Overview

overview

10

Static

static

10

vbug-maste...DE.apk

android-9-x86

vbug-maste...DE.apk

android-10-x64

vbug-maste...DE.apk

android-11-x64

vbug-maste...DS.apk

android-9-x86

elite.apk

android-9-x86

7

elite.apk

android-10-x64

1

elite.apk

android-11-x64

7

fbcr.apk

android-9-x86

mobelejen.apk

android-9-x86

7

mobelejen.apk

android-10-x64

1

mobelejen.apk

android-11-x64

7

vi4a.apk

android-9-x86

1

vi4a.apk

android-10-x64

1

vi4a.apk

android-11-x64

1

vbug-master/vbug.py

ubuntu-18.04-amd64

1

vbug-master/vbug.py

debian-9-armhf

1

vbug-master/vbug.py

debian-9-mips

1

vbug-master/vbug.py

debian-9-mipsel

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    vbug-master.zip

  • Size

    7.0MB

  • Sample

    240307-xm2avsbc47

  • MD5

    d52796122c1bb06a92d36e3fd18ea9ad

  • SHA1

    c49f161e6cdc601119c550c037384f0d02b8d3b5

  • SHA256

    cf4ace71e2fb09825dca8f3a1e0180708cd62050561d733027cc1d6b46d184a4

  • SHA512

    4b37348d7acd1f2c29298b791c7aff3d680774376c9cffa1bd5630d8dae0aa7d82270669def0d1a366fb9433d8cf75ed704d2de9e9ccff3b0e7a4b1a1c780c3a

  • SSDEEP

    196608:CnxsdQzjS0NHbwDezbdTyFpprAQQsmqqD2:CnxQ0jScHbwyzxTyFpprA7smjD2

Score
10/10
wipelockandroidlinuxprivilege_escalation

Malware Config

Targets

    • Target

      vbug-master/vbug-AIDE.apk

    • Size

      2.2MB

    • MD5

      90c72d2c718ef0e16579befb4aa2b193

    • SHA1

      befc0a75d30d2d3d20e9fb3643ac64ae587234da

    • SHA256

      08d9dda676460b38cb84c66887d30e0da4e5b37803fb5bca136a0d5534fdc6c1

    • SHA512

      20bd4bbaade22969c74f98a408fce4cc89d51b3ee59d4487a5f771d687f956a12e59a9ae15747bac29642d6995b1eed04a70b1c2989bf449a9de045be4d32062

    • SSDEEP

      49152:57a8WgPMpjqIWWZoQwwLggP5glEvSyUQfUF53MdiAjRDN:wdgPYqk6zwLgug69U1TcdX

    Score
    1/10
    behavioral1behavioral2behavioral3

    • Target

      vbug-master/vbug-DS.apk

    • Size

      5.2MB

    • MD5

      8c597c47f9354b830654a2fe4cd5edbc

    • SHA1

      0e0f1c450699f481930ee97bf81050870d349239

    • SHA256

      dbef5b862ea27ad9756884441b6e5111f0ba192ec2a3462d3b99b563ab23e4b6

    • SHA512

      003e5e817052bf7c077b1041f0a807a1b4cfa950ea0746df5d1974d0bef924d91891e1a596a143b740e704a4155272255812355e9096602b4c10fc9966951c63

    • SSDEEP

      98304:D/CrCsTW93jM9qa5onP0ZNr0RcEKMcxZIUvEbz68y3UCJJJnv6FRCA:D/XD7a5onINPlNIUMWECzPA

    Score
    1/10
    behavioral4

    • Target

      elite.vbk

    • Size

      533KB

    • MD5

      9f01767647e2e72f446d374bbcb20c53

    • SHA1

      f6b1adcd7723b525418a05bcede5c671366d7ab3

    • SHA256

      fcee982b3d0e1601b40078d98df03503668aec7542721f921ae8248bc3cec3a1

    • SHA512

      4b9dc2dc08f015ed96a3ce30978994314d3edca84348eb62e7cb65d4d5477f179c44c80cc0a67863bc119555d0217f57681d047ce98ec405bd5eeaf2da8280ed

