983e87064ea3e99ee6352477e9a2095b20910d22146fffe2915548fc1e310fee

General

Target
983e87064ea3e99ee6352477e9a2095b20910d22146fffe2915548fc1e310fee.apk
Size 312KB
Sample240613-frh7eavfqa
SHA256 983e87064ea3e99ee6352477e9a2095b20910d22146fffe2915548fc1e310fee
MD5 66d2fb25920a150069952c5fb63557cf
SHA1 69dde105d928c46c32d8744b64c185a096a8f6de
SHA512 d26ca187ef72e390252ef864e1db3c97e82b8bfd3d3e77a94d9ca14066e300bb4d7b04ecf2439d6c64ab3c7a235bd349a64b603fd73c29dd0c9ace67b34dbada
SSDEEP 6144:v8w/vsXlcHVCN2o5k5NYiQTO5eWv7U/eQHmodM+Ohe2sVEkTq7b:v8CvsVDDyNYPpmVod5ge2KG7b
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

discovery evasion

Malware Config

Signatures

Loads dropped Dex/Jar 1 TTPs 14 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/com.dsbhgdsiewjcnew21jkyjds.security/app_hub3.bjo.mays.rnl/obfs/0.obfedex	5009	com.dsbhgdsiewjcnew21jkyjds.security
/data/user/0/com.dsbhgdsiewjcnew21jkyjds.security/app_hub3.bjo.mays.rnl/obfs/0.obfedex	5009	com.dsbhgdsiewjcnew21jkyjds.security
/data/user/0/com.dsbhgdsiewjcnew21jkyjds.security/app_hub3.bjo.mays.rnl/obfs/1.obfedex	5009	com.dsbhgdsiewjcnew21jkyjds.security
/data/user/0/com.dsbhgdsiewjcnew21jkyjds.security/app_hub3.bjo.mays.rnl/obfs/1.obfedex	5009	com.dsbhgdsiewjcnew21jkyjds.security
/data/user/0/com.dsbhgdsiewjcnew21jkyjds.security/app_hub3.bjo.mays.rnl/obfs/2.obfedex	5009	com.dsbhgdsiewjcnew21jkyjds.security
/data/user/0/com.dsbhgdsiewjcnew21jkyjds.security/app_hub3.bjo.mays.rnl/obfs/2.obfedex	5009	com.dsbhgdsiewjcnew21jkyjds.security
/data/user/0/com.dsbhgdsiewjcnew21jkyjds.security/app_hub3.bjo.mays.rnl/obfs/3.obfedex	5009	com.dsbhgdsiewjcnew21jkyjds.security
/data/user/0/com.dsbhgdsiewjcnew21jkyjds.security/app_hub3.bjo.mays.rnl/obfs/3.obfedex	5009	com.dsbhgdsiewjcnew21jkyjds.security
/data/user/0/com.dsbhgdsiewjcnew21jkyjds.security/app_hub3.bjo.mays.rnl/obfs/4.obfedex	5009	com.dsbhgdsiewjcnew21jkyjds.security
/data/user/0/com.dsbhgdsiewjcnew21jkyjds.security/app_hub3.bjo.mays.rnl/obfs/4.obfedex	5009	com.dsbhgdsiewjcnew21jkyjds.security
/data/user/0/com.dsbhgdsiewjcnew21jkyjds.security/app_hub3.bjo.mays.rnl/obfs/5.obfedex	5009	com.dsbhgdsiewjcnew21jkyjds.security
/data/user/0/com.dsbhgdsiewjcnew21jkyjds.security/app_hub3.bjo.mays.rnl/obfs/5.obfedex	5009	com.dsbhgdsiewjcnew21jkyjds.security
/data/user/0/com.dsbhgdsiewjcnew21jkyjds.security/app_hub3.bjo.mays.rnl/obfs/6.obfedex	5009	com.dsbhgdsiewjcnew21jkyjds.security
/data/user/0/com.dsbhgdsiewjcnew21jkyjds.security/app_hub3.bjo.mays.rnl/obfs/6.obfedex	5009	com.dsbhgdsiewjcnew21jkyjds.security

