694cc049a095cf284e012236243b66484bf2d8ebddfae08eb784df74496ccf54

Sharing

Copy URL

Twitter E-mail

General

Target

be1b264cf1581f3f377d3751fe289b0d
Size

23.7MB
Sample

240310-j4tepaga48
MD5

be1b264cf1581f3f377d3751fe289b0d
SHA1

4c97d77fc513625d5ec7faf96b4fabaed9500273
SHA256

694cc049a095cf284e012236243b66484bf2d8ebddfae08eb784df74496ccf54
SHA512

091d61ff1e1dd7a74d095327cb967f4f05fcb94cd7e6e9057e04ffc11b773039409e4c359d837f9e2e2abd0c1ad0593c3f929caef8cc27177203d684003d3ad7
SSDEEP

393216:8vS3/LPqfM8c7uUKAuJeO7mqxlZRbPa5NdFnsXhK89bPzdirjcor:Wy/LCk8cdKAOiIla5rRsF9NKr

Score

7^/10

android evasion

Malware Config

Targets

- Target
  
  be1b264cf1581f3f377d3751fe289b0d
- Size
  
  23.7MB
- MD5
  
  be1b264cf1581f3f377d3751fe289b0d
- SHA1
  
  4c97d77fc513625d5ec7faf96b4fabaed9500273
- SHA256
  
  694cc049a095cf284e012236243b66484bf2d8ebddfae08eb784df74496ccf54
- SHA512
  
  091d61ff1e1dd7a74d095327cb967f4f05fcb94cd7e6e9057e04ffc11b773039409e4c359d837f9e2e2abd0c1ad0593c3f929caef8cc27177203d684003d3ad7
- SSDEEP
  
  393216:8vS3/LPqfM8c7uUKAuJeO7mqxlZRbPa5NdFnsXhK89bPzdirjcor:Wy/LCk8cdKAOiIla5rRsF9NKr
Score

7^/10

evasion
- Checks known Qemu files.
  Checks for known Qemu files that exist on Android virtual device images.
  evasion
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Requests dangerous framework permissions
- Checks the presence of a debugger
  evasion
behavioral1
- Target
  
  cn.sirius.adpsdk.loader.apk
- Size
  
  1.2MB
- MD5
  
  951785b924eb4056e1a6084821f0ce4b
- SHA1
  
  590f0dbd9f817e27a92085de71c2f11501bf2114
- SHA256
  
  fefee8597d5ce7c144ad3761f40d2cb5e3b27d6b542709cdf1c44d730f280d64
- SHA512
  
  ad1860bc583a8fafa2571b5425e249f094fa5d3812be5d7cb20f88722da782edb5eb4910d6321d5fefbc612228767dbc83a4f6dd69b02791426fd43595f7cf8b
- SSDEEP
  
  24576:Hdk9ifdU446UKxRLEIYm9gZ2nNS+nbWRtl7bM+q6D8Ik+Vh9GAq:HdyiOPW6ObOl7bMZIZv9vq
Score

1^/10
behavioral2 behavioral3 behavioral4
- Target
  
  cn.uc.gamesdk.loader.apk
- Size
  
  7.5MB
- MD5
  
  335fde5214c72552fcb9b6232344b7ea
- SHA1
  
  5a57cd1f0c1e339c4cf533008fb9311465bce69a
- SHA256
  
  642c37662f5561c9962332745d8ff0b921888783529f9424f6acf1d74a7c7354
- SHA512
  
  3cb804c9824570ead0ebc3ca8846faec4e4a472acae199ead9916fab40ece17fe9565de81a6c87ee812a387ad0354b5baa37d5b3f45f656d502b3bcb13f96385
- SSDEEP
  
  196608:W6QYSCfTClFnN0mTA5W8rs3BcWh0YlG73vVl7Gjv86pzClLA:W73CfN88raHhXlQGoX+
Score

1^/10
behavioral5 behavioral6 behavioral7
- Target
  
  libcn.uc.gamesdk.account.so
- Size
  
  782KB
- MD5
  
  26133bd4f01ca9918910efb628c5a2b2
- SHA1
  
  f25e0844fdb939a3df21619f676daa434727af67
- SHA256
  
  224e2b7063fe5129d841962dd485626456f16d14303cf48a4c56ab67883faba8
- SHA512
  
  1fd8aca97609de10e7bcaf0195eecf66aed0bdcf9d3dcc537e6948cf657b9e75ad40fe49da2c9a03dc4d3951f155b4b85e9e34b724d1b172229062dde5c0f602
- SSDEEP
  
  12288:bKOjLnFpIVKpwzW7SpyuIv9honZdjxmoibsltIpMX4ByTOO+IzEoL/Hoc:bK6nFpIQdFu2hujiADJ4QTuEn
Score

1^/10
behavioral10 behavioral8 behavioral9
- Target
  
  libcn.uc.gamesdk.asr.so
- Size
  
  2.4MB
- MD5
  
  310d4febf8a157c7a8530e9feab56915
- SHA1
  
  7ec189032b2bd73ca57d0a26862de55532bbe047
- SHA256
  
  dc18594153264d4662080c5afa46fadf6552c2f23e64fc2b50a6175b334fe2b2
- SHA512
  
  a4dea3407cb9e460c926c335081347b2321e650b4dc87cdedc9e7c52f5fcb80c9aaceca1b071afaee4e260e57f816ec3cd534714f3a93133c197e9b7f043cd2c
- SSDEEP
  
  49152:RaYNZyqL/9ABFpFZ87i5RVnZufc7VEBz3sKsTitQSijPiDe02pQE9YcJWhX/IVtS:hyyATpFZ8G3LukKBHsTitA302pQT4Wh7
Score

