Overview
overview
10Static
static
10002d23802f...a9.elf
ubuntu-24.04-amd64
006e75ccf3...e6.exe
windows7-x64
3006e75ccf3...e6.exe
windows10-2004-x64
3010b63314e...17.exe
windows7-x64
10010b63314e...17.exe
windows10-2004-x64
10017f252187...45.exe
windows7-x64
10017f252187...45.exe
windows10-2004-x64
10$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3Unmonument...GL.dll
windows7-x64
1Unmonument...GL.dll
windows10-2004-x64
1025a7cc996...12.exe
windows7-x64
10025a7cc996...12.exe
windows10-2004-x64
10026a0d5ada...ed.exe
windows7-x64
10026a0d5ada...ed.exe
windows10-2004-x64
100296e49137...b6.exe
windows7-x64
100296e49137...b6.exe
windows10-2004-x64
100382436149...62.exe
windows7-x64
100382436149...62.exe
windows10-2004-x64
10039b7cbbe0...f4.exe
windows7-x64
039b7cbbe0...f4.exe
windows10-2004-x64
03a0e7298d...43.exe
windows7-x64
1003a0e7298d...43.exe
windows10-2004-x64
10044d4141fa...83.apk
android-9-x86
6044d4141fa...83.apk
android-10-x64
6044d4141fa...83.apk
android-11-x64
10488488429...83.exe
windows7-x64
100488488429...83.exe
windows10-2004-x64
1004ba453903...df.elf
ubuntu-22.04-amd64
8054c0c0eb0...5c.exe
windows7-x64
10054c0c0eb0...5c.exe
windows10-2004-x64
10058c3a111c...0bc.js
windows7-x64
10Resubmissions
10-11-2024 21:28
241110-1bhk6avgrr 10Analysis
-
max time kernel
4s -
max time network
148s -
platform
android_x64 -
resource
android-x64-20240624-en -
submitted
10-11-2024 21:28
Static task
static1
Behavioral task
behavioral1
Sample
002d23802f5e90492a340a0202f8082ddf84d3abdb7834bf7cb771c81161e0a9.elf
Resource
ubuntu2404-amd64-20240523-en
Behavioral task
behavioral2
Sample
006e75ccf30448182c69a7f7bc7a4308caa78a87e6d834926599ce6b11e222e6.exe
Resource
win7-20240903-en
Behavioral task
behavioral3
Sample
006e75ccf30448182c69a7f7bc7a4308caa78a87e6d834926599ce6b11e222e6.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral4
Sample
010b63314edf0d096b2c259cfc5b95fe28cae4d983e0ea547e13f8b16ff42c17.exe
Resource
win7-20240729-en
Behavioral task
behavioral5
Sample
010b63314edf0d096b2c259cfc5b95fe28cae4d983e0ea547e13f8b16ff42c17.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral6
Sample
017f252187d69448ce91bef978fabdd931c56a7f57d43ba3557da5c49b133e45.exe
Resource
win7-20240903-en
Behavioral task
behavioral7
Sample
017f252187d69448ce91bef978fabdd931c56a7f57d43ba3557da5c49b133e45.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240903-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral10
Sample
Unmonumented/libEGL.dll
Resource
win7-20240903-en
Behavioral task
behavioral11
Sample
Unmonumented/libEGL.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral12
Sample
025a7cc996fdece05721b7ac336a6e2e614f7a76b59f0a3aff2278e374ac7b12.exe
Resource
win7-20240903-en
Behavioral task
behavioral13
Sample
025a7cc996fdece05721b7ac336a6e2e614f7a76b59f0a3aff2278e374ac7b12.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral14
Sample
026a0d5ada04432b47b8f00e05304f11c2f72374b522d0c906f919d115c4b0ed.exe
Resource
win7-20240903-en
Behavioral task
behavioral15
Sample
026a0d5ada04432b47b8f00e05304f11c2f72374b522d0c906f919d115c4b0ed.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral16
Sample
0296e49137a482b7db3bed7fe16c5ad20b083b20a8ce56b6c42309fff94d50b6.exe
Resource
win7-20241023-en
Behavioral task
behavioral17
Sample
0296e49137a482b7db3bed7fe16c5ad20b083b20a8ce56b6c42309fff94d50b6.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral18