    • SSDEEP

      12288:kjRH6+O//n3tKpSsM+1HA+x283ecVS3EVqPlR6i0Ci3jM34D9Z:kN6+ONjstg38OOS3EW6i0C+M3SZ

    Score
    7/10
    privilege_escalation
    behavioral5behavioral6behavioral7

    • Target

      fbcr.vbk

    • Size

      178KB

    • MD5

      a2677281bd03c2e4a56c42666b10b7af

    • SHA1

      1c30fd6f9f8fd90c5aeff04673a6e3ee27db845d

    • SHA256

      a56cd9ce9097ba8f440141be8f1147d860567511c63e78737af1dc6f0d0ef80c

    • SHA512

      bf60314e004a7bb4c97f104aa9a975347e838b095d03c9d6cd142910c153772dd8ff9c58743aec1733f0c6d09ffa0a3bfd90ddf34c4d6579ad45fbb9aa68558f

    • SSDEEP

      3072:IJ/VLFfnKj+GSS4oup+aRJHAyAWJsqghIKprvEXcscGg5O8Ml29gLZ9Taqf0+hRT:u/zKyfoup/JHRJscor8Xcf1y2CL7TaqL

    Score
    1/10
    behavioral8

    • Target

      mobelejen.vbk

    • Size

      549KB

    • MD5

      45be5a7857a4fa1c5eadd519e9402e8a

    • SHA1

      36feb0809c1853f9a1f6d587302691abd7ce90e9

    • SHA256

      7d59e24f4bdf28a846d21e2608796f7e91389c4778bec75369d7b05e3f8449a5

    • SHA512

      46c869051e0c97b68f4388b87caecd82bf7362110a34ebb28ddc5fcd6c8a0e339eeaafbfce54d22593e245457fae7ec4c36b49a8556d3327ba7f90a40dd96a73

    • SSDEEP

      12288:9cVS3EVqPlR6i0Ci3jM34D9zSxjRH6+O//n3tKpSsM+1HA+3De7:9OS3EW6i0C+M3SziN6+ONjstgYDe7

    Score
    7/10
    privilege_escalation
    behavioral10behavioral11behavioral9

    • Target

      vi4a.vbk

    • Size

      37KB

    • MD5

      5f616a8fb9ce44ed75834487405be446

    • SHA1

      8ae9c48e6a8a21b4c8068e0b8855240978637fdf

    • SHA256

      b0ff5690c31f160808a869a14fa55f9e38c82de81cf98b895badc88c997ee45c

    • SHA512

      0ad658d53c455f7e68c3a4722f475bba65c22f17fd2c330a1ed34bff384462ceae9096c2d2e9cb4ad35168c551d579ca6b7335728432e94661dc8f65cdd14c58

    • SSDEEP

      768:DZ1Z9LApP6PUxxV9L2WSkwvCjSsPVxa8D74gV8:DZPBAB6mIWSjSSszj4D

    Score
    1/10
    behavioral12behavioral13behavioral14

    • Target

      vbug-master/vbug.py

    • Size

      16KB

    • MD5

      ac455f3c3694243b454193b26b6953f1

    • SHA1

      33dd5b3fccf40dc90620dc78f4638356fec8239a

    • SHA256

      b8dd843ed1352b2cf083a74062e78b967ff5ce30e3d1644f7c457ec3a48438c0

    • SHA512

      574dd63f706d648cb98209b5c07d0bc012cc54da1cd0e7630bd39b46d0cee9122ed3899a4802caf18f7655fd9a340820e98a625120b47f4793cb2cdd521bb813

    • SSDEEP

      192:aOrDrsgTP323R8WY/imQuAnQT0m73FIcBIssE8r/7vV/No8PpMhFTdNHP87rCx+d:NrDrsUfoRgdAnilRg/7tKueFjPW

    Score
    1/10
    behavioral15behavioral16behavioral17behavioral18

MITRE ATT&CK Mobile v15

Tasks