1^/10
behavioral11 behavioral12
- Target
  
  libcn.uc.gamesdk.core.so
- Size
  
  2.4MB
- MD5
  
  d2f3f680b4261c2628e0b6d8fddd1989
- SHA1
  
  038c3b03dc68d77cae3858d6b8d1659c3b13e8a2
- SHA256
  
  d6ae23111e7c2804371d6a2125ad66403293a5ca25de119c00735fc43d94d2eb
- SHA512
  
  4439ee7073952e9d4494bf7b81ffffe837e456d04cbe9ba4f6d4589557f8f2e45bbe9714fc1107434e62db1138eac1ca782e2d2c5ca9b30da30f92e159934e6a
- SSDEEP
  
  49152:Ap2yuPk+f9hb+JKNqPMPfAVVsi3akHFOG+KMjV7iunwASd16TtPjggT:Ap2xPk+f9hb+JKNqPMHaTHM7jTwLdotn
Score

1^/10
behavioral13 behavioral14 behavioral15
- Target
  
  libcn.uc.gamesdk.floater.so
- Size
  
  843KB
- MD5
  
  f38eb34196fec7118edd8d5289b3dbb4
- SHA1
  
  2678ecae45a70976febab81a95b8a78fde151cef
- SHA256
  
  297566c15a4ffea2a4a46ed27f4294944a605986f69bb0590e103055f1a5a9f1
- SHA512
  
  e575ee105c767ca30d6972678894cc4992f02be21bd882a691da1a02fb33d26e8b5a4b8d6bb824787ec553c486b2859af95de0d723f4639e991e915c847e4447
- SSDEEP
  
  24576:mqGB7xIJ1t1veI5/SN1K5KrnQqyWHA9JGjl:B+IPt1vFh+8KcqAbGjl
Score

1^/10
behavioral16 behavioral17 behavioral18
- Target
  
  libcn.uc.gamesdk.init.so
- Size
  
  567KB
- MD5
  
  f8344c76a5653453dcba4b55531f4e8a
- SHA1
  
  46c45d1cf1cb20bfa30a6f2bbf97efd399a126c4
- SHA256
  
  c43b8ea65842fd41b260eab13ea80bd9363cc19d36286befb4428b861e49bd44
- SHA512
  
  a100aa8fde33a8148f048e9ccc30911cee62d8d819cc78445e57f93d124cdf8d162cb4c7e6bd015b686ee4cc9bd1369316e22a4814e7a1d1f1854acde0481525
- SSDEEP
  
  12288:+7xNcuaDIGMGmbJtIb74TTvyanOVpCRncVtceuVNvmQkNtAYypT:+8MGObJtIXqQkcVtceaVLkLnyh
Score

1^/10
behavioral19 behavioral20
- Target
  
  libcn.uc.gamesdk.update.so
- Size
  
  20KB
- MD5
  
  d30c32c84b0ac2c89a7f726256c89987
- SHA1
  
  9338f691f85466b611aeac15f328996b9a3be56b
- SHA256
  
  974b4636890a4c62fa5fc899a0c0e99dddb2138b590f91dd707a33e554479368
- SHA512
  
  1b954fc8cf287f925bcad07986a2394d703dbb74aa1ebcb95f96625ea47ded8705985cc9ffed64d0651ef9d593408eb0d60cfdf52210a7fb443378be06f87ca2
- SSDEEP
  
  384:Am+Z5btNVX9DapSkQmFfFZmE4Q8GoSjtwPgHHv7e+aFmnkDNMkTHm5fNm579ootW:Am+XR9DaL1FDU7SfPq+TkD9TH4fN2GWk
Score

1^/10
behavioral21 behavioral22 behavioral23
- Target
  
  gdtadv2.jar
- Size
  
  443KB
- MD5
  
  232146e2595dbcc4917a3ae7b3663b3c
- SHA1
  
  3deedba5289f3eddc87cf35c06ba6c6aa1380275
- SHA256
  
  abbda9c3353d88c4de9df8880b962fe7958c610cbf54e3e57568af80cd504711
- SHA512
  
  43fc0b3687d54dfaecc0a53ce290c59ba4b35540b0348f28edede81fd8e96888dabe7c008eb0d1d8d4fd23c76ace1ff570dd9175695f25a5aaad055f1dfc0d69
- SSDEEP
  
  6144:Nvd0m3MKiQr/B49UXhtjKzGLCrR8A5ZpKkUuf/nVo9v1LIMyXiBqpMoZInOrGPuB:j1F/BkURZdiL7UInV8xIbXolwCO6xu
Score

1^/10
behavioral24
- Target
  
  ucsdk.apk
- Size
  
  37KB
- MD5
  
  1e5d2ae8f1e890c4182fd46f6a84f932
- SHA1
  
  7f86c7f330038b2fb2289723b483c4077edacc3d
- SHA256
  
  8ad31017a72b5afd54856038d992514ffe66e56b508f34897992426344f7a46a
- SHA512
  
  d08231273c8c4338917a73ceb8fa963246feaa47eb028e6faf25dffcee42fb0c7efa7e4067b96bd7427abb83bc63a0ecb6c29368167ba129e403c8bb0c4ff15e
- SSDEEP
  
  768:1MV1jZsxScAGt1Iz+2+mfoNtr9MbUPEETVKZKGefwB29qAdOKd4:2VpaxScAYIzNfatGnEIEGHg9qAQKd4
Score

1^/10
behavioral25 behavioral26 behavioral27

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Checks known Qemu files.

Loads dropped Dex/Jar

Requests dangerous framework permissions

Checks the presence of a debugger

MITRE ATT&CK Mobile v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27