Overview

overview

7

Static

static

1

coinbase/a...er.jar

windows7-x64

1

coinbase/a...er.jar

windows10-2004-x64

1

coinbase/a...radlew

ubuntu-18.04-amd64

1

coinbase/a...radlew

debian-9-armhf

1

coinbase/a...radlew

debian-9-mips

1

coinbase/a...radlew

debian-9-mipsel

1

coinbase/a...ew.bat

windows7-x64

1

coinbase/a...ew.bat

windows10-2004-x64

7

coinbase/i...rks.sh

ubuntu-18.04-amd64

1

coinbase/i...rks.sh

debian-9-armhf

1

coinbase/i...rks.sh

debian-9-mips

1

coinbase/i...rks.sh

debian-9-mipsel

1

coinbase/l...out.js

windows7-x64

3

coinbase/l...out.js

windows10-2004-x64

3

coinbase/l...een.js

windows7-x64

3

coinbase/l...een.js

windows10-2004-x64

3

coinbase/l...age.js

windows7-x64

3

coinbase/l...age.js

windows10-2004-x64

3

coinbase/l...ets.js

windows7-x64

3

coinbase/l...ets.js

windows10-2004-x64

3

coinbase/l...out.js

windows7-x64

3

coinbase/l...out.js

windows10-2004-x64

3

coinbase/l...ler.js

windows7-x64

3

coinbase/l...ler.js

windows10-2004-x64

3

coinbase/m...dow.js

windows7-x64

3

coinbase/m...dow.js

windows10-2004-x64

3

coinbase/w...x.html

windows7-x64

3

coinbase/w...x.html

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    coinbase.zip

  • Size

    1.3MB

  • Sample

    240801-zyk45awfkp

  • MD5

    02156a7c3c0afc48f6b76ab9a507e20e

  • SHA1

    72180a928f4f9ad0192fad740fb54e13f75bcc82

  • SHA256

    19aea03297cf3e234930b462217a280753c241e4582bbb30513e485079ffb368

  • SHA512

    7d5cb63d4adf727fb92ea7917978f18bb2f5a29ee3dfb1593c23339b8251c490729aa92dacc4fe1116211e9bf0ec1f91d7a9a1e3317672a2e37e2aecc5ebf89c

  • SSDEEP

    24576:JPmCgOPkJW+p/OZTxK3v0m/1jn7GMu/9lOvjB+iatcDzoz0vFasO3vzDl6vGBEAb:JPml6ypWZT43v0m/1j7GMuHOrIt8kIuD

Score
7/10
discoveryexecutionlinux

Malware Config

Targets

    • Target

      coinbase/android/gradle/wrapper/gradle-wrapper.jar

    • Size

      52KB

    • MD5

      3ef954ed0adb79a5bd8a5303165fae05

    • SHA1

      92d0b85fb15ec7ca7aa72eaab4d5f7faac9297d1

    • SHA256

      16caeaf66d57a0d1d2087fef6a97efa62de8da69afa5b908f40db35afc4342da

    • SHA512

      c0f5fcc25b2dfa8b256f772443421312bb4bfd35200fe717afc4a63155e9b6629b9b081c3ac314230ff112a2d3ff497f0e296df024b23eae6de32dea3281244c

    • SSDEEP

      1536:Bx+CJ6wvQqbX/RbQOeh5ADzI0WxtK14XzzUdcv3kFP:yCJQCPJJeh5Aw0YqaQOf8

    Score
    1/10
    behavioral1behavioral2

    • Target

      coinbase/android/gradlew

    • Size

      4KB

    • MD5

      7f1cd7eb3f75a1dc85cd37753972a6e2

    • SHA1

      6409d6256df6b2f9e2142183b4c6408823a10f6a

    • SHA256

      ec56c02543666d92d9ac5ae7fcc48f88ce4de0deb8b7f9b39928ca46f68c1b2b

    • SHA512

      a8ce668c3aa6a80f9f6930fd43ba180505a9ba061c8940fb663632baf5a9da5cd7081f86d2a6d99871b0711ce038d25ed61ac99914807ad6f1887a4fbf6f569d

