sandrorat | 8b7bff2715dee23710988de3faeb61b655ab01f2c9c970a4c1fe032416bac115

Resubmissions

09/01/2026, 23:56

260109-3y83qsfx6a

26/04/2025, 16:21

250426-ttnfssylv310

Sharing

Copy URL Twitter E-mail

General

Target
gf.zip
Size 18.5MB
Sample250426-ttnfssylv3
SHA256 8b7bff2715dee23710988de3faeb61b655ab01f2c9c970a4c1fe032416bac115
MD5 b693a32ea296a6acfc02c4bfb1494086
SHA1 67e920c40fb63295c0943062e26cccc84f725a4f
SHA512 24e8d1b07c2c04ae2c09d5d29762815ad1ffa3953cdf27ddf8d2314665c8a7ee2ab5370f36adfcd436695a3c304402f02b7747feb05213d581a1eac2b8c14ca7
SSDEEP 393216:df1M/4isrVQySMZLZIlqdHDsJxPXCNgMK11B2J/+KXA:df1M6ZQNIZyqdo3PXCNTKPVX
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

Malware Config

Extracted

Family

sandrorat

majdazar.ddns.net:1337

Targets

- Target
  gf/7107AC3BCCD8DB274B21F0E494E3ECCC.apk
- Size 1.9MB
- SHA256 1a8c17ad1a790554278b055bdb946d4597ba9af6be3611ee6311b90c7f7848c5
- MD5 7107ac3bccd8db274b21f0e494e3eccc
- SHA1 cae09a665075ce3f36347ffbb2ab3143d8183f67
- SHA512 473fd5e2334d4433ac3a27d395b4952c576e140d956cf16d1ca49e712bd47fec908962179f8ec4cf3ebdeb4e8d3f0432e0a37101967e6601e6ea5b0565002b2e
- SSDEEP 49152:T3O1oHbo+XLhW6Wk3/rhYIdh3GhUpeBVe:rBH9L0Dk3/3r3aVe
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral1 behavioral2 behavioral3
- Target
  gf/7F5D728119951839B46895808107B281.apk
- Size 1.9MB
- SHA256 7b1ac3a8caa556c9208d4db62395cca2f8a53420e5d51a1537bc45622e41b63f
- MD5 7f5d728119951839b46895808107b281
- SHA1 137219a5de551d2594899c3d208cdf9d1dbc43ab
- SHA512 20eb55e3fa949ec483bc7159ae0cfc7b7a6386771191f75e928be95607ba02aca40c03f5174981ae8911e7ebc057a84c64abbad6cb1cbf8ffd8c9d178ea8e7c8
- SSDEEP 49152:T5GYWYc+DBlh8AJN7FA7Op6o4sY4sYe1hYIdh3GhUpeBw:VRDc+DhrpX3Y4szhr3aw
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral4 behavioral5 behavioral6
- Target
  gf/8A563B6AF3CF74C8CBB88B99E104D949.apk
- Size 1.9MB
- SHA256 3b61e0bf8eef614c6a6b8d9bf09b78e4c3db5bfabcdd8888d1042b5fd28959fe
- MD5 8a563b6af3cf74c8cbb88b99e104d949
- SHA1 40ffae41446ab00552274d487545c4d88b24f5e3
- SHA512 1e7a5e05e106d43a5d7e815fdbe5cb4c09cd657929b7d4cb723b957b18740c0782085558ebc937136499e074c35e94c3c85a7d3f2e2ff7787b2a1d2ef7d354e6
- SSDEEP 49152:Y6Cd93tVSA863MlNmz/OAzz7jlBzYIdf3IUpedr:JCL3tVSAhMLmTt75LB3ur
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral7 behavioral8 behavioral9
- Target
  gf/AprCerberus/0f3c4594f761570c38484ac37c0ec52f.apk
- Size 1.2MB
- SHA256 64f9d97353ef326a58622f329097a282a5a09e0ab636136fb9cb3ab716f5664d
- MD5 0f3c4594f761570c38484ac37c0ec52f
- SHA1 78f85545e92515f3b016d28df7d39828259056f0
- SHA512 344acff9322a72279bb1183378feea438575cc440fc6063dde61e27dcd7fbd92ae9a76b342035e86c384350f64cdea6a33560e419e6a955d4fc51794c54d0006
- SSDEEP 24576:r87rfoIVzz8VMnapL2359mnHksmwZ8o4KDMsIiHsWRmGo2KPKe0:I7rfoIVcMnahkPmnHkGJ/1rHBRmGNKP8
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral10 behavioral11 behavioral12
- Target
  gf/AprXhelper/57cb18969dfccfd3e22e33ed5c8c66ce
- Size 282KB
- SHA256 26c239e2dcd27c5f6de3e86059e9f83eb5b90900426bc83f748cf83c04ff47f4
- MD5 57cb18969dfccfd3e22e33ed5c8c66ce
- SHA1 bd15081df6c73698ac0b62fb8a6ce7d5ebf08409
- SHA512 faa104f74428aa114806fe95f16cf53b14f485291600fa0e519bc5f44eed61106bd3dee4ad58061e77147ffb9a24dc9922f2e201ca4edcde80cf9019493715d5
- SSDEEP 6144:sFDzvJoFdHuN88uAsKIpVKVsyhqgmjG5GEeUD8VbASL:azxoFdiPIHKyyRmjG5GvAK
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral13 behavioral14
- Target
  gf/AprXhelper/59acb21b05a16c08ade1ec50571ba5d4
- Size 2.0MB
- SHA256 a860621ca11cd660118a4127c12e91b64f3dca7caea137b2a15b39001184b203
- MD5 59acb21b05a16c08ade1ec50571ba5d4
- SHA1 f699d868943fda3bbf989c97d5fb0fb35e6b7020
