irata | bfd5a9f7a8b34864daa6e8f5fc3fcdbd38f3cf835717cc573390481bb218da21

Sharing

Copy URL

Twitter E-mail

General

Target

fw_ishtar_miui_ISHTAR_OS1.0.15.0.UMACNXM_adc943f023_14.0.zip
Size

167.4MB
Sample

240906-3ysqrathml
MD5

95d007139412754b609aa6715f2a2efb
SHA1

7445fe18307c9efeebbaaa83543d217d81bc9f96
SHA256

bfd5a9f7a8b34864daa6e8f5fc3fcdbd38f3cf835717cc573390481bb218da21
SHA512

c4e95fd8dc0330af46f842bdb16592387e6d49323ef4c9879c478add3b5beebb5da75c56607b235baf853fcbf00c5c499bee2d260031c9c2236644e87a3ecbd9
SSDEEP

3145728:FBwdQe8We6yfBYQFIhxXZmK7DaN/NJiZbjfFUQinDoD6kj0pYO8RHD3AwIAUf9Lb:bM4x6RzxTyJ2bjdiDI6kaYzHD3AwIAQl

Score

10^/10

Malware Config

Targets

- Target
  
  META-INF/com/google/android/update-binary
- Size
  
  185KB
- MD5
  
  d417d27fbe9a99e087f266ccc3ae4bf6
- SHA1
  
  ecb8e12369142a859fbd0147c889e6fa97098a06
- SHA256
  
  0022280640c926a33431b88ebd5b89ef9ba23b93e2989f6e1b70602e1d6fa764
- SHA512
  
  85d3a133c53fa8e486f7acbd81744fee9f3634e023fc0312f973134a938718f7c6ad42edeb43ad9b9e3376e2e1b3014ecf6c6256012261a511fa9d969532421d
- SSDEEP
  
  3072:gXJz/l9XNwbJTy+dpAbC9dSEQ6deKOQq0cqbRe/E8le8dP49evPnSjNPVTBfEFH6:Cz/llNwbJIesgeKW0cqFqht49evetTB8
Score

1^/10
behavioral1
- Target
  
  firmware-update/abl.img
- Size
  
  228KB
- MD5
  
  c4de1389f51fe25e990ca7f147333850
- SHA1
  
  0f28c033fb7951179893ac2ab8a0fcb8220136a8
- SHA256
  
  f1f7a65a535f4e98284f29fd69f48d470e36c7e94a4a44a35416e02bfc1c3680
- SHA512
  
  ceb61b3c46efcbb473cf71c7566a8813414d524bcca6419f4174ca966a6bfa7d850c2bf8c2369f04c6fb8cd15687ccb07705cb4fa92dca9c2f8c9397fe175b43
- SSDEEP
  
  3072:auWwksi3E9pUMwQxvEemx+GwoV19RuTWnp/z/MSkhtB0kbAVc4jsph9oY6SUE71n:6/KksMecOSORkVchpk6N654/08
Score

1^/10
behavioral2
- Target
  
  firmware-update/aop.img
- Size
  
  276KB
- MD5
  
  33de5ccf51df0d86d8002f41ecd850d6
- SHA1
  
  8783e2cb189b839868257a5cf1beb74d98cb903f
- SHA256
  
  f3c41c166da02725e8fb5ac2f991cf7f47af14af3752517b19d38b24d5c25b24
- SHA512
  
  1f6f1794d6671655d9363f981368105daf948a438ab293202f7d2d46f9869f5bc89b52f018669628c5317a062de0f987bbfaac791535476a0d64cc29d934f52d
- SSDEEP
  
  3072:HBJ3U4W+U2EuOUqh13iQaJ307WjyieKlFMDL0/3E+/Ihf+/IwO1QrIurfDSlHQQJ:hJ3i+U2fOhiG7gyie0SYTQ4QSilX
Score

1^/10
behavioral3
- Target
  
  firmware-update/aop_config.img
- Size
  
  16KB
- MD5
  
  66704f997f03f06171d9571bea944622
- SHA1
  
  481989d3e64d24961296faecf035a58633fbb20f
- SHA256
  
  0e0e27171413ad74b1a27831dfbeb6e28a9e6422516cac17c0830e1019673363
- SHA512
  
  1cd50e69086d55af6c66f05d8b3cf7b6283427e4458bc0500cfab4ec9bd3ef7892efa57c52c1cbf630c39770d86e47e550c834bb1467cea34ca41eeed804af44
- SSDEEP
  