Sample
038243614941cbef3abaa0524ae4c26cef4b8c902b0f674ebc77b04b1e035662.exe
Resource
win7-20240903-en
Behavioral task
behavioral19
Sample
038243614941cbef3abaa0524ae4c26cef4b8c902b0f674ebc77b04b1e035662.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral20
Sample
039b7cbbe00107f02b5004f4e2560b6d3f8c9e7c81a01ddd3c85a3c94b311bf4.exe
Resource
win7-20240903-en
Behavioral task
behavioral21
Sample
039b7cbbe00107f02b5004f4e2560b6d3f8c9e7c81a01ddd3c85a3c94b311bf4.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral22
Sample
03a0e7298d12838300b55acae66e5c132a980bd33ff63703d1657632326db543.exe
Resource
win7-20241010-en
Behavioral task
behavioral23
Sample
03a0e7298d12838300b55acae66e5c132a980bd33ff63703d1657632326db543.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral24
Sample
044d4141fa14d7abac6f282b72e4d4a6f0fec56df3d0d1650e2db3a1a5c80783.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral25
Sample
044d4141fa14d7abac6f282b72e4d4a6f0fec56df3d0d1650e2db3a1a5c80783.apk
Resource
android-x64-20240624-en
Behavioral task
behavioral26
Sample
044d4141fa14d7abac6f282b72e4d4a6f0fec56df3d0d1650e2db3a1a5c80783.apk
Resource
android-x64-arm64-20240624-en
Behavioral task
behavioral27
Sample
0488488429b7776b837be76cef378782ec22ebbd71fe37ae16b3f325e0742283.exe
Resource
win7-20240708-en
Behavioral task
behavioral28
Sample
0488488429b7776b837be76cef378782ec22ebbd71fe37ae16b3f325e0742283.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral29
Sample
04ba4539039a535365ac32abf01cb409f0efbc33545a864865a073e09d7500df.elf
Resource
ubuntu2204-amd64-20240611-en
Behavioral task
behavioral30
Sample
054c0c0eb0f5db96a0f5c39dfc6c822377462a12aff74bc86150d450aa880e5c.exe
Resource
win7-20240903-en
Behavioral task
behavioral31
Sample
054c0c0eb0f5db96a0f5c39dfc6c822377462a12aff74bc86150d450aa880e5c.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral32
Sample
058c3a111cb50601c15b4410b3770720b948702207b5ad6492b82e1c4fd310bc.js
Resource
win7-20240903-en
General
-
Target
044d4141fa14d7abac6f282b72e4d4a6f0fec56df3d0d1650e2db3a1a5c80783.apk
Malware Config
Signatures
-
Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock ir.shz.shzkisi -
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
description ioc Process Framework service call android.app.IActivityManager.setServiceForeground ir.shz.shzkisi -
Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo ir.shz.shzkisi -
Reads information about phone network operator. 1 TTPs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver ir.shz.shzkisi
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4B
MD5098f6bcd4621d373cade4e832627b4f6
SHA1a94a8fe5ccb19ba61c4c0873d391e987982fbbd3
SHA2569f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08
SHA512ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff
-
Filesize
16KB
MD5a18476e1e4cbdee0b089f88cce0be35c
SHA15fc556d9e233e5f121f7b2c599287ccb500d3560
SHA256e2b6e4dc21df0460ad85221d53ff516f6d90ce9090f6e0fc22087fe5b25d69c4
SHA5122acd8b2a768ea0450566d274a369afd995eb47b37abb7f64ddf766dc8f8ff526463c28b05e99722823f7251bd6991113ae28fabd4eb72c0c792508135f547184
-
Filesize
16KB
MD58488aeb2817c3581845e3cdb0cf2ca7d
SHA1046116b1328b40d7ad47ba5da6cd29c036aa27d1
SHA256d05ad4c9191ab04886b9b0f049f38524c464e22740a2f9d69a86d3314d7389fc
