Overview
overview
10Static
static
10002d23802f...a9.elf
ubuntu-24.04-amd64
006e75ccf3...e6.exe
windows7-x64
3006e75ccf3...e6.exe
windows10-2004-x64
3010b63314e...17.exe
windows7-x64
10010b63314e...17.exe
windows10-2004-x64
10017f252187...45.exe
windows7-x64
7017f252187...45.exe
windows10-2004-x64
7$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3Unmonument...GL.dll
windows7-x64
1Unmonument...GL.dll
windows10-2004-x64
1025a7cc996...12.exe
windows7-x64
10025a7cc996...12.exe
windows10-2004-x64
10026a0d5ada...ed.exe
windows7-x64
10026a0d5ada...ed.exe
windows10-2004-x64
100296e49137...b6.exe
windows7-x64
100296e49137...b6.exe
windows10-2004-x64
100382436149...62.exe
windows7-x64
100382436149...62.exe
windows10-2004-x64
10039b7cbbe0...f4.exe
windows7-x64
039b7cbbe0...f4.exe
windows10-2004-x64
03a0e7298d...43.exe
windows7-x64
1003a0e7298d...43.exe
windows10-2004-x64
10044d4141fa...83.apk
android-9-x86
6044d4141fa...83.apk
android-10-x64
6044d4141fa...83.apk
android-11-x64
60488488429...83.exe
windows7-x64
100488488429...83.exe
windows10-2004-x64
1004ba453903...df.elf
ubuntu-22.04-amd64
8054c0c0eb0...5c.exe
windows7-x64
10054c0c0eb0...5c.exe
windows10-2004-x64
10058c3a111c...0bc.js
windows7-x64
10Analysis
-
max time kernel
144s -
max time network
162s -
platform
android_x64 -
resource
android-x64-20240624-en -
resource tags
androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system -
submitted
21-12-2024 20:29
Static task
static1
Behavioral task
behavioral1
Sample
002d23802f5e90492a340a0202f8082ddf84d3abdb7834bf7cb771c81161e0a9.elf
Resource
ubuntu2404-amd64-20240523-en
Behavioral task
behavioral2
Sample
006e75ccf30448182c69a7f7bc7a4308caa78a87e6d834926599ce6b11e222e6.exe
Resource
win7-20240903-en
Behavioral task
behavioral3
Sample
006e75ccf30448182c69a7f7bc7a4308caa78a87e6d834926599ce6b11e222e6.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral4
Sample
010b63314edf0d096b2c259cfc5b95fe28cae4d983e0ea547e13f8b16ff42c17.exe
Resource
win7-20241010-en
Behavioral task
behavioral5
Sample
010b63314edf0d096b2c259cfc5b95fe28cae4d983e0ea547e13f8b16ff42c17.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral6
Sample
017f252187d69448ce91bef978fabdd931c56a7f57d43ba3557da5c49b133e45.exe
Resource
win7-20241023-en
Behavioral task
behavioral7
Sample
017f252187d69448ce91bef978fabdd931c56a7f57d43ba3557da5c49b133e45.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240903-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral10
Sample
Unmonumented/libEGL.dll
Resource
win7-20240903-en
Behavioral task
behavioral11
Sample
Unmonumented/libEGL.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral12
Sample
025a7cc996fdece05721b7ac336a6e2e614f7a76b59f0a3aff2278e374ac7b12.exe
Resource
win7-20240903-en
Behavioral task
behavioral13
Sample
025a7cc996fdece05721b7ac336a6e2e614f7a76b59f0a3aff2278e374ac7b12.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral14
Sample
026a0d5ada04432b47b8f00e05304f11c2f72374b522d0c906f919d115c4b0ed.exe
Resource
win7-20240903-en
Behavioral task
behavioral15
Sample
026a0d5ada04432b47b8f00e05304f11c2f72374b522d0c906f919d115c4b0ed.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral16
Sample
0296e49137a482b7db3bed7fe16c5ad20b083b20a8ce56b6c42309fff94d50b6.exe
Resource
win7-20241010-en
Behavioral task
behavioral17
Sample
0296e49137a482b7db3bed7fe16c5ad20b083b20a8ce56b6c42309fff94d50b6.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral18
Sample
038243614941cbef3abaa0524ae4c26cef4b8c902b0f674ebc77b04b1e035662.exe
Resource
win7-20240903-en
Behavioral task
behavioral19
Sample