  384:pnB+jF1TQPeSVYPJeKCi8rRLxiKtDRQd7Io49QphjrESCi+134bD59N:pnB+jF1TQPeSVYPJeKCi8rRLxiKtDRQB
Score

1^/10
behavioral4
- Target
  
  firmware-update/cpucp.img
- Size
  
  188KB
- MD5
  
  91ca0c36a4977552851c9b689b618252
- SHA1
  
  1b63906ab6876ba2cb2aa85795c3f3402122480e
- SHA256
  
  0652dc172ea9d6c339c8b0074cad9a1a8050b7d90fe450a7008884e6b2ca447a
- SHA512
  
  ec3eb93189fe490b59839778181c24bd6cd15e48164cd32ffc6b9fcc0d7ff615b6a7b837ee976979a9406a49ebdad7c83cd3b992ec2c34a19f72d626431186c6
- SSDEEP
  
  3072:r+5mX87SX7miUdLdiiBSwgZQh7KCl1XeRoVVJoRy:r1nXyJdLdlHUc7xl1XER
Score

1^/10
behavioral5 behavioral6 behavioral7 behavioral8
- Target
  
  firmware-update/devcfg.img
- Size
  
  56KB
- MD5
  
  1acbbe72c7f99d8a10cd33cda34770ef
- SHA1
  
  6e4d69c2c0a6cd72e1445147656399f0588c0497
- SHA256
  
  026f56d95dfe1e0de46f08d7a2ac911c4f5acd445238a8c7e44fb1142211efc7
- SHA512
  
  88058cf7273fd6c8f81b966e2fe9073f6c61a081cffdf4f679bc87286de11a655a8c488d1d2411ba55b2a9acbe6d941a264f8e5bdcec91e087d3391f12796ddf
- SSDEEP
  
  768:osDTcqHQBgBsDTcq9b2f/xoDDjTjwZ/W/i+GCnnXXnGjT:os2gBshIoDDjTjva+GCnnXXnG
Score

1^/10
behavioral10 behavioral11 behavioral12 behavioral9
- Target
  
  firmware-update/featenabler.img
- Size
  
  96KB
- MD5
  
  5e26b7d2e7c2898441a37c95c2f92ef8
- SHA1
  
  9d1100bfd73bf4259bcfb8b0c193e249e380a994
- SHA256
  
  7855fc4b87f850761c2f6a1d53f87786f60adfc08719f7dd84c68b2aeafddfbb
- SHA512
  
  75328d72d28d3957087f0f99925f9dcb12a738ac9ac85bdd101594ad8566125b75f439684b6b4847094975555ae6031684be867f360a9490671a1abf1937b11f
- SSDEEP
  
  1536:YPl7HHGK9+w79qI0LusRsi51NvQo2yzx21M:YPxxbeLuzi51Nvr2Uv
Score

1^/10
behavioral13 behavioral14 behavioral15 behavioral16
- Target
  
  firmware-update/hyp.img
- Size
  
  1.4MB
- MD5
  
  2fa560fa597accaff7969a5e94e86fed
- SHA1
  
  a493d68e55db1d080c3ec62e5a7201fbfc21dd3c
- SHA256
  
  7913b55d2e8cbcbee147d2bb7a24c7618c6202da52f3b5229a62826e718e9440
- SHA512
  
  a4c75962e968434d4f693b7539508c0470812e89c29f7fd9b53063ec264d0dd2ba182736ac31b435b9ec86be7db589eafa80e21a9946939aefed104f77ff1ecc
- SSDEEP
  
  12288:S3QwMiKwKLeahlLkzQLrKG5a2OKCDZziVh4yS2Lde/DXyrGollVz4HOhciVvwciH:rThoQLrE2CNziQIY/e3vVzvciZ
Score

