Overview
overview
8Static
static
6518df9a1b7...28.apk
android-9-x86
8518df9a1b7...28.apk
android-10-x64
8BannerPlugin-3.4.apk
android-9-x86
1BannerPlugin-3.4.apk
android-10-x64
1BannerPlugin-3.4.apk
android-11-x64
1CommonPlugin-5.0.apk
android-9-x86
1CommonPlugin-5.0.apk
android-10-x64
1CommonPlugin-5.0.apk
android-11-x64
1FeedPlugin-3.2.apk
android-9-x86
1FeedPlugin-3.2.apk
android-10-x64
1FeedPlugin-3.2.apk
android-11-x64
1FrameworkP....4.apk
android-9-x86
1FrameworkP....4.apk
android-10-x64
1FrameworkP....4.apk
android-11-x64
1InsertPlugin-3.2.apk
android-9-x86
1InsertPlugin-3.2.apk
android-10-x64
1InsertPlugin-3.2.apk
android-11-x64
1LoopImageP....9.apk
android-9-x86
1LoopImageP....9.apk
android-10-x64
1LoopImageP....9.apk
android-11-x64
1WelcomePlugin-3.6.apk
android-9-x86
1WelcomePlugin-3.6.apk
android-10-x64
1WelcomePlugin-3.6.apk
android-11-x64
1General
-
Target
518df9a1b7e0e1ab8b032e54535f7028
-
Size
19.6MB
-
Sample
240110-zda4esfhgj
-
MD5
518df9a1b7e0e1ab8b032e54535f7028
-
SHA1
ae2e998f8996ff2e6236b8a49b41d6cddae04cdd
-
SHA256
318c298cbea14593dbb4513c3a6624d250960204ea07e1f8547622f11f98f701
-
SHA512
05e64a796135af580d4a532d5d671ba3abb45dfd578870fadc175b39368bf8883c3045c5241a3dc94ba16cf89ca9b29f2eb28be2b4b94113b9fec3336d753d24
-
SSDEEP
393216:ikXdwTCygrzWl8o+N8dE25GkYEJ4nrfKxUt1DDtD:iqdN2lwGYEJ0b71DDF
Static task
static1
Behavioral task
behavioral1
Sample
518df9a1b7e0e1ab8b032e54535f7028.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral2
Sample
518df9a1b7e0e1ab8b032e54535f7028.apk
Resource
android-x64-20231215-en
Behavioral task
behavioral3
Sample
BannerPlugin-3.4.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral4
Sample
BannerPlugin-3.4.apk
Resource
android-x64-20231215-en
Behavioral task
behavioral5
Sample
BannerPlugin-3.4.apk
Resource
android-x64-arm64-20231215-en
Behavioral task
behavioral6
Sample
CommonPlugin-5.0.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral7
Sample
CommonPlugin-5.0.apk
Resource
android-x64-20231215-en
Behavioral task
behavioral8
Sample
CommonPlugin-5.0.apk
Resource
android-x64-arm64-20231215-en
Behavioral task
behavioral9
Sample
FeedPlugin-3.2.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral10
Sample
FeedPlugin-3.2.apk
Resource
android-x64-20231215-en
Behavioral task
behavioral11
Sample
FeedPlugin-3.2.apk
Resource
android-x64-arm64-20231215-en
Behavioral task
behavioral12
Sample
FrameworkPlugin-3.4.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral13
Sample
FrameworkPlugin-3.4.apk
Resource
android-x64-20231215-en
Behavioral task
behavioral14
Sample
FrameworkPlugin-3.4.apk
Resource
android-x64-arm64-20231215-en
Behavioral task
behavioral15
Sample
InsertPlugin-3.2.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral16
Sample
InsertPlugin-3.2.apk
Resource
android-x64-20231215-en
Behavioral task
behavioral17
Sample
InsertPlugin-3.2.apk
Resource
android-x64-arm64-20231215-en
Behavioral task
behavioral18
Sample
LoopImagePlugin-2.9.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral19
Sample
LoopImagePlugin-2.9.apk
Resource
android-x64-20231215-en
Behavioral task
behavioral20
Sample
LoopImagePlugin-2.9.apk
Resource
android-x64-arm64-20231215-en
Behavioral task
behavioral21
Sample
WelcomePlugin-3.6.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral22
Sample
WelcomePlugin-3.6.apk
Resource
android-x64-20231215-en
Behavioral task
behavioral23
Sample
WelcomePlugin-3.6.apk
Resource
android-x64-arm64-20231215-en
Malware Config
Targets
-
-
Target
518df9a1b7e0e1ab8b032e54535f7028
-
Size
19.6MB
-
MD5
518df9a1b7e0e1ab8b032e54535f7028
-
SHA1
ae2e998f8996ff2e6236b8a49b41d6cddae04cdd
-
SHA256
318c298cbea14593dbb4513c3a6624d250960204ea07e1f8547622f11f98f701
-
SHA512
05e64a796135af580d4a532d5d671ba3abb45dfd578870fadc175b39368bf8883c3045c5241a3dc94ba16cf89ca9b29f2eb28be2b4b94113b9fec3336d753d24
-
SSDEEP
393216:ikXdwTCygrzWl8o+N8dE25GkYEJ4nrfKxUt1DDtD:iqdN2lwGYEJ0b71DDF
Score8/10-
Requests cell location
Uses Android APIs to to get current cell location.
-
Loads dropped Dex/Jar
Runs executable file dropped to the device during analysis.
-
Queries the unique device ID (IMEI, MEID, IMSI)
-
Reads information about phone network operator.