038243614941cbef3abaa0524ae4c26cef4b8c902b0f674ebc77b04b1e035662.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral20
Sample
039b7cbbe00107f02b5004f4e2560b6d3f8c9e7c81a01ddd3c85a3c94b311bf4.exe
Resource
win7-20240903-en
Behavioral task
behavioral21
Sample
039b7cbbe00107f02b5004f4e2560b6d3f8c9e7c81a01ddd3c85a3c94b311bf4.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral22
Sample
03a0e7298d12838300b55acae66e5c132a980bd33ff63703d1657632326db543.exe
Resource
win7-20240903-en
Behavioral task
behavioral23
Sample
03a0e7298d12838300b55acae66e5c132a980bd33ff63703d1657632326db543.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral24
Sample
044d4141fa14d7abac6f282b72e4d4a6f0fec56df3d0d1650e2db3a1a5c80783.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral25
Sample
044d4141fa14d7abac6f282b72e4d4a6f0fec56df3d0d1650e2db3a1a5c80783.apk
Resource
android-x64-20240624-en
Behavioral task
behavioral26
Sample
044d4141fa14d7abac6f282b72e4d4a6f0fec56df3d0d1650e2db3a1a5c80783.apk
Resource
android-x64-arm64-20240624-en
Behavioral task
behavioral27
Sample
0488488429b7776b837be76cef378782ec22ebbd71fe37ae16b3f325e0742283.exe
Resource
win7-20240729-en
Behavioral task
behavioral28
Sample
0488488429b7776b837be76cef378782ec22ebbd71fe37ae16b3f325e0742283.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral29
Sample
04ba4539039a535365ac32abf01cb409f0efbc33545a864865a073e09d7500df.elf
Resource
ubuntu2204-amd64-20240522.1-en
Behavioral task
behavioral30
Sample
054c0c0eb0f5db96a0f5c39dfc6c822377462a12aff74bc86150d450aa880e5c.exe
Resource
win7-20240903-en
Behavioral task
behavioral31
Sample
054c0c0eb0f5db96a0f5c39dfc6c822377462a12aff74bc86150d450aa880e5c.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral32
Sample
058c3a111cb50601c15b4410b3770720b948702207b5ad6492b82e1c4fd310bc.js
Resource
win7-20241010-en
General
-
Target
044d4141fa14d7abac6f282b72e4d4a6f0fec56df3d0d1650e2db3a1a5c80783.apk
-
Size
3.5MB
-
MD5
c126af541f25c0a689dea5f44d598764
-
SHA1
68e1772c5bf7a0db611063205b2b6f90718893a5
-
SHA256
044d4141fa14d7abac6f282b72e4d4a6f0fec56df3d0d1650e2db3a1a5c80783
-
SHA512
eba66c60d7a38a18c57278aefaa7c235fb744b460ed7d9f59724ec68366af6eb6d31333c0be17e92faf91ffefd8629e8e0697771fb13cb3d16cfcb9ad556e215
-
SSDEEP
49152:3/NUASHe5UQtHy1fffEcy317sc1x7B3l0ZL7ZhJqowVSvsEFP2R7QBub9e3g5zpd:vqp6efffnRcj7jGPJqikVQI5Dhpdns3E
Malware Config
Signatures
-
Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock ir.shz.shzkisi -
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
description ioc Process Framework service call android.app.IActivityManager.setServiceForeground ir.shz.shzkisi -
Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo ir.shz.shzkisi -
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver ir.shz.shzkisi
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4B
MD5098f6bcd4621d373cade4e832627b4f6
SHA1a94a8fe5ccb19ba61c4c0873d391e987982fbbd3
SHA2569f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08
SHA512ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff
-
Filesize
16KB
MD5f913bc65ac131d1bc923af2d0d08242f
SHA1374e124d65c2b206cdfa6868457f24ce2dd14e0b
SHA2562ad36b4957d21488e67e92e0e9fca2e3ffe9474c5d4a834c1a704b9eefd4f71e
SHA512ef344198264fd46bde13721959b249f2c3fb8738472ab76e4b215087e7e01b2bbd2ba494980e98a15a1f49207d76a5293fa8fd2d02b9262c5729c824cb5ca537
-
Filesize
16KB
MD586066a651aeee00ffb7ea3eef12c3341
SHA127fb8d75efb3815738aebcdc77372ac8cb963d52
SHA256bd18416006f6c3b2863b39396efcb3433f22765e686ba33c0ad7a541d15344fd
SHA512a16f7735ba324aa8dced10e2b13de3ec216416ccda89d74022464f55202138112cc68bc6d36b0356a0ab0967430f900aa7f55568db7165305a2d3b62c3679db1
