Overview
overview
10Static
static
1000c1851b4d...8e.apk
android-9-x86
8CommonPlugin-4.1.apk
android-9-x86
1CommonPlugin-4.1.apk
android-10-x64
1CommonPlugin-4.1.apk
android-11-x64
1FrameworkP....2.apk
android-9-x86
1FrameworkP....2.apk
android-10-x64
1FrameworkP....2.apk
android-11-x64
1LoopImageP....4.apk
android-9-x86
1LoopImageP....4.apk
android-10-x64
1LoopImageP....4.apk
android-11-x64
1WelcomePlugin-2.7.apk
android-9-x86
1WelcomePlugin-2.7.apk
android-10-x64
1WelcomePlugin-2.7.apk
android-11-x64
1General
-
Target
00c1851b4d6be5c70241c9c0268e1a623ab9ccd5913399a870a6c64bb65f608e.zip
-
Size
24.5MB
-
Sample
240520-ywfaesfb64
-
MD5
5e5fba142b81f9a6bd10404ffcfd023e
-
SHA1
cea2d35031731b97c4f9549bdb4c101eb40f2d5c
-
SHA256
00c1851b4d6be5c70241c9c0268e1a623ab9ccd5913399a870a6c64bb65f608e
-
SHA512
94613301ce630ca7bc8994e40a57efb4a7928f20dc45701ee2756f2ef5ba4eea0dfe55c94826974dfbc30988067ed1b64bc70c4f5d299b80b268befd8580082a
-
SSDEEP
786432:sJuvJLqZvnOt1PaqJOrDFGPKbHMhWbv9Be/E9lJFX4cws/xSO7HGZpug6f/Mhz+G:vvJLqFEerUqmju//e7
Behavioral task
behavioral1
Sample
00c1851b4d6be5c70241c9c0268e1a623ab9ccd5913399a870a6c64bb65f608e.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral2
Sample
CommonPlugin-4.1.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral3
Sample
CommonPlugin-4.1.apk
Resource
android-x64-20240514-en
Behavioral task
behavioral4
Sample
CommonPlugin-4.1.apk
Resource
android-x64-arm64-20240514-en
Behavioral task
behavioral5
Sample
FrameworkPlugin-3.2.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral6
Sample
FrameworkPlugin-3.2.apk
Resource
android-x64-20240514-en
Behavioral task
behavioral7
Sample
FrameworkPlugin-3.2.apk
Resource
android-x64-arm64-20240514-en
Behavioral task
behavioral8
Sample
LoopImagePlugin-2.4.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral9
Sample
LoopImagePlugin-2.4.apk
Resource
android-x64-20240514-en
Behavioral task
behavioral10
Sample
LoopImagePlugin-2.4.apk
Resource
android-x64-arm64-20240514-en
Behavioral task
behavioral11
Sample
WelcomePlugin-2.7.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral12
Sample
WelcomePlugin-2.7.apk
Resource
android-x64-20240514-en
Behavioral task
behavioral13
Sample
WelcomePlugin-2.7.apk
Resource
android-x64-arm64-20240514-en
Malware Config
Extracted
joker
http://u.m.taobao.com/reg/retrieve_pwd_index.htm?ttid=702669@xiami_android_3.2.4
Targets
-
-
Target
00c1851b4d6be5c70241c9c0268e1a623ab9ccd5913399a870a6c64bb65f608e.zip
-
Size
24.5MB
-
MD5
5e5fba142b81f9a6bd10404ffcfd023e
-
SHA1
cea2d35031731b97c4f9549bdb4c101eb40f2d5c
-
SHA256
00c1851b4d6be5c70241c9c0268e1a623ab9ccd5913399a870a6c64bb65f608e
-
SHA512
94613301ce630ca7bc8994e40a57efb4a7928f20dc45701ee2756f2ef5ba4eea0dfe55c94826974dfbc30988067ed1b64bc70c4f5d299b80b268befd8580082a
-
SSDEEP
786432:sJuvJLqZvnOt1PaqJOrDFGPKbHMhWbv9Be/E9lJFX4cws/xSO7HGZpug6f/Mhz+G:vvJLqFEerUqmju//e7
Score8/10-
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Queries information about the current Wi-Fi connection
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
-
Registers a broadcast receiver at runtime (usually for listening for system events)
-
Checks if the internet connection is available
-
-
-
Target
CommonPlugin-4.1.apk
-
Size
509KB
-
MD5
d4f6436d0d9fc156e3ea696b04005c31
-
SHA1
88777a041c22151ff3c63a0928bfdf7db6b335aa
-
SHA256
4be301eff87b511ed26931ed486f504429979cfdc0e61d7f480689bbdc08e76f
-
SHA512
6b731916385f9429bc5969951c2d504c11bda8934159d7a394a84abb2c79133bc4e5af051e1a79f8bbd6ce73bc90aed91ef8a231a26a302ba1b713e49c89d794
-
SSDEEP
12288:DKcjYBGtLl82FVJq1dSAhhiUfkyWoUZT1iksBFok:2J0x9Vcb9hYU8y1UZT1+Buk
Score1/10 -
-
-
Target
FrameworkPlugin-3.2.apk
-
Size
18KB
-
MD5
4ac0847e047da5892813e64e1927ddf4
-
SHA1
5e9c0f2c16a69d33983105bf73ee402561965330
-
SHA256
31b32537914b462f177d31c48132c64191cc18292abe56a06923d27d88ead844
-
SHA512
8a017064e02b06eebcdf92473e20f4b2aa5b0d4f107cf0a36fb2175b8c6340f49b8c92fd2b8f60904d0ec88a219bb62d6292808bd33a579a1cdfec5474692c47
-
SSDEEP
384:nUdLURDsoy3RWnjnukNgWzauFqA28PWSjISsIC:UUDxy3mjneW+uh5ElIC
Score1/10 -
-
-
Target
LoopImagePlugin-2.4.apk
-
Size
36KB
-
MD5
a8cf8cb69ccf9e20c11784976a3d0e0a
-
SHA1
36b946902cb4c5a449861443c77f143060fd5675
-
SHA256
225da6726ecbeb746a6d3882f98b258d88d03d6095d63267a8fa16d99579f2df
-
SHA512
3aaf978f2b30a84bad909fa59a1d8d97690ec7bd7fa1537e504ada71dfc53d8f556fe880377faf9ee1c0ff09e308702140011dec0b622a1232db1900fdf7405a
-
SSDEEP
768:5P8ngm5ZrXFWLKxe7X+Fu9YZsdS1pVfk0plqPHs5Tdu4DqgiyfWMZi+T:ygm5ZbgLKxe7wu8sdS9k0pasPCyeM0+
Score1/10 -
-
-
Target
WelcomePlugin-2.7.apk
-
Size
35KB
-
MD5
425616bf98ecfaad03618ef2abbc8921
-
SHA1
fe738fbd71c28576cded03fe2b346bed2935d8c7
-
SHA256
b140fb86390c4a6223862a8fda272011d5f260bc0332a07aa3f0687c2f093eaf
-
SHA512
fe0d001e960b32d7fee60ed1dce02aea200f93bf125a84f17128e4a4847dbed11e9ae3ed2a2ecf36e69336d04251e57fe403ba80df9884e57e9c9b231b3fccad
-
SSDEEP
768:5erXFWLKxe7X+Fu95XKxJk0PttH2X9KMmzVsNyHKawRWnq9d:5ebgLKxe7wu/2k0TH2tKyNyqp8Q
Score1/10 -