SHA512b68cf8f64c48a908a37b828135b425191647069a260be1110396a6afa4461f0ea758649ce07c640c8d3afcd8b7904a3214c06d1eb489ad19299b9bb03f862b82
-
Filesize
16KB
MD516acd2761dc7f8aababafdc9f44f8038
SHA18045af00b8472960518f040ec35affa71497b4f2
SHA256049a9885f32a0dff7503b47ac3a9765b1263e757687dc56e9ee312b25b52870b
SHA5120c0bee1dcdb6e6cc256140c8d691850ef17a9d7cebc796c3a8dd1fbb4bfa1bfc17a18d966f7da90b4fca83a7666b8bfd85f3c0e6372d04f7bc66c9278ea1700e
-
Filesize
16KB
MD5875c89e7d635fa43875a4643122948b0
SHA1e705091f04f723b52e7b0abd4455789e6d1eee66
SHA2560316ef253030d238ff496d0f77eee9b7ce98d637ece967becc6f05ad315deeda
SHA51203c556c3bb60563a02830759c50c9efac99aa2e62a04124d5ec56033d404ea9819aab0177fa94cc72fbec267d04b455b429566b3026ca55d87106a944b1871d5
-
Filesize
16KB
MD5eb52a90bb70b76e946b62f50b6f7fb85
SHA142d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0
SHA25648472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4
SHA512b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c
-
Filesize
8KB
MD599f3775fc75af2fbc67288bd2866a2c4
SHA1ea452d4171cbbd7730aa6884594227f3324dcc7a
SHA256e93cc1053caad7f79f695cadd330ddbaf971e93aafab2f606e9fe33a05055cb3
SHA51240f6799670be1cb1791bd7f0e9d872be1a657f6b693df51aed5fc04c97cd757bbee197ecd728c3b9da8e10749c913145a155d3f5fe8bacffe3423bc64a1d78be
-
Filesize
8KB
MD5dbcf7da5cb777e737e8079a1663c442b
SHA18c03057fb1a31ba18ae69106e8d4f147ff39fb49
SHA256269ba4dbd36f118170a1786b98cdf95f415509b63bce49dddd36f205d79df7fb
SHA5124363854b718d2617b67bbbf64fe6c9368f3c5e26fcb3e85475b1fd7d1d1cd3a6bf8c2b1ece6619c9dafde2171aeabcfb202b1d15eaeda410c42ee50afea23eb0
-
Filesize
512B
MD5ff7f5f2812cd1a656e20ebee0d220fe1
SHA1a1c406193f19fc84dff9b88cea21316ff740674b
SHA2563da55efe931bb57c9dd1ea979a994ebfdb602799087ba8367557876ff2fd88af
SHA512d5b8472b9e7dec036af4485eb8fae9b581d064a3b0e25782cab0fdf762e288fb4f3344afe743b25e10c58a008286be168f4bf1c82875a3180e49466b05d87b7d
-
Filesize
8KB
MD56e74067cbb59aa650228cf973b33b5c4
SHA1b9ce0eb90adeb59b8dfc455b02c3c99dcac57b3a
SHA25665fd7cdc5c33eb1996f45ca003b1f2ba426ea2573eadbcde553d19bfc1bfcd8e
SHA512b6f6be2fd277f4ee42b6d983db876a9aee59afe3edc731c5b42a418731483cd3cf710897e74e07f7fbe02f3971ad45086e4ff3f031931194bf9fcc479de16c3c
-
Filesize
4KB
MD5993242b29a419056e93bf03423aa93c7
SHA1725a91b60f456da36d50ce1726159809611a06e2
SHA2561ba9606f93a1f6a8f27ec6063749da700c95ed5a11be28d36a086ff898b13906
SHA512501be54df753b528a0d80b980eb0c704dff450a2a4d4de258ca49f17e05ce1b5e23f08cd906eafde6358a9b30979c836c678f47e8e80b2eb66051169a29ad81c
-
Filesize
8KB
MD5a11d2508214ceb5dabc47cddb0923ca2
SHA16adab96533dc48895b0946018c580d7c2635c040
SHA256c4ac1019b032cf9d83f81d051d495930115b1cf661a36fb408100f1ec204697d
SHA512b4efa04d211a90d384ddd2a0bd3dd75101f728b359a6dadd746c0013563e1ef0154001efecea2a74290f6fc5361dbf8e63d77c00c77e5f12fd2669e7ef5fdf4f
-
Filesize
567B
MD5be1ad69a05127a78ae9c478ea46aa08f
SHA14a82e28e35fc145d70da578574e3594eaabd6e24
SHA256120320e3f99d5afca9ba06025a918411f54e5002ba1dd11dc47343c2d8fda5e1
SHA512159a4b69fb5687af8d1bd6618a51bccf518bb9c5b174ccac318079bc1d7d1ec90f5bfb508b870904a8b114d3896f6b8c02f65a3750bd1ed53f3b810f61fb49f4
-
Filesize
90B
MD5f564f8293a761308ae03a568ea9abf78
SHA18fd1edef786e42da29b0a73c0f38ae716bbc9241
SHA256706d071244d48d600d9006c55b4ff61f0d6413adc1d8d853c60af062179aecf1
SHA512e8291dfcc1c84f89fd45e80fd77ab7ca007223b47cb6d0eac5bd3e8f7b8cbb4f88b0f318004c6d19af8f7e423d3065267eafde669034181628efa6943a1e029c