    • SSDEEP

      96:ValKoZvJTR9nxKKXUCeWxeAjwlwLh2jfj9jwjSjDjFN5I:V8KUjxKSZeWVjcI

    Score
    1/10
    behavioral3behavioral4behavioral5behavioral6

    • Target

      coinbase/android/gradlew.bat

    • Size

      2KB

    • MD5

      375ddea382b6c56a7be2a967a20e0ab5

    • SHA1

      cf68b95a4029e352fe1ee002bb367ac1b686f9ad

    • SHA256

      c13c6e91b9a517783976de213d46398c661ea9e17651376d7301e839eaedcc62

    • SHA512

      c5d220b758d961bcd8fb28eb285e2a163bb72636aaebc12d2ed6d240fd25707e9ab45c9558621c5d0f1efc5d400c7473ba1422ab0a28e50b941a5ff4b168815b

    Score
    7/10

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral7behavioral8

    • Target

      coinbase/ios/Pods/Target Support Files/Pods-Runner/Pods-Runner-frameworks.sh

    • Size

      8KB

    • MD5

      98c762acc166949f37e67ea6c15bf73f

    • SHA1

      73c51cc85e0330ee2da2a2d0e85d3c78c0037661

    • SHA256

      9b105588a58b9fe1b55c69cc5c980c7628aad08e03bd1785f9996de4baa62279

    • SHA512

      43a30fb88d36740ffc815095aedf96b27f762a3457c7fe4a15b00b7a7dbf7c93a893e6a31f72247c72e4d84a67143318fe6ae7435a74de83a1d1af8c89d569e3

    • SSDEEP

      192:JXl/nTofjGKAQ/da6wizRQ2jw4Aw/dagAb/dakyRgw9dfcEg4+/dax/daBN3mK7r:JXlYCuFCiGw9dfK42N3mS

    Score
    1/10
    behavioral10behavioral11behavioral12behavioral9

    • Target

      coinbase/lib/pages/actual_cashout.dart

    • Size

      2KB

    • MD5

      63cd80f4a95b7234c0781d20df2e1758

    • SHA1

      71691071001a32d0a3b794a522a1a24b8d8e2164

    • SHA256

      13d1bae1c129e366657b0c8c1cda6c78d824871f40b96e53e41c37d6b0d1e98a

    • SHA512

      141940f6109af9bc0dc29966b453b86629d8c638739c82161364222207e2ce2be4c47478d5e7055b599d7644271285d259da1e690fa26c42d932321c8f189bd6

    Score
    3/10
    execution
    behavioral13behavioral14

    • Target

      coinbase/lib/pages/cashout_screen.dart

    • Size

      13KB

    • MD5

      48ffe7b931597f2f68f17f25bd72f6cc

    • SHA1

      5264308768bef0804ff85cc617eefa85f91adc72

    • SHA256

      f623b96601f9525817ab6cffb7291403bd654d4af9fc6d88c439c87d9d5675b4

    • SHA512

      56a15ce6af6f8926544a46d8978b476750f9785d34f8139561f8541adb95d45da6849ceed603e966abff684c26078bce5dbf9b19d0e00cf8a6d6dcb84e8f3939

    • SSDEEP

      192:qCA0O6JkwsGnWTzmqNisrr2ihYrseNrzGSXWe+mzzxyaP1h5T:C0O89nqmEr27tMmthT

    Score
    3/10
    execution
    behavioral15behavioral16

    • Target

      coinbase/lib/pages/homepage.dart

    • Size

      16KB

    • MD5

      5f652326492e477eafd2ab74490ef728

    • SHA1

      37e4eeaa836fd7568b964b22b93361ee9abfcef2

    • SHA256

      6b74ef9c32bc8b2546f2eff4611e81114b272f9c1ee06289b7dd185e75f1509c

    • SHA512

      784b7bdbd1da6e3902fc90dcb38eb513521378cd9d327d318df77a941d5e64672c740d3afc58419d678399768ca35c9ee8d8f8d4d5debf9dc5f24b43d352ee84

    • SSDEEP

      192:79FKsrk/77wwmncbH+Ou0iqQ8SArdDbJRuYgHJ5amz01:RFKhp5b7

    Score
    3/10
    execution
    behavioral17behavioral18

    • Target

      coinbase/lib/pages/my_assets.dart

    • Size

      5KB

    • MD5

      65575943547e94ff625ec4b95c14c4b9

    • SHA1

      6bdbf638faab104093974d5e6e3ed2089891dd89

    • SHA256

      136aeabb573e6b7e8d3984706ea068d18ed3de71c086ea2702d5ef0cd4616c90

    • SHA512

      a1472813ae65937498c29f368b46e012be070d18962746637ec4e86d04143ef82cd6d2b2e234193eac2298c1ae5c6921f3cc5c9efc1f60e82ca3af79e94a570a

