Overview

overview

3

Static

static

1

post-install.sh

ubuntu-18.04-amd64

1

post-install.sh

debian-9-armhf

1

post-install.sh

debian-9-mips

post-install.sh

debian-9-mipsel

pre-install.sh

ubuntu-18.04-amd64

1

pre-install.sh

debian-9-armhf

1

pre-install.sh

debian-9-mips

pre-install.sh

debian-9-mipsel

pre-uninstall.sh

ubuntu-18.04-amd64

1

pre-uninstall.sh

debian-9-armhf

1

pre-uninstall.sh

debian-9-mips

pre-uninstall.sh

debian-9-mipsel

start-stop.sh

ubuntu-18.04-amd64

1

start-stop.sh

debian-9-armhf

1

start-stop.sh

debian-9-mips

start-stop.sh

debian-9-mipsel

bin/dropboxctl

ubuntu-18.04-amd64

1

bin/dropboxd

ubuntu-20.04-amd64

1

webman/dat...box.js

windows7-x64

3

webman/dat...box.js

windows10-2004-x64

3

webman/dropbox.cgi

ubuntu-20.04-amd64

1

webman/lan...-cs.js

windows7-x64

3

webman/lan...-cs.js

windows10-2004-x64

3

webman/lan...-da.js

windows7-x64

3

webman/lan...-da.js

windows10-2004-x64

3

webman/lan...-DE.js

windows7-x64

3

webman/lan...-DE.js

windows10-2004-x64

3

webman/lan...-US.js

windows7-x64

3

webman/lan...-US.js

windows10-2004-x64

3

webman/lan...ino.js

windows7-x64

3

webman/lan...ino.js

windows10-2004-x64

3

webman/lan...-es.js

windows7-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0010_999_1468927100_datasyncDropbox_1.0.1.r68_x86-64.apk

  • Size

    1.5MB

  • Sample

    240521-f3sj8abf21

  • MD5

    b4426c792378a5205b30efd44b722be2

  • SHA1

    7673892c5fcd75f7304eb918dd01c72108329745

  • SHA256

    43e246bd35c079609a2a572d9100b214cf899c990fa72604a378f9433763bc9f

  • SHA512

    a2729895a431f918fd415f8e04d39b14b4a63e1ab5b774341c5714345b317e376ebd6d9f07de1887ad628e8649ebccc85ea8d913eb5ae2176172d28f56229989

  • SSDEEP

    24576:mWTngoktBzP0U+pcQLJXA84L/oLZjpWNSQ8xiF57TjIEvKaZQ8c/qwFPA2:jngbJ0UDQLJ8/CZ1wSHipKmECwFPp

Score
3/10
executionlinux

Malware Config

Targets

    • Target

      post-install.sh

    • Size

      244B

    • MD5

      191493e675eacff5b333dd354641d6c0

    • SHA1

      5a5579b3220ddbfc39a1b859d39706ae9b08cfec

    • SHA256

      29b665fab93d24f062b46055cb6b76473e99e25b1ffe7aa7ccee8d4d54645ba6

    • SHA512

      70ac6e7b41340543818aba5bc7a0309280232d01fe79f80c409db42815139ac900dce1f62e5e2089a72b911196aa77249e3c68f5f20e3277dc753b77f8d23f12

    Score
    1/10
    behavioral1behavioral2behavioral3behavioral4

    • Target

      pre-install.sh

    • Size

      167B

    • MD5

      2ea4738eb1d5c74afa50684a641cac49

    • SHA1

      7cc43bd9c48349abf4bdc30a1d8ed809dbf62b8a

    • SHA256

      e8b2d107837304e7c5b3c337d30edc8abb571b0caca8cc4c5f5ddcba92bf79ba

    • SHA512

      8949dee52de7fe47abb6bbd185d5bfb0aefdd2df9599227b637516310f5527435698d9a8e29bcd52682247d42c4dfd170f69aeca8ab1a569b0d866227debba77

    Score
    1/10
    behavioral5behavioral6behavioral7behavioral8

    • Target

      pre-uninstall.sh

    • Size

      74B

    • MD5

      998af35b1c4a4265caf970e8e6e91a3e

    • SHA1

      9480806cc245823e4c1ff1fd4b5bd8ee39536d6a

    • SHA256

      2840fa99b2b4a7b67e5c55fc8d388a0593c971e6f1aa8365c395fa6110dda6f4

    • SHA512

      e2c843c823ebbc5a4dbecf39f89559152af93dfdeb69ce9fdb9aa78addd721bd6872fb7ba2564dedd94a8d1bca4ee3f9aa7ae349fc5f3194b90157716923f6dc

    Score
    1/10
    behavioral10behavioral11behavioral12behavioral9

    • Target

      start-stop.sh

    • Size

      891B

    • MD5

      ddbe60b0057eae470e22e59c0cade019

    • SHA1

      d0afb4b00d659bb91336e2d23302101070303836

    • SHA256

      4629eaab66ee23e176429fc880d2870beaa32f730c1f642a329bfd71d0b36cae

    • SHA512

      874f72e082f25e41405258b47d9dac8fba5b560022d954bea7b22dbfe411d548a304c6dcf934f5ee91a6efb0f3493b22b0d54185e942508df8681777e72fbc30

