antidot | af26d6133f5729cfb029d129ca8bab77e9d7bb2903565ba2389f657e7d1e2a91

General

Target

magisk-delta-r65c0a20a-kitsune.apk
Size

12.3MB
Sample

241220-t8gxkazrcp
MD5

81a390f63cb70395ee3fe9d1111bfb23
SHA1

30c35c5a52238b16314ea21a82aa5e6505330ebb
SHA256

af26d6133f5729cfb029d129ca8bab77e9d7bb2903565ba2389f657e7d1e2a91
SHA512

6a35f7cfe809a3f3be7905fa1a1e2309a6890c2e0d599b12e3af079f7f7c48c1342de4e1c463179f6f41a33995caa396d710901917cf69277e9b0583d8b648b1
SSDEEP

393216:PJ9up2QBRMcipBPswoDRLowWNBAo1+Prm:iBaTdswWRLovNBH+m

Score

10^/10

Malware Config

Targets

- Target
  
  magisk-delta-r65c0a20a-kitsune.apk
- Size
  
  12.3MB
- MD5
  
  81a390f63cb70395ee3fe9d1111bfb23
- SHA1
  
  30c35c5a52238b16314ea21a82aa5e6505330ebb
- SHA256
  
  af26d6133f5729cfb029d129ca8bab77e9d7bb2903565ba2389f657e7d1e2a91
- SHA512
  
  6a35f7cfe809a3f3be7905fa1a1e2309a6890c2e0d599b12e3af079f7f7c48c1342de4e1c463179f6f41a33995caa396d710901917cf69277e9b0583d8b648b1
- SSDEEP
  
  393216:PJ9up2QBRMcipBPswoDRLowWNBAo1+Prm:iBaTdswWRLovNBH+m
Score

7^/10

evasion
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Legitimate hosting services abused for malware hosting/C2
behavioral1
- Target
  
  stub.apk
- Size
  
  32KB
- MD5
  
  7265e4e99399f8960ec63cc2502e197c
- SHA1
  
  34c8821f25981cd70b4c0b1c96a75f82502392ae
- SHA256
  
  3ff273b12b0fdbbfa7b3872ae7f4bbd4ea142461d595794cb1a9fa30b11ef4f0
- SHA512
  
  d8065f0bfe2d2d03d28e875ab77809416254486b7215ba35d19c15742eba93e2adf08a6e866825eaebbae5475bcabe0e9e8dc860baea5882acba4a682bcd437c
- SSDEEP
  
  384:tgekVpPLEa5PPIH7nt+LqNcorykhOngCD/nbhahX/GFghu+iNvPK5fsN37/hTZ5G:tyVpP4CPhqN9/Crb0hX/L8yFsNj0
Score

7^/10

discovery evasion
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Legitimate hosting services abused for malware hosting/C2
- Queries information about active data network
  discovery
behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

1

T1102

Exfiltration

Impact

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

1

T1407

Credential Access

Discovery

System Network Connections Discovery

1

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Loads dropped Dex/Jar

Legitimate hosting services abused for malware hosting/C2

Loads dropped Dex/Jar

Legitimate hosting services abused for malware hosting/C2

Queries information about active data network

MITRE ATT&CK Enterprise v15

MITRE ATT&CK Mobile v15

Tasks

static1

behavioral1

behavioral2