    • SSDEEP

      96:L4U3RXRkfRz9eybKLQKlORcW2ny4254DKk47ScFkni:JqfRzAuKh48joScOi

    Score
    3/10
    execution
    behavioral19behavioral20

    • Target

      coinbase/lib/pages/preview_cashout.dart

    • Size

      5KB

    • MD5

      498c2689e1ca297c9a81b3684abce4aa

    • SHA1

      9025d051ab7907728edb7d9656e26fec400c34fd

    • SHA256

      ee528488d57651c85af5657b4324741d39bc49d06cdc6a88b40cec28e991b09f

    • SHA512

      7e26c79a2e1eb1d49d565f3f65cb8359ec520b624ac52cf1b5a82dd0665f6477dcc933fb185c20e7a294aabbc9f967c6d936363158d774abe078ede4226858d9

    • SSDEEP

      96:BkrvSHBNbyxyTBjHbwykwsUDIrOsQ5RfGSa4H6e3A2FvAk7UOkf:BC69LbwJwsgIrI5Rtw2muU1f

    Score
    3/10
    execution
    behavioral21behavioral22

    • Target

      coinbase/lib/utils/balance_controller.dart

    • Size

      870B

    • MD5

      a6f0ddec78c776dfcd4e9923ae30364f

    • SHA1

      ab5e7eb682e9efdfca605a763c77b06d467083ca

    • SHA256

      5b1909cd75a5f87a7b0f8be8ea1034d5900c794ed7154c7dfc50ba6239816693

    • SHA512

      91b566575921509799622d98003bee51318d638e6b2a797ea5db893a763abe50843ae9b6141d79bb704a480434e59a27d2fdb8931e399d4985f31186ceafb54d

    Score
    3/10
    execution
    behavioral23behavioral24

    • Target

      coinbase/macos/Runner/MainFlutterWindow.swift

    • Size

      393B

    • MD5

      da69378dd4558360d3f2132c07003750

    • SHA1

      be3a1a453243414ed678687b63854f9d367f8d0b

    • SHA256

      539813d1b268f5f3fcb53bf9e2858851558a43269732f049f46773a0c6771b0e

    • SHA512

      8a95cba71232d1ef8269731b22b0e865f960f3b739c36a83484ed1905a644a6d64e9e7a80e8b3395e92ca073be912945f40f328bf9cfc07a0bbefb155988648b

    Score
    3/10
    execution
    behavioral25behavioral26

    • Target

      coinbase/web/index.html

    • Size

      1KB

    • MD5

      5a6cadbbc8e9cf23b07095133754a11d

    • SHA1

      c59520d109fdc2d9cf999c75344a910b2bf39633

    • SHA256

      a865b3b46ec3119560ddc2a78d1132a207daa70d7f0173f226ce2cdd2d30546a

    • SHA512

      09f3a3eb1033c0e6642405b397e406f5a21684a0005750ffd9c0d74454f1ef797d006293d010b8f7f618b94ca21e193dcb7fbfebc01bc01ed6e7ccdfd1cd0179

    Score
    3/10
    discovery
    behavioral27behavioral28

MITRE ATT&CK Enterprise v15

Tasks

static1

Score
1/10

behavioral1

Score
1/10

behavioral2

Score
1/10

behavioral3

Score
1/10

behavioral4

Score
1/10

behavioral5

Score
1/10

behavioral6

Score
1/10

behavioral7

Score
1/10

behavioral8

Score
7/10

behavioral9

Score
1/10

behavioral10

Score
1/10

behavioral11

Score
1/10

behavioral12

Score
1/10

behavioral13

execution
Score
3/10

behavioral14

execution
Score
3/10

behavioral15

execution
Score
3/10

behavioral16

execution
Score
3/10

behavioral17

execution
Score
3/10

behavioral18

execution
Score
3/10

behavioral19

execution
Score
3/10

behavioral20

execution
Score
3/10

behavioral21

execution
Score
3/10

behavioral22

execution
Score
3/10

behavioral23

execution
Score
3/10

behavioral24

execution
Score
3/10

behavioral25

execution
Score
3/10

behavioral26

execution
Score
3/10

behavioral27

discovery
Score
3/10

behavioral28

discovery
Score
3/10