23029fc1da174332dd7cd67cb0c4250297ccc9a79f62da52538d4307ca19fb9c

Submit
Reports

Overview

overview

Static

static

Projectsig...pi.dll

windows7-x64

Projectsig...pi.dll

windows10-2004-x64

Projectsig...ct.dll

windows7-x64

Projectsig...ct.dll

windows10-2004-x64

Projectsig...te.exe

windows7-x64

Projectsig...te.exe

windows10-2004-x64

Projectsig...no.dll

windows7-x64

Projectsig...no.dll

windows10-2004-x64

Projectsig...64.dll

windows7-x64

Projectsig...64.dll

windows10-2004-x64

Projectsig...64.dll

windows7-x64

Projectsig...64.dll

windows10-2004-x64

Projectsig...sh.dll

windows7-x64

Projectsig...sh.dll

windows10-2004-x64

Projectsig...td.dll

windows7-x64

Projectsig...td.dll

windows10-2004-x64

TWRP-ROOT-...eD.exe

windows7-x64

TWRP-ROOT-...eD.exe

windows10-2004-x64

TWRP-ROOT-....1.apk

android-9-x86

TWRP-ROOT-....1.apk

android-10-x64

stub.apk

android-9-x86

stub.apk

android-10-x64

stub.apk

android-11-x64

TWRP-ROOT-....1.apk

android-9-x86

TWRP-ROOT-....1.apk

android-11-x64

stub.apk

android-9-x86

stub.apk

android-10-x64

stub.apk

android-11-x64

Analysis

max time kernel
6s
max time network
151s
platform
android-11_x64
resource
android-x64-arm64-20240910-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240910-enlocale:en-usos:android-11-x64system
submitted
15/02/2025, 11:54

Sharing

Copy URL

Twitter E-mail

Static task

static1

vmprotect antidot

5 signatures

Behavioral task

behavioral1

Sample

Projectsigma/ForlornApi.dll

Resource

win7-20241010-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

Projectsigma/ForlornApi.dll

Resource

win10v2004-20250211-en

discovery

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral3

Sample

Projectsigma/ForlornInject.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

Projectsigma/ForlornInject.dll

Resource

win10v2004-20250207-en

discovery vmprotect

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral5

Sample

Projectsigma/Stigma Ultimate.exe

Resource

win7-20240903-en

discovery

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral6

Sample

Projectsigma/Stigma Ultimate.exe

Resource

win10v2004-20250211-en

discovery

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral7

Sample

Projectsigma/bin/Xeno.dll

Resource

win7-20241023-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

Projectsigma/bin/Xeno.dll

Resource

win10v2004-20250211-en

discovery

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral9

Sample

Projectsigma/bin/libcrypto-3-x64.dll

Resource

win7-20241010-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

Projectsigma/bin/libcrypto-3-x64.dll

Resource

win10v2004-20250207-en

discovery

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral11

Sample

Projectsigma/bin/libssl-3-x64.dll

Resource

win7-20241023-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

Projectsigma/bin/libssl-3-x64.dll

Resource

win10v2004-20250211-en

discovery

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral13

Sample

Projectsigma/bin/xxhash.dll

Resource

win7-20240903-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

Projectsigma/bin/xxhash.dll

Resource

win10v2004-20250207-en

discovery

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral15

Sample

Projectsigma/bin/zstd.dll

Resource

win7-20240903-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral16

Sample

Projectsigma/bin/zstd.dll

Resource

win10v2004-20250211-en

discovery

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral17

Sample

TWRP-ROOT-ODIN_a20e/TWRP-ROOT-ODIN_a20e/Odin3 v3.13.1 3B Patch/Odin3 v3.13.1_3B_PatcheD.exe

Resource

win7-20250207-en

discovery

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral18

Sample

TWRP-ROOT-ODIN_a20e/TWRP-ROOT-ODIN_a20e/Odin3 v3.13.1 3B Patch/Odin3 v3.13.1_3B_PatcheD.exe

Resource

win10v2004-20250211-en

discovery

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral19

Sample

TWRP-ROOT-ODIN_a20e/TWRP-ROOT-ODIN_a20e/ROOT/Magisk-v26.1.apk

Resource

android-x86-arm-20240624-en

android-9-x86

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

TWRP-ROOT-ODIN_a20e/TWRP-ROOT-ODIN_a20e/ROOT/Magisk-v26.1.apk

Resource

android-x64-20240910-en

android-10-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

stub.apk

Resource

android-x86-arm-20240624-en

discovery

android-9-x86

1 signatures

150 seconds

Behavioral task

behavioral22

Sample

stub.apk

Resource

android-x64-20240910-en

discovery

android-10-x64

1 signatures

150 seconds

Behavioral task

behavioral23

Sample

stub.apk

Resource

android-x64-arm64-20240910-en

discovery

android-11-x64

1 signatures

150 seconds

Behavioral task

behavioral24

Sample

TWRP-ROOT-ODIN_a20e/TWRP-ROOT-ODIN_a20e/ROOT/Magisk-v26.1.apk

Resource

android-x86-arm-20240624-en

android-9-x86

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

TWRP-ROOT-ODIN_a20e/TWRP-ROOT-ODIN_a20e/ROOT/Magisk-v26.1.apk

Resource

android-x64-arm64-20240910-en

android-11-x64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

stub.apk

Resource

android-x86-arm-20240910-en

discovery

android-9-x86

1 signatures

150 seconds

Behavioral task

behavioral27

Sample

stub.apk

Resource

android-x64-20240624-en

discovery

android-10-x64

1 signatures

150 seconds

Behavioral task

behavioral28

Sample

stub.apk

Resource

android-x64-arm64-20240910-en

discovery

android-11-x64

1 signatures

150 seconds

Report Analysis Logs

General

Target

stub.apk
Size

28KB
MD5

4664604353983e907493d394c1d4ad95
SHA1

c5c69470879a62b049086bdcea57d01d17234d62
SHA256

914f49c2e2f0ed6b4b0b9a336eb3e2fbcd01db0083eea77b15d8df086c4cce86
SHA512

d95e1377037c3dac6a7a77677f967ce6cc89e43d6fe735669a959bc4c0d7b0619123eb51e459b5b22b007ea5b5c3b9e02fa6a3949d1bcfd8dafbb2dad93bf560
SSDEEP

384:YdMwf5mlM2ODF9Jh8LNlj05t25YdOfu7rEwRvTqw/p4CzXjZ2CeWNOR3Pmtk/3ld:WBYl/ODpy/jI17FvTqwO4j0stk/XjC6

Score

6^/10

discovery

Malware Config

Signatures

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.topjohnwu.magisk

Processes

com.topjohnwu.magisk
1⤵
- Queries information about active data network
PID:4790

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads