Errors

Reason
error processing APK: could not decode AXML: xml: end tag </permission> in namespace http://schemas.android.com/apk/res/android does not match start tag <permission> in namespace

General

  • Target

    c01b1e7fdd3f14fd99523c71da4ce97497b4262065a6f29d9251b26cab7e03bb.tar

  • Size

    10.2MB

  • MD5

    a4d9843cc8166e0543d309cc47e3f46a

  • SHA1

    d7612c1831b3321e97d890de0387df12b5c57fa3

  • SHA256

    c01b1e7fdd3f14fd99523c71da4ce97497b4262065a6f29d9251b26cab7e03bb

  • SHA512

    5a3ee382f32e3e3e5058a56841ab71441f23bf250784563e68fa84c1638bcc5762335432d118b7996c323162f8d8bf980bc1042ccc7ac91f13cc6f871c54afa3

  • SSDEEP

    196608:RDH6rsox3zJUEKBHjVoeW3+Jp3wkETTV0wRDByc9YZSrd+TDD:BaQoEHBoeW3Ap3wkoTV0pKYZSZ+Tv

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

255.255.255.255:1900

194.48.250.133:23

Extracted

Family

mirai

C2

hou.zu0x.com

Extracted

Family

mirai

Botnet

CHARYBDIS

C2

216.219.94.5

216.219.94.57

Signatures

  • Detected Gafgyt variant 2 IoCs
  • Gafgyt family
  • Mirai family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c01b1e7fdd3f14fd99523c71da4ce97497b4262065a6f29d9251b26cab7e03bb.tar
    .tar
  • 27960730119663739
    .elf linux sh
  • 32825050225637941
    .elf linux mipsbe
  • 35616602442412040
    .elf linux arm
  • 40378277128495512
    .elf linux sh
  • 45331149853509989
    .apk android
  • 56618521379097511
    .elf linux arm
  • 99971917023891412
    .exe windows:6 windows x86 arch:x86

    5fca035c1d9772fed59e3f04779695b2


    Headers

    Imports

    Sections