aad45291fa8087c7a3683df31770f96369
-
SHA512
bb529bf22d89933beb86bafcec9e8b335651403b2816e15caa12cdd22a106ce50b628b67c8f4a4ad1271357f58299d478448c29eef2c76a61ff57ecf8d5dec18
-
SSDEEP
24576:ZLXerO3WnoseUqn53RNMZJLe3GvVjb0mDBmOX:Z6C3aoZt53RNWLe3GvVjb0mFmOX
Score1/10 -
-
-
Target
__pasys_remote_offer_wall.jar
-
Size
34KB
-
MD5
67faab61ea860c5a1d3d5e98f6da108f
-
SHA1
60b3d9d3bc7e9ea7cde728f5e42db11a856ae527
-
SHA256
54ba425788c7adf7c0bd042d76ddef399933d3b6b0798386bc0b61fd565e9a6b
-
SHA512
23475cf01bf75e0c1624a4f18f30ee4e994b9166c31141aec2fd5a5f99f86c20198ab64cf2c5a35280651a1145e447cd88e8d9fc8089975c58d0d7e68faacf84
-
SSDEEP
768:iK+8VSMJtBfVVJQkxNU/aD/fELwGC40/MNK2ytug:iKtHBfVVrxa/IHi30/sKFtN
Score1/10 -
-
-
Target
__xadsdk__remote__final__.jar
-
Size
77KB
-
MD5
bf2976b9ef3b018cf41051ef1f1f83b6
-
SHA1
ff4bb278a6f3a5e4d862f9da722292d509123b8f
-
SHA256
8fae52cbd54cf9619643b1dce93344184e07dcae1206590a6c5c7700ac5bfddb
-
SHA512
f44c2b0301fe4853f51cae29444e0e9a69731f09da57040135623bc8c8d98f8fdc517f4b97a4afce5cb58fae9aae0206582a7ff6b4e7c7adb78d0bbab5f3dc90
-
SSDEEP
1536:kjIjPr/2ioHUaBO/9ebdXWq2pZA4cD64wOF6MH8VzwtdhEJS/XmNyPd:QIjPr/MUaBO/edgM65LuIzwtdh4S/XmU
Score1/10 -
-
-
Target
gdtadv2.jar
-
Size
88KB
-
MD5
0586f3074966b353fe050ec4055ca09c
-
SHA1
645839dc107ba400711b8f4d8e4495dc29ac8ee0
-
SHA256
e365ac88dc01033ccf02fe965d5e1eee9044c4ca1a3d9d96085be6a427a5274a
-
SHA512
e76d878ec99c64cff35a11a5837237206bb02b1cc2d35ff2c0f03c72519bc19813138f54a6aca6c775b33de532a011dee7949ecddb7b57e4264380d70b81e4a5
-
SSDEEP
1536:ZIyPme+AtVhpPhvh8Ba1e6Z5KgXJMfl24RnuFo398/FhluO4HyafAtQOz672r:9OefrzPhyh0KgXJ2l2nqt8/FhwfWQ1y
Score1/10 -
-
-
Target
qhad_dynamic1113.jar
-
Size
107KB
-
MD5
3a06586ad5987b00b4a73759e61b126a
-
SHA1
36a769a65efb56582e39dbce9c506795e9594fe7
-
SHA256
2bfa01452d94c5cfecb0d2e9aa5488c59077d2f57736afa824a9a8c6bc75cbc9
-
SHA512
97cb126fbb49b63c220eb3088e4bfe04f16bcc3bac75d0c8e8ab6d0d1da94522b3962002ffd8fc73a46c4de4b54929d5129d892da67173aae24f57d23dfd1572
-
SSDEEP
3072:AeOnptLKufnZall64CrZbUXFn/Q+jJxLF:SKknxNV+9xLF
Score1/10 -