-
Filesize
16KB
MD510416e8c6266f8705301c481b9c5160a
SHA141f948d4f8e4128140228c454e59a10ffe419d8b
SHA256f248b0191bd2f76a582db2e74c091db30122281ce2ba0d979778eb78f0254a0b
SHA51273d8c258dd2c2d89624ee56d042e228f13eea0993647e29b81d3b47db40e228ecc6df2f3836f044441a17824416dba0fb7905cba1f73c03c21ab40b787a7ce0b
-
Filesize
16KB
MD59afb52052273a0b2cdc7a978becf19bc
SHA1e6d32c9cc66199d74ccd43dbc29773bc0a78958d
SHA2563c96b404812618bfad529b991c2867a07939bcf0e7eebebf86344a98a2e69d0e
SHA512859cd2f5a84d7c92c642602a76f13f4c74da0427bd49231dc8db4444132d65a84760788693bd02476e118d1f7f2125e28b543552d9ec1822313f8bbdb654f7ff
-
Filesize
16KB
MD5adf6082723784327d7d1b34adf974e7d
SHA1b1502f70eb881a1dfe41139cb719fefb877ee37c
SHA256252defb835b04f4af7c59bde7bd119664e901928f1373171a287897e729cb2a9
SHA512762f146c452e590e0e3015a080e9821b5488551b9cca7a212ceb11a853ddf6b1894c99d09ba20e6691f5078aaa8e17a6ed66dbbe541eaee152978fab6884e27b
-
Filesize
16KB
MD5eb52a90bb70b76e946b62f50b6f7fb85
SHA142d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0
SHA25648472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4
SHA512b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c
-
Filesize
8KB
MD5f84f2bd0718f160ec958972200541c6a
SHA1f986a4c215359749f11e8d2ff893a521f5a4e024
SHA25621009bdddfc22f6bef216182155e39879b1eb731e735e3da4bfc4fe39518eaaa
SHA512c7ecd12e27c8dafc8d0e51dfd5bd0e615545800902edcaa60561ff2d69dc4927ff4a2c7072939417aaa7404118971d14d0cf02b84075b82f66127992dd9135bf
-
Filesize
8KB
MD519af3ba441a72d54aaad89a574a947f5
SHA1eb055c8974a2c3a18e6b09eeca2c7a0ab8fc60c7
SHA2564478734ab0964145f19da9cc6feeac0acacd47462ec4cb38fa51357694a83b07
SHA512e031c26e348c3ee8fbda27d655053518ea6a637e10adf6ca8af01765a02f3b6bf5739154e6a67e3d0c8c407061280056d17087623b94f5f21c1b334bdf602ad8
-
Filesize
512B
MD56c73cd53a98269cd1f8636ac39e3c3c3
SHA12134245973bde587a1a79aaf27ae3fc3a042102b
SHA2562dad1f4d0eabf4509a91e70b900f096714c55eaebce29c186e37e574ded8f528
SHA512ee395b49793e4511620ec0fa942288ec4e618476032f04f8f521bdbf104dfe1f130b977a0609b97f3d5a1e7d472329f2cfa8a92ea68ec3f29170511cab621626
-
Filesize
8KB
MD52c4b6cd9147309cab4acec68b5073b39
SHA14937250479a9e90dd8a88724dd010f2df5bf0f26
SHA25635b1a4f8340c7b0b1d3c5209cfca4cfadbdf3b5a8ae31b7c73d3ce5c6bef3eb6
SHA51278e9baac98584468da75e60e3fe5f53d47e0a65205af6a4d37a31803a1f337cc4f2a174ad202fd50b622a2d068a7769f4a6da5da1dccb3de928dc0e3a338c093
-
Filesize
4KB
MD501d7191e0b7fe4b48917170875b76575
SHA1915115b1dc5c56547693db3526de88ec4be53d09
SHA256f78525650095a2fac3f04165eab5e3b49c50a6e46bab5dfdf0de9ee719282e6a
SHA5121feb4fc281ec3733161f7da29d3b93b055bac2f0a5d279597ee9f5ebfd7086c40ac1b2ca30304ab283038bb6e9148a6bfda37af31764893aba0695e0db394786
-
Filesize
8KB
MD516470bb0bcd1cfc2168fc9b890174194
SHA1ec5623453ab67703d5a7abcddc13be88641558ee
SHA256670049728ea29deee1bb5c47f200d59316e0ba9a70fc51e0fdcc578ba0485d59
SHA5125360a8393f2cca5890935ed4c4c04cb83924399f2a79391a8ac20e8dc9c34e8c8fd5a9987199f10b53162182554f2d415c073fe30c4b19bb64dd02e62a144b68
-
Filesize
90B
MD5519b0aacb8c292eb5ad9219ccdb6971a
SHA17c8c9b559696baa26dd43f4f80c6207120e61e3b
SHA2561f0c1363fe2ffc1dd351a96f4a7e12ae0b5aadda5cf4363ee7ca460ebbe1b670
SHA512c7c243b54b33760a762c1d79d95d6e8a6e91213236b4a99ec15e1a8be2368ff0cdc17e7874079a38cbe7cfb5eb76c4d1ca285cc8620ffefe5a184e72166ddce6
-
Filesize
566B
MD5624919962404af1744520b5574eb44f2
SHA107c5a53720a72674143325e04b1e587f400c7c34
SHA25662e7bd26eb57f15dc1d20aa9e04a599edd13444e68a5ce0f56f252523763e2da
SHA51270d0e2b65f7e8f44a3383b88555ffbc0b1742f106a1a13f520a189f5f80b99e5c44b4bd053e86eb3a3bb46d762c49069046a96391a6b4bc3a41384c87696ce3d