-
-
-
Target
BannerPlugin-3.4.apk
-
Size
41KB
-
MD5
a84957adcd2955e0456e0e2afe53221e
-
SHA1
e6d87e272b5e1d30594e7b9454d6d2cec426255c
-
SHA256
e24fe822781a1d4975ef5b28ef73251d4fc762d431dc51f862a704bb481a199e
-
SHA512
eb6fb6d9856ded13140ee3f494b62e6492575db01515d75e4d4ddcdc918cf08b4cc591b982553364e41fa0c48dfa3d02eeb70511defe33a6b8be8ba1376221bf
-
SSDEEP
768:efCpEB2It03WP8n8fLls63R0usKfQPxqiCBmeilpLJZttUUQ:a+EB2NKlsAU6CqiCgNt/Q
Score1/10 -
-
-
Target
CommonPlugin-5.0.apk
-
Size
188KB
-
MD5
2678f36eeb56f29c97d566e605442334
-
SHA1
f245da3bf404a8fff22982692b181bdea1f6b233
-
SHA256
a6434fffaadbfb1d1825c49dbfd252b7c7fd80f71e8d982e28292f887234f12d
-
SHA512
ddee5d732934c51ee3ff18369779c77a6cc8bc0bd774a628366b7e3323b5a3ef48b4b471654a86a862d1e411fef6b09a0b3981d38ba591a10e58c87be28ca347
-
SSDEEP
3072:3gOBBnthob8jgXqEows4BjQKHOS04bNK20T18mkeLHHpe5WVvgsfB+VSbD:3LVLoeouws4qSOS0yNK28amkeLGWRpfJ
Score1/10 -
-
-
Target
FeedPlugin-3.2.apk
-
Size
41KB
-
MD5
914505329ab01356329576507b2ff4dc
-
SHA1
e198f6ef40cfa523276abf822269ccbd043a9176
-
SHA256
ff5ffdea3d8ef7d7ea379eeef7ccb7e457cb9bf4f31ab8d75b9b5151f9d28b41
-
SHA512
3dd38adf18c1cf9e53be8de205c56f1219dc9a14a61a0ef2181a2fff00d9043f9b0e9c0faf3838c89fb738ee7d021fbcadd700f1a49e9ec5d083b4ac3175cca2
-
SSDEEP
768:kOcmkwXsrpv1f5MjBTHAUf/fagXihO5vcbLzTzOFUURrY:dcVwQ5GuU3faYihONcbnOFJR8
Score1/10 -
-
-
Target
FrameworkPlugin-3.4.apk
-
Size
18KB
-
MD5
367dad014f883598f13b649225e4218f
-
SHA1
5b59279d2e243d0ea0d95bd3ff13a98207effa51
-
SHA256
4a99f0fdec8d646f96ee4ee70fa021a978e8b1068b123923e0c1bf2192c8ecef
-
SHA512
61bea143afdcaf10511779fbf3d5cc71c2ea4174c519fdf00069f4253663da084eff6b8c0faba151dd183f6a0fc90af98324b257f85f5fcbf58066f103ad9745
-
SSDEEP
384:EvBU3+URJOVgjTUTiYEuA+EbHVQVXjuU5SAwXfYr+MmLIQlo2jig1rGewe:Ev63RE9BEuA+ERQ9d8U+MmLRlo2jig1r
Score1/10 -
-
-
Target
InsertPlugin-3.2.apk
-
Size
44KB
-
MD5
02af7f8f9725098e82f34b9942c221e5
-
SHA1
a3e527192d44983e3cc864095e426dfb0126b288
-
SHA256
e0fa91039ccb94cd61eb73e8e7bd35c637b7ee893c57483f825b1fab6ba79383
-
SHA512
c546450e04a386eae41c9960c82e5e418added8908affe080dc8ca394c542d92281af530aaddafefe22ead8276f4c78806847acc9c53e244ffef4621e1f7c46f
-
SSDEEP
768:qSFc35GsyNMCIt03WP8a07dCznRiH1m2Qy87mrCfmU9AH:NF/sWMCNHdCDRQhb8SamUs
Score1/10 -
-
-
Target
LoopImagePlugin-2.9.apk
-
Size
41KB
-
MD5
645e758823f617ff6765f70ebd7a7bf3
-
SHA1
ec07c0dd32d9c61a0fd7af4e068434e916c71deb
-
SHA256
f7809d510e5a445b9304df08ab65adb8c3eabd61d0b75772e24c9be2cadc717a
-
SHA512
5e09ad7fe38cec470b05ebd47ccf906f8e7e46a7406ee699bb4f213602e613eaccc3afc08bbae0abaae0840a20a0749b7fbed2d41f4c8de23e22bc50fb8ac316
-
SSDEEP
768:2CRMem5qfurXFWLKxe7X+Fu9R9NSx4JYqFrxBRYfLL5LzIkBs00OIJzj:2CR/m5qfubgLKxe7wu24JY8lBR0/5vXm
Score1/10 -
-
-
Target
WelcomePlugin-3.6.apk
-
Size
32KB
-
MD5
584e3c9229e755408fc518033c24dc48
-
SHA1
d869c08f204fe45a9e3d5af191cd337ab026bf72
-
SHA256
f2b4103ed39e5b4fcd9b8fbbe1ebc80140ac6619722ec5a08f6e0e4289b6b2e2
-
SHA512
d4c41f0dfa41c3a0b43ae74826fa090ba4548f1cd6089a180b44e8f6c70b4d7760cccbbe6bb277e11083272b5dd18d1655c93642da786234e82049500b35266c
-
SSDEEP
768:9TCUNrXFWLKxe7X+Fu9oRMaxr6gjUD2CF2aBvSY4ixhlW1:9TCsbgLKxe7wuKRJrIZBTZhlW1
Score1/10 -