- SHA512 e4180316ed1e0bc29ef602b9cd40a860b8d9a3599eb876cd7b8e108c7cc5ea92d506ad49925036e5da70d30d2063aff0c07994e3a19100ed857b22f32e612cb3
- SSDEEP 49152:TgvGeDUhVJjA6iHupKfDTv1JdKIuLRhO4:BeDUPJcdZ8c4
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral15
- Target
  gf/AprXhelper/b5ccbfd13078a341ee3d5f6e35a54b0a
- Size 225KB
- SHA256 8ea51f4b8b3e8709bccdf9e73d3c8d5099446c1352f0f656a16086ffcb1351ba
- MD5 b5ccbfd13078a341ee3d5f6e35a54b0a
- SHA1 14cc7408ed22f1c6ebec335c69ca4e7871162350
- SHA512 ebb30b2728cf460a059e86de1626949fe1508f83fb4bc3259eef4be763a09cbcf48acb94e931940b24f412bf6bf802fa0df21b95994fa0d1c08c921b59392cfa
- SSDEEP 6144:B6xTp+ZNsQ0mDWYNcPm4Lb0ACpcVdu1KFenvrKZDQUjo5A3G:Kp+tUm40nMY1VWtQUIp
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral16 behavioral17
- Target
  gf/AprXloader/a196666d4aaaa6ae0ba9e498ffd8f65c
- Size 296KB
- SHA256 d9adfdd2908fe30eeecb5443787d33d2dc9c4fe5c201665058261c6330af8c98
- MD5 a196666d4aaaa6ae0ba9e498ffd8f65c
- SHA1 085835b10dcbe5117547ac597ce24f3dd3fd283f
- SHA512 dbc965bdad00d35545a069d7723be8c6d3124644886de2313fb4117109f113d4d55d196fda0305f4ef9b5a8761fa4611928dd075bec3fc689fa76ac18e57e894
- SSDEEP 6144:UOH3U0QhDuC1Wx1+lJW1vsPlEczJaUHPNyWY1NHXPfY+TDBxW:hXUaQa+ls1EPl11dYWkN3PA+Te
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral18 behavioral19 behavioral20
- Target
  gf/BankerSpanish/57f75ad95573f857fcfe13aaa3847511
- Size 2.0MB
- SHA256 d333fda60b5f62c61be6214e64fe79ee78c66bdd1f995736aeeb33cddc7494ea
- MD5 57f75ad95573f857fcfe13aaa3847511
- SHA1 06c78273196985b2c2a377624709c7a1a42bfe1f
- SHA512 45933fffed33fe3fd918be295e2de337c6cc06f18ac6c35c5c82d05513b90ab0d19fc133de9372be870acb705b306512e5969adf2627e07f93f79f8505553c4e
- SSDEEP 49152:W0wm8uToZIx+HmXzh0FDe2PLWXJdm+Mb3Zqw:bwFUoZIx1Y61Mb4w
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral21 behavioral22 behavioral23
- Target
  gf/BankerSpanish/92624244ee4834560efedb66224b16ab
- Size 1.9MB
- SHA256 c7e3cc7e5fc9a82f02939769b986f5c9ae3ed1b3a88fa24c2c26c7b1d042fb60
- MD5 92624244ee4834560efedb66224b16ab
- SHA1 1729594ac913508bd8083a36dbfe8bcee2096805
- SHA512 8a29cbcc9d33a0a7ea51c090a6212f86f83faf808277d4a18b467d7022394a1a31655489a5ad93318ee2a4ac3785c2eeab5b2d90f89b6a64f3d43cb15e7d98fc
- SSDEEP 49152:e0wmpuToZIx+HmXrKRbGaGwSSRhPqvzq0zFU1B/cP:Dw4UoZIx1bdqvRF4F0BI
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral24 behavioral25 behavioral26
- Target
  gf/BankerSpanish/f7793d6e66757aaf6b8af5b0abd4cf41
- Size 1.9MB
- SHA256 95c25547034a532f8cada4220213e190d479d12d481ece3b160ee086cb9d26f1
- MD5 f7793d6e66757aaf6b8af5b0abd4cf41
- SHA1 abc991ff874a3c0666195176d1ca5befc70641d8
- SHA512 cc83d53bc92dde2494f80b7dc6e313103332838b06735cc87d854a92de2532631b1f6a9d388db7c206252c288282de24adfe93c01214d4354a999cfad36f022b
- SSDEEP 49152:A0wm8uToZIx+HmXURox/kVa6xYpFAwzzVFV1nxZXL:dwFUoZIx1kyx/kZYpF7zRF7xZXL
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral27 behavioral28 behavioral29
- Target
  gf/F73F66B15791A42DAC86D0CED46D660F.apk
- Size 1.9MB
- SHA256 6c0c788eddaf228df9c7f95ced4ea95dcb384b8dabcdd579dedba56915107779
- MD5 f73f66b15791a42dac86d0ced46d660f
- SHA1 6987f4c7713111355781009e6eeab68d20c43972
- SHA512 75dade9dd98dc05cc69c2746beaaab5ac78a5a99544472ba7febbf96855f1a8fefa97c0ebb12ad1868f55c6069bb1346f294b777188449cf69b71d9cdc5cd1b9
- SSDEEP 24576:T1Cpx0/xJXbttw4pugm12E5f17Ism0XKz7w4joFe01vJYcxdFz3GhUpeaMliQu:TFhbttw4oyE5dbew4y1hYIdh3GhUpeBc
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral30 behavioral31 behavioral32

MITRE ATT&CK Matrix

Tasks

Resubmissions

Sharing

General

Malware Config

Extracted

Targets

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32