Resubmissions

20-09-2024 03:12

240920-dqpxfsvhqg 10

04-09-2024 02:22

240904-ctxk2atclk 10

04-09-2024 02:21

240904-cth3msvdqg 10

04-09-2024 02:20

240904-csezlavdnc 10

General

  • Target

    WALiteX1.30.1Clone_By.WALiteX.apk

  • Size

    74.3MB

  • Sample

    240920-dqpxfsvhqg

  • MD5

    dd360bb946a2cfc835dc82246acb5485

  • SHA1

    52ce2853276b4f1643dc20aa2cd1989a6ede8741

  • SHA256

    0fff458c0166d923d7a63b036e9d6353a4afde4bb89b7de09048a8fa146e8417

  • SHA512

    6da75042eee2a4ead2a2ad829142c3d0bc17af551191b7d9de21f3e978db53c1b71ce3b765dbe7bd2f4b4b8921f6296feba1f26d558ed12f7e114d1d703adbce

  • SSDEEP

    1572864:vI24ehVGHfbu4znXc/B46+uKgyWzitw8kZkrNLicLPL:vI24dHfbu4znXUR+uKg07gSPL

Malware Config

Targets

    • Target

      WALiteX1.30.1Clone_By.WALiteX.apk

    • Size

      74.3MB

    • MD5

      dd360bb946a2cfc835dc82246acb5485

    • SHA1

      52ce2853276b4f1643dc20aa2cd1989a6ede8741

    • SHA256

      0fff458c0166d923d7a63b036e9d6353a4afde4bb89b7de09048a8fa146e8417

    • SHA512

      6da75042eee2a4ead2a2ad829142c3d0bc17af551191b7d9de21f3e978db53c1b71ce3b765dbe7bd2f4b4b8921f6296feba1f26d558ed12f7e114d1d703adbce

    • SSDEEP

      1572864:vI24ehVGHfbu4znXc/B46+uKgyWzitw8kZkrNLicLPL:vI24dHfbu4znXUR+uKg07gSPL

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Acquires the wake lock

    • Legitimate hosting services abused for malware hosting/C2

    • Queries information about active data network

    • Reads information about phone network operator.

MITRE ATT&CK Enterprise v15

MITRE ATT&CK Mobile v15

Tasks