General

  • Target

    647971aecd032b4882cf427953d41942

  • Size

    2.3MB

  • Sample

    231226-lnhz5ahhdl

  • MD5

    647971aecd032b4882cf427953d41942

  • SHA1

    c6a9fce249d490d3c202da365d3e75940239c70f

  • SHA256

    dfc5310b87582d9787744cf98160aeddc72694f4bcbb10d47f122d8540cb516d

  • SHA512

    968396e7d8c536f29610401e5cef9c37529b3a4d7411e3571840a09f358b69dbc1ac7ce3fbada991d372d487e223e2eb069df15d8896272937441af86d30c3a7

  • SSDEEP

    49152:J+jUE+rLbGGwMaddKI8BmUm8v+J4RYo2y1DPwBiMq5BTXe:4oE+XBHajTymUmUy4RYMMBi95BTXe

Score
7/10

Malware Config

Targets

    • Target

      647971aecd032b4882cf427953d41942

    • Size

      2.3MB

    • MD5

      647971aecd032b4882cf427953d41942

    • SHA1

      c6a9fce249d490d3c202da365d3e75940239c70f

    • SHA256

      dfc5310b87582d9787744cf98160aeddc72694f4bcbb10d47f122d8540cb516d

    • SHA512

      968396e7d8c536f29610401e5cef9c37529b3a4d7411e3571840a09f358b69dbc1ac7ce3fbada991d372d487e223e2eb069df15d8896272937441af86d30c3a7

    • SSDEEP

      49152:J+jUE+rLbGGwMaddKI8BmUm8v+J4RYo2y1DPwBiMq5BTXe:4oE+XBHajTymUmUy4RYMMBi95BTXe

    Score
    7/10
    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Target

      kyx_data

    • Size

      1.6MB

    • MD5

      09603cc479305c17236b31819abc9961

    • SHA1

      cb8a7b5557282df2b465c4d932374976cb2df75b

    • SHA256

      6805ee357e3b46586cfb9426cdce67234448c15415b015c1d2b9df12a7d793ab

    • SHA512

      5e92f6bab7472a1bd7618606f31381ddd7c60a9db38cf773155b6b5a45f8388a19114b7af55ea4726020748a110a9d461cdc2e38b093f7c2f236bb3d4701be18

    • SSDEEP

      49152:p+jUE+rLbGGwMaddKI8BmUm8v+J4RYo2y1q:YoE+XBHajTymUmUy4RYMq

    Score
    1/10
    • Target

      AdServer.apk

    • Size

      192KB

    • MD5

      d83218c192511ec9e0ad63a2d12bd75f

    • SHA1

      7ad380e571822c8a0e485702421e0415579b876b

    • SHA256

      85ca7a2cec1b2185c489076d4b985b946950a231f9292beceb7424c7e41777d2

    • SHA512

      f1ef6b0d737955cba8afda2352d2d9ba99313ec754e59c434009d999a961f0cd7a3e512b5cd9507f9ed36b8420c841db945fc59af8b8d5ccb7329ee7b3fa62bb

    • SSDEEP

      3072:9CyKxnMXnyJMvKexJ0FDFNVE9P7BO2H+yQ8jELRxZt0qxVhc3BTtaCZVKd:9Cy84nyKS+sD+nH+yQ80RGqVc35ns

    Score
    1/10
    • Target

      __pasys_remote_offer_wall.jar

    • Size

      50KB

    • MD5

      e27762cf868af9d5be2ba39c51eaea97

    • SHA1

      43323b802aedb9e149e55aaf42607361daaeb147

    • SHA256

      dd283fbcc996e8500825d332de0ab056bdf68a0f06d0f58c143c538974e19a62

    • SHA512

      b0a902794a6502cd2f065d941c4f23c153a1e60d8e67f90bf722a45215f18611e01ae503e2b51ee61910933ab4b528266653e931268d498dd9caaabb95e4a32e

    • SSDEEP

      1536:gy/tvvR6zDeCVHvPzB0Q8wBNgrhaRZ9Sb:gy/hvR6nD1rB0Q5BNgdaRyb

    Score
    1/10
    • Target

      analytics_core.apk

    • Size

      159KB

    • MD5

      d2e90bb505f20fc73baf25805b0273aa

    • SHA1

      240fbbfda194a65761baed6f3546bc4c744a1850

    • SHA256

      77060ad812f5e6e9e896c39bc548f8295238eaa9941e1986e8e024e7d2114309

    • SHA512

      c2ef3f79b6cfb171b0904ff8138238cbf985344d91d6d9ec35472d14233d1b108cc0234259e8286cbb099747cc8d9d2f74c8c7394ab3a6dcfc2cc95e168c8c85

    • SSDEEP

      3072:/vnDHScqJUCqi8p27PhJkqOjvxSWnNoPuKAaSWk8V4rpCPd7H7sl3eX0emR7KDD:7ScaCioePDaZdnNdFDJCPJoKvmtiD

    Score
    1/10
    • Target

      gdtadv2.jar

    • Size

      96KB

    • MD5

      24babfe2a37fa22fcea5436dc286c682

    • SHA1

      3c19663d190b1cc1743f8210ee7d99a7955fa614

    • SHA256

      5011bc2225fd4c8d35be1d2c38794853ed91a508addc7c237635358264e3b4b9

    • SHA512

      b8710a16e6a06adf379e7895077d41d97826d3b3944ca0485df10cf0f97dd9c1c0fedbf892def5a13f137e9a6a3eec716ee45a0215b0a0a0ff55fd879de8e443

    • SSDEEP

      3072:E95Rwj2nLL2sKa5h/D1XRsVdzi3kYORyr:w5SqnH5hBWdEORyr

    Score
    1/10

MITRE ATT&CK Matrix

Tasks