    Score
    1/10
    behavioral13behavioral14behavioral15behavioral16

    • Target

      bin/dropboxctl

    • Size

      1.0MB

    • MD5

      bd1b67a6ee55b5b0163a1ca4eb524125

    • SHA1

      23347dc447fcb1f5dac5fd04ed24c247f1b685b3

    • SHA256

      2d1d2926270a759a37c2453e61ac95435c8eb1db9894d72eaac6567eacb5561e

    • SHA512

      3c5fac0829a473312bb011600408d197d22dfe97367a80cf029deab98ea882485dc26208ff65a7321492a9e23e4741fb0ec98698cbcacecf23296685af187136

    • SSDEEP

      12288:am5gpkSlTi1smzr7PtDxo+7JhIPX52LZ2iQWhEkFHQZf8VR4YJARvhyM:amWpRgo2syyAjEf8VR4SAeM

    Score
    1/10
    behavioral17

    • Target

      bin/dropboxd

    • Size

      1.2MB

    • MD5

      d232024ec4f410d7ce9f74bd6b9a0c4b

    • SHA1

      db2a45985c7a808de13a06f60ccd7f2c32545d49

    • SHA256

      127531b530a4371abccd17f03c45b0872ffa33bb3153ad52a4127895b8f7ce7e

    • SHA512

      51b74b85a3fbcfae150a3161b853b3267cba7c9bda6b3c037fa59098000285a832d2ad22b76762600a868524984587cace801c522fa768823e8c5b49c2725948

    • SSDEEP

      12288:eLb0Dmc4os14lItgT/E7E4Q6uuIPG6gCcBPtBB53cLs7WJHQVE94AoiqXnDwfl:eLbZcsW/OYIyQTul

    Score
    1/10
    behavioral18

    • Target

      webman/datasync-dropbox.js

    • Size

      120KB

    • MD5

      6c788c224e2b1f652eefb4fa187dd231

    • SHA1

      626c2cf3f569e939ee882b02f32c990e0b0a5157

    • SHA256

      5127a8dfca3d095ac1d9c143aec78c12bfe592938307acdc187b7816edb0171a

    • SHA512

      bba516e2c9840f2307b0f252e8b4a781b1bd31c83fb87c7ab5e0170385c954a817c5f36198b251213b91da50f24e1563ddafd04b882203c91668010e42f0006b

    • SSDEEP

      3072:/ZQgXKBBobX60IPdulZ3Ihug8ItDRhCW2fns:OT/

    Score
    3/10
    execution
    behavioral19behavioral20

    • Target

      webman/dropbox.cgi

    • Size

      1.6MB

    • MD5

      21d3a2f4bf59353871b0a9739e8e9107

    • SHA1

      66ad5f6e9cc68ddda1fb00dfb922d86f9c93a774

    • SHA256

      434ff598dc330dbcbf7fe7f4583ea4fdfe68b1b99a93b2c51c80427955cf4547

    • SHA512

      665f00666bf2e0269a797450e09215d12e9cb883c5765155051291318a641328d6bbe37856f0824c549ac3d603c217222f0cc9f64294890a4bd337da8533c469

    • SSDEEP

      49152:IQKrpDyacCFceErBuLcpf5B8VcrZfE0Pc2f:IZtMVecX8urd1Pc2f

    Score
    1/10
    behavioral21

    • Target

      webman/langs/lang-cs.js

    • Size

      4KB

    • MD5

      183cc7dca95c45e77c2ac9489dc54db5

    • SHA1

      c263c9437fa5ea347c0510865dbd7500e8e1f9d4

    • SHA256

      09ee7d7671eb78491aa087ed8760ae1d4188fc27c8f4e3c443f6c755b9da47dc

    • SHA512

      c73ff46cf3ceee6ab0292b66c69c0f719bc203a46e1393fa3c8ce920337619ece56333a3be0b5ff431a1cc454cfddf46ca42fc7f4c33a4b4aeb379f3064aea74

    • SSDEEP

      96:tt9BTPyHLT1+qBJqoJ2TUpk8AXzqTVsm5xSGSBwAhy3yUNny81F56Sj7wSCNwxx9:VWayzLF0Cz3nUmjz

    Score
    3/10
    execution
    behavioral22behavioral23

    • Target

      webman/langs/lang-da.js

    • Size

      4KB

    • MD5

      678a38aea239fd7ee3ddf75492615771

    • SHA1

      e867f040018092c1e635cc0f83ab573dcd6772e3

    • SHA256

      19646b45375d1882c05a5ced95fe48af51758d7dce0904a9b64199aba966071f

    • SHA512

      5b6a7b579b2cf748105ad477ea81a5ada261f89a71baf39d219a511cb5190352a21341cfadeb65b4cc72667b7e8474fe4594f2ba440c888d1b670500d9b8081f