1^/10
behavioral17 behavioral18 behavioral19 behavioral20
- Target
  
  firmware-update/imagefv.img
- Size
  
  6.0MB
- MD5
  
  4bcb8b012e37152773b6cba4276dadde
- SHA1
  
  9b8e83fec7863c763e6c81f60fd4560ec2dd7108
- SHA256
  
  87b3c1578e58678ba7953cdcd979dbec5867061f7f00f7aa2001f944ad28bed3
- SHA512
  
  bd460ab4253073919a22bb479cb95d62590422570677437867c4cbeb6570f1ce0f4b15a325126ef31e6e0e87ecf09603a104339a0d74bf76e2b7f22ee0e5d4d2
- SSDEEP
  
  12288:AuUpUlae4KZ+Vcd4Vl+tNBKPi0dlWBOQeKCPhgwvVwp+Nvqg:ife4K8VcHtcDd0Bolpx3i
Score

1^/10
behavioral21
- Target
  
  firmware-update/keymaster.img
- Size
  
  400KB
- MD5
  
  2ff75fe6a0ad633684609bcaeca83b4f
- SHA1
  
  236bd645606e228d6e61945fe97d009af49bd1ed
- SHA256
  
  f7423c95b92b7c2518cbee66336e7d719185cf641b2207daeca142db251bb417
- SHA512
  
  c15042d9e3670136bd4a180085617e3aa58d64557ef2ca0e8270ddf87cc65bed5181cbbe9fc4be092bf9348d3928104f51200fe8d8ad26a67361311e0a0d93c7
- SSDEEP
  
  3072:BqI8Yng+Kf13otLUYdBAsS+cS66OE90KN4FOB1ZXbh6RewoA4ptW2dCDXIboG+vu:UIhaN4t6wcKfKkBz2SA4u2dt+veatk
Score

1^/10
behavioral22 behavioral23 behavioral24 behavioral25
- Target
  
  firmware-update/modem.img
- Size
  
  351.7MB
- MD5
  
  7db290a2d12b0dc79a908c28d2c2955f
- SHA1
  
  8ba7f8e46c6455840a052681cc0f838293bcb960
- SHA256
  
  6170e14738c88ac1f298ea28fbb61a19ba9d4613b5fbeabd26c1d73be51855ea
- SHA512
  
  905296c3881a5ae92fe7c03d1f574c122e885ed9e8b11579b1c0961b71433527c0f8882a7137037a1e10adce30181204b1e4866dda6a7df8ab6e19853a94d464
- SSDEEP
  
  6291456:hbfvg9Y4bSzQThpsECNYovUSjMEYNI/Z:5vuY4bSzQTLsEKASjMZ
Score

3^/10

execution
behavioral26 behavioral27
- Target
  
  firmware-update/multiimgqti.img
- Size
  
  12KB
- MD5
  
  f2d538965cf74c89e1b7285c5a9aa195
- SHA1
  
  c06fb917c958d5002a41414d9db18bc158831a61
- SHA256
  
  8a3d39667a617b54aaa8944df035e81c6e5b45a3d4fe3db37a0ad6f4271dad11
- SHA512
  
  1e2ce0642be326c6eaa9b93094822e1526c50169a7a39992ab39a2901498c8409e9fbea04bde411e047d4c315b34e6086dac62e06dd9b84a7d73447c9e11f0ef
- SSDEEP
  
  48:Mgzw7NorcfbgPK2hZUmE3EKmaBixIdcqaZUuE/TNZUmEIynyhZUuElBZUuE6TK/Z:Mx7ccl6yPEK/Ay8ybNyAynyhyHyKTi
Score

1^/10
behavioral28
- Target
  
  firmware-update/qupfw.img
- Size
  
  56KB
- MD5
  
  9336be74cc429221ae38466cb8f6ea7a
- SHA1
  
  458c3c3ef80fc04ed1a9dfdaeea88b9a3493f311
- SHA256
  
  cca40488c03c9e73b232beee82fd74b63611237fe6773df1616786c486d095ba
- SHA512
  
  564cac3625112e5e610db296507c585074041f81637abeff236b0b952cf3df9fb5f617b29e71da16ba8b57ab5556edf160c03110b658f3d124fabd03be4a91be
- SSDEEP
  
  768:i9Xm5iYUJA+cgl3EF8MoIUBINTSv5TtD:iJJPcgG6ZBkS
Score

1^/10
behavioral29 behavioral30 behavioral31 behavioral32

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32