General

  • Target
    قفقوس.zip
  • Size 4.7MB
  • Sample251230-wyncpsyrey
  • SHA256 0b76ab1b03a4ea153c5de738e5439a42711e870d208db7889a4efd41f57d0695
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Language
  • ps1

Source
URLs
  • exe.dropper

    https://google.com

Extracted

Language
  • ps1

Source
URLs
  • exe.dropper

    https://google.com

Extracted

Language
  • ps1

Source
URLs
  • exe.dropper

    https://google.com

Targets

    • Target
      0/panel.php
    • Size 110KB
    • SHA256 0b1560be0312e0f6d2264efa669842f2122f852da9df044a449661780d5bd9e6
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      1`25.apk
    • Size 2.8MB
    • SHA256 6b685f39cafe6bb9bf8c4edc931fa5c869d4c5b70c5cd578a9a6e4cdd16b400f
    • MD5 SHA1 SHA512 SSDEEP
    • Obtains sensitive information copied to the device clipboard

      Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    • Acquires the wake lock

    • Makes use of the framework's foreground persistence service

      Application may abuse the framework's foreground service to continue running in the foreground.

    • Queries information about active data network

    • Queries the mobile country code (MCC)

    • Target
      777/panel.php
    • Size 109KB
    • SHA256 3a815409425f8b1a7ab077a866139a90e67af736f29f41f2dae6b3c93b5a22b5
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      main - Copy/FirebaseMessaging.bas
    • Size 8KB
    • SHA256 81efbec980e059025682b3be5a1fe269412d1283fe22edeca19676042b64a2e6
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      main - Copy/Rat.b4a
    • Size 7KB
    • SHA256 3d12c0bacdabcc7fbf098e90d7ee7933ca621126b220f1105f1c0a8558148060
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      vip - Mine - Copy/FirebaseMessaging.bas
    • Size 12KB
    • SHA256 2e9f89564c970c128c38cd339f8edc9cfd61f4d5578312fc351126c998f74691
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      vip - Mine - Copy/Rat.b4a
    • Size 9KB
    • SHA256 0eb59051526ae1572ae7c3979cbf0b4b3cf731dae606e36d9953c4a9bef0bf86
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      vip - Mine - Copy/SmsforPn.bas
    • Size 2KB
    • SHA256 ff4dc714b647800398d4fb8d40f67f98035277b8caae636ee95a99b0b2ea29eb
    • MD5 SHA1 SHA512
    Score
    1/10
    • Target
      vip - Mine - Copy/FirebaseMessaging.bas
    • Size 11KB
    • SHA256 0bb9239027057fd35dea222b33f53cc16a24ff5b527211cf28ee9c978ac10b3f
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      vip - Mine - Copy/Rat.b4a
    • Size 9KB
    • SHA256 95d288a28927c4960312836d1fb58675bd589306a215efdba788692063aab0d9
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      vip - Mine - Copy/SmsforPn.bas
    • Size 2KB
    • SHA256 ff4dc714b647800398d4fb8d40f67f98035277b8caae636ee95a99b0b2ea29eb
    • MD5 SHA1 SHA512
    Score
    1/10
    • Target
      vip - Mine - Copy/FirebaseMessaging.bas
    • Size 11KB
    • SHA256 642dde687f3ae9bd5ddd2ba7c5ddb0094aac783dda7262436a61b0f2e3423c4e
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      vip - Mine - Copy/Rat.b4a
    • Size 9KB
    • SHA256 46184ecfaf9e2395cb3f09313200b55fc7706640d3e5f6d77fc095a38e0e2a36
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      vip - Mine - Copy/SmsforPn.bas
    • Size 2KB
    • SHA256 4460e8257acfe88afa94e64573a3f9cb96e6fcbc178e64377c115b9b3d70ca63
    • MD5 SHA1 SHA512
    Score
    1/10
    • Target
      vip - Mine - Copy/FirebaseMessaging.bas
    • Size 11KB
    • SHA256 72d1eaf58c47458c72958b796d503d77924a929f3b364ad72eb352e1d2ee7edf
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      vip - Mine - Copy/Rat.b4a
    • Size 9KB
    • SHA256 9f48c44b07ddb2f8df13a3510380239cb35f68456570871df77c504d8e28577f
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10

MITRE ATT&CK Enterprise v16

MITRE ATT&CK Mobile v16

Tasks

static1

irata
Score
10/10

behavioral1

execution
Score
3/10

behavioral2

execution
Score
3/10

behavioral3

defense_evasiondiscoverypersistence
Score
6/10

behavioral4

collectioncredential_accessdefense_evasiondiscoveryimpactpersistence
Score
7/10

behavioral5

collectioncredential_accessdefense_evasiondiscoveryimpactpersistence
Score
7/10

behavioral6

execution
Score
3/10

behavioral7

execution
Score
3/10

behavioral8

Score
1/10

behavioral9

Score
1/10

behavioral10

Score
1/10

behavioral11

Score
1/10

behavioral12

Score
1/10

behavioral13

Score
1/10

behavioral14

Score
1/10

behavioral15

Score
1/10

behavioral16

Score
1/10

behavioral17

Score
1/10

behavioral18

Score
1/10

behavioral19

Score
1/10

behavioral20

Score
1/10

behavioral21

Score
1/10

behavioral22

Score
1/10

behavioral23

Score
1/10

behavioral24

Score
1/10

behavioral25

Score
1/10

behavioral26

Score
1/10

behavioral27

Score
1/10

behavioral28

Score
1/10

behavioral29

Score
1/10

behavioral30

Score
1/10

behavioral31

Score
1/10

behavioral32

Score
1/10