Queries the phone number (MSISDN for GSM devices) 1 TTPs
discovery

System Network Configuration Discovery
T1422
Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

com.dsbhgdsiewjcnew21jkyjds.security
1⤵
- Loads dropped Dex/Jar
PID:5009

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

1

T1407

Credential Access

Discovery

System Network Configuration Discovery

2

T1422

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

0.obfedex

Path /data/data/com.dsbhgdsiewjcnew21jkyjds.security/app_hub3.bjo.mays.rnl/obfs/0.obfedex
Size 51KB
SHA256 7b905bce07f3c2558795f9d93e471716d491288d32c4ab22967cb40ce25153ec
MD5 1fa80d14073dda878f928ee2ea58b955
SHA1 785851328a12a1fbd7727ea65ce4e4f2f9186c08
SHA512 21e574a678b3821075d4e69a74950509bb1c0ff9ebca1812f84274bb8152d157926e34f4dab84e7b53872d881556065415b20a09c3d7314e19a7d658d7ec85be
SSDEEP 768:f3dgt+hIz9u5HMgQE0+3CgNKVS4IC06/5UvPaKVx/pZYi/IA53Nuey1yNRPkcbl7:1G+hp5HMgQE5C06ynaAJ8i/tUey1yz7
MD5 SHA1 SHA512 SSDEEP

Submit Download

1.obfedex

Path /data/data/com.dsbhgdsiewjcnew21jkyjds.security/app_hub3.bjo.mays.rnl/obfs/1.obfedex
Size 59KB
SHA256 8d5868655c3dd13eb9bd40daba2a4afc3e88bc5a282836dd81314b7d41e2ee67
MD5 e6c95b8d2d1a40b61bf37201dcb73af3
SHA1 2599dbc13916663bb399f20a57aa877423d175df
SHA512 10a2e10ad6948359bc283f2696aa4848319910c5fb3e75e57b5190299084a48ca99260f000233f2866c177b9739362b13591e51789aa217b4bf97a2e79f0c2cc
SSDEEP 768:goBvF1eOSRygQOMu7oZhzTK1Lpf8MWsE9PGQePE66:gIvveZ7QpTZhS1Lpf8MWscGnET
MD5 SHA1 SHA512 SSDEEP

Submit Download

2.obfedex

Path /data/data/com.dsbhgdsiewjcnew21jkyjds.security/app_hub3.bjo.mays.rnl/obfs/2.obfedex
Size 19KB
SHA256 a5cb835d34b5d233feb05aaefce69054e586086b7068d19c90cd713de16bc107
MD5 a8c85092111175e2fbb1281f4dd046e4
SHA1 0dc723041ba6e219849eb17f88107a785c0eb0b2
SHA512 3afc846ce4a4733af549cb282850b90e6416f502e340cc81d8abc63f924b450eb84d898b277f53016f425c02c9eec717324f87df757b206675962e95dc8b22ef
SSDEEP 384:iOoHYpCufP9P6493WkoDfzKQa0GqZwHbqEV/VI242lh1CHpPYsk0V4OzHw:iOoCfP9P6q3pge+pay242lh1CHpPYskr
MD5 SHA1 SHA512 SSDEEP

Submit Download

3.obfedex

Path /data/data/com.dsbhgdsiewjcnew21jkyjds.security/app_hub3.bjo.mays.rnl/obfs/3.obfedex
Size 16KB
SHA256 351a746e96c68026550d1e37f98a01bff18cfcada99dfa081b37e52f4d133834
MD5 230fb36c79b495a854e11ad2cffb6498
SHA1 62eb80de566f32998466c87cd4f1518f8470a1d9
SHA512 0876a01fee2f5b10985c60852e064b1595da59aff96b4266548f4ac479786085f75012709784efdd9547fb35ab59191a867fc62c5fcf1d4045f4ea4a4257db1e
SSDEEP 192:q2q1XhS2vtcAQRHsCvVjHVqMonPhc1AOfVBtShvXeAv3y66lBxbR0PuqpsHqFMY5:q2ESq/QVj0H4lVBdqyCWq6KHrJWJ2BD
MD5 SHA1 SHA512 SSDEEP