    • SSDEEP

      96:ttyZzTB0hFrTv7hdqYi9yTR2kB88zrTuj5xSGv3wAUKUTsVb1i6Q4Ogq1YCCx4gq:5wA+7HxthQNriqG93ojN

    Score
    3/10
    execution
    behavioral24behavioral25

    • Target

      webman/langs/lang-de-DE.js

    • Size

      4KB

    • MD5

      50b9e807a2d67a87a95cac47cba3e825

    • SHA1

      d228d60c51df9ade2c73e05557806dcd57201aa8

    • SHA256

      227ec9dcbdebff61865351f9fa594b5feddabe7ee66bcc380bc0b3bf9a1673a4

    • SHA512

      b2e48f18805f11447b40e84a2d7c9d72b381fa3e67178b4f26f60cba3f95b397ff220ec981bc40d9930908d7b1ef2679bda68b10557c5b983ca2b1066b9130cc

    • SSDEEP

      96:ttc2Ti9/BT8Tw3C6i9kTrvkL/ozrT25j5xSG4wALkUnJFU71i60nZFlF6krxtgk+:8YzxRtUDAVmw

    Score
    3/10
    execution
    behavioral26behavioral27

    • Target

      webman/langs/lang-en-US.js

    • Size

      4KB

    • MD5

      c478d71fc4d8da0196376ad57d13fcd2

    • SHA1

      009f1ebce13e97c338b33bf664c2582571450b39

    • SHA256

      6a14139a6c00efe68b5fbb14dba77bad0e1c39ec100fa7065c6164f1fe2d122f

    • SHA512

      07a1dbf9597d0fed3082ffe460a7e7dd3357211ca8cdf10f7c9172c6a803914a58738483472a571b6a68f3a793fd411be5b70747167d3795ba65545eac47216a

    • SSDEEP

      96:ttmDTEv/Tczp3rGQi9HKT9IOxTnR5xSG1wAN6UD2k1i6cjQ4M9nqx6g3raylOLGO:Sqtebt+RKz3

    Score
    3/10
    execution
    behavioral28behavioral29

    • Target

      webman/langs/lang-es-latino.js

    • Size

      4KB

    • MD5

      e2b5b5b233e96e7bbeacc85bd8708a51

    • SHA1

      12a6cc5089aa64a9369d53fbe6e8adf0f46e60cd

    • SHA256

      1718dfab2274545a4b2168df13060c196bc4caa7fcfa3df63831abe2e0626173

    • SHA512

      9a3e0ffd83121dc80d866787843a93fcb95a385ca414f3e91b48cf9412c2828667a2aa003f98d39cc60b2f8f27377455464af4f2ec1f5cf0b5e15d2fcd4e070f

    • SSDEEP

      96:ttZLTERMZTg3l333YHhauTRUk8nNFzpT0iy5xSGowAN6UDNk1q68jQxO9nWx6g32:C53u/VJPJEz3

    Score
    3/10
    execution
    behavioral30behavioral31

    • Target

      webman/langs/lang-es.js

    • Size

      4KB

    • MD5

      deb1accebb2614443aebb99d4131121b

    • SHA1

      d3a9f220f962ce7e0751dbeb0bf5fc3bd05b02bf

    • SHA256

      d8a9997f13bcf768be5584b315d1c0927e7d1f4ba1d5ce13df9d258988a2ac41

    • SHA512

      18499acf4416d89f83b4fcc261915418e2c829442f1a90a44d9e68ddfe46e8f4043c1d3198405ddcfd8fb1ac0f9966c939ef4f312227ae23ad62f8530a7ec047

    • SSDEEP

      96:ttZLTARMZTg3l333YHhauTRUk8nNFzpT0iy5xSGowAwxa8UyNy1q6U2xOh+SWx1M:253uYlVQo3AJ5F3

    Score
    3/10
    execution
    behavioral32

MITRE ATT&CK Enterprise v15

Tasks

static1

Score
1/10

behavioral1

Score
1/10

behavioral2

Score
1/10

behavioral3

Score
1/10

behavioral4

Score
1/10

behavioral5

Score
1/10

behavioral6

Score
1/10

behavioral7

Score
1/10

behavioral8

Score
1/10

behavioral9

Score
1/10

behavioral10

Score
1/10

behavioral11

Score
1/10

behavioral12

Score
1/10

behavioral13

Score
1/10

behavioral14

Score
1/10

behavioral15

Score
1/10

behavioral16

Score
1/10

behavioral17

Score
1/10

behavioral18

Score
1/10

behavioral19

execution
Score
3/10

behavioral20

execution
Score
3/10

behavioral21

Score
1/10

behavioral22

execution
Score
3/10

behavioral23

execution
Score
3/10

behavioral24

execution
Score
3/10

behavioral25

execution
Score
3/10

behavioral26

execution
Score
3/10

behavioral27

execution
Score
3/10

behavioral28

execution
Score
3/10

behavioral29

execution
Score
3/10

behavioral30

execution
Score
3/10

behavioral31

execution
Score
3/10

behavioral32

execution
Score
3/10