Submit Download

4.obfedex

Path /data/data/com.dsbhgdsiewjcnew21jkyjds.security/app_hub3.bjo.mays.rnl/obfs/4.obfedex
Size 6KB
SHA256 d8442a142fa052519e1767e627bf3513437ca885f3b95646e2918d94903743a2
MD5 20099d5ce124693ad0c7eda488a3bce0
SHA1 1b7251600703792d0e94b68e4245699068c9aff3
SHA512 4ebb1e693dc976ef305ce7de482768224f578de433563bfea6f7a4da5d5b0030031fa44c2dd4e722d7769ae86a1230f2fb702b46a54c2f4c2e3dcfef2558d764
SSDEEP 96:fnhtRIWvn7a9i7OPYQSSF1JwjZIufjtUOd+KzDWGqb:fht6WQCOPYQSSFAjZIkjmOdVi
MD5 SHA1 SHA512 SSDEEP

Submit Download

5.obfedex

Path /data/data/com.dsbhgdsiewjcnew21jkyjds.security/app_hub3.bjo.mays.rnl/obfs/5.obfedex
Size 8KB
SHA256 d7ebe65a295f03cd127c4f4521be50bfadb20084b8baf9872303395e07ed0325
MD5 9fd6531b07f814f7fa0814f8bd7e49d2
SHA1 a19862b03cc48de92ae5393b0c55cf22e3b838bd
SHA512 fcc8a12f08778f031c787e47a32d9e7680c617f5c231add4255a97f0365a8088f5fd176c6b800190db3c239643501f23ff6ce733d51e41bc0ee111ca45e86c9c
SSDEEP 192:YebItgOW8w/XRRj4Ko1Yd++rKQZwEyd1/wyNtkHm4U:1bVN8OhR8Ko1Yd++rrZwEydPfj
MD5 SHA1 SHA512 SSDEEP

Submit Download

6.obfedex

Path /data/data/com.dsbhgdsiewjcnew21jkyjds.security/app_hub3.bjo.mays.rnl/obfs/6.obfedex
Size 11KB
SHA256 20e52826103d8fe4fbd3d8895f30a858c1b1e7456ed22309eec5bb0f739af8e1
MD5 448a2ac8a7d0ab252925208bef02002a
SHA1 b93d49bfb47eaac3cd261ead73e96d5202fdb9c4
SHA512 2f8cebea62def4cff2d456c0f25b3dd1ecee7c486c9fad9683e3f245b11d7bf06bec78b81b145d26c7e12bd4821bfec2ab15940e70c86f9c96b800fcfab3efe5
SSDEEP 192:ZxefoMid3CpKxetpDmWYOqLVtZPgUMiOMeyZoJhAOSyjE/eSeumh5sbZ:ifre3CpKxetQWYOwVPCyZoJhAOSyjE/x
MD5 SHA1 SHA512 SSDEEP

Submit Download

dsbhgdsiewjcnew21jkyjds.txt

Path /storage/emulated/0/dsbhgdsiewjcnew21jkyjds.txt
Size 2B
SHA256 4fc82b26aecb47d2868c4efbe3581732a3e7cbcc6c2efb32062c08170a05eeb8
MD5 6512bd43d9caa6e02c990b0a82652dca
SHA1 17ba0791499db908433b80f37c5fbc89b870084b
SHA512 74a49c698dbd3c12e36b0b287447d833f74f3937ff132ebff7054baa18623c35a705bb18b82e2ac0384b5127db97016e63609f712bc90e3506cfbea97599f46f
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads