f29c667ef235d9c335d14b47f8dc3c12db381686309711db71c90745b537d185

Sharing

Copy URL Twitter E-mail

General

Target
com.alike.freerobux_9.12.2z.xapk
Size 40.1MB
Sample260604-2bjc5agy6j
SHA256 f29c667ef235d9c335d14b47f8dc3c12db381686309711db71c90745b537d185
MD5 f1f6ff5f7a6d7a26124291a2e09836b5
SHA1 3c6542950862406d0bc92a9f22032187b71cbbf9
SHA512 be4f210a0ce4ec6365232642305d15101991ad3cac88f7b550d1d45216bbe5af07e69fd7e441f599e1039c60bb2efc92994b44b4c08b1d601110f816a4a1d35e
SSDEEP 786432:zPSv6+3jheP0CHG24K74TcTUiWEZ+H/YznaQPUlm:zPSCIjhePdu+44TUlEiAW61
TLSH
T1E3972346E75AA41BFC7BC5398D6BA321D2598D019603ABD77540731C2AFF6C08F4ABC8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  com.alike.freerobux_9.12.2z.xapk
- Size 40.1MB
- SHA256 f29c667ef235d9c335d14b47f8dc3c12db381686309711db71c90745b537d185
- MD5 f1f6ff5f7a6d7a26124291a2e09836b5
- SHA1 3c6542950862406d0bc92a9f22032187b71cbbf9
- SHA512 be4f210a0ce4ec6365232642305d15101991ad3cac88f7b550d1d45216bbe5af07e69fd7e441f599e1039c60bb2efc92994b44b4c08b1d601110f816a4a1d35e
- SSDEEP 786432:zPSv6+3jheP0CHG24K74TcTUiWEZ+H/YznaQPUlm:zPSCIjhePdu+44TUlEiAW61
- TLSH
  T1E3972346E75AA41BFC7BC5398D6BA321D2598D019603ABD77540731C2AFF6C08F4ABC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  com.alike.freerobux.apk
- Size 38.2MB
- SHA256 ed5671e10d3f00d42de2b239952c32258db9f609d308d191bd5a3f95df88b0ad
- MD5 5289647b2ac94eacff084c89eeca5039
- SHA1 2dfd39fd751278381d27be764a392f4e6e2ba6ca
- SHA512 21fcab6d4950ba1164d88a98229cb1b0eefe8dd2e1f153f20893ccbd39cb6aa7315b6bb2b5e43023a95708e73f06b8ecde7fdf94e90ddd401dc1c9aca39ef4d5
- SSDEEP 786432:DPSv6+3jheP0CHG24K74TcTUiWEZ+H/YznaQPUlY:DPSCIjhePdu+44TUlEiAW6P
- TLSH
  T1DB973396E728E81BF87B19328E7E6321D6459D019102AFD73544B3082EF7AC18F59FC9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

defense_evasion persistence evasion
- Checks if the Android device is rooted.
  defense_evasion
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
behavioral3 behavioral4 behavioral5
- Target
  config.ar.apk
- Size 112KB
- SHA256 98dbdf5a41799c7cb3b64803f6047849e6fc68e1f0a9ac47bddca2553507c470
- MD5 b70b00b899f1eb9f8550bfe5d1567cc9
- SHA1 9728f16423d27dfb43503caa379754c627fcc262
- SHA512 0ffcf4f4f47b76d0a34863f989660eacf9103ded57fe1bd9b3791b738882ad67ec5b297df3023a0fcfb06a9fbf63f9be1dcc92bea0080aafa04e292d62c1bce8
- SSDEEP 1536:cIRc21JaG6nFr22D5LyPbrbqw51njBNua7NHQfqsashn8/d/1TrgrZrKraYqKF:X8wivfqsj8/d/1TktWGY9
- TLSH
  T13BB373921927A563CE76C93DC487E35D9039DD129B47FB136442362810FF6E2AF8A2F4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6 behavioral7
- Target
  config.de.apk
- Size 76KB
- SHA256 58a2282762bcdd9c5fb361f3e2ee9dfc70f7f2bb22a4a3a651d8096b9085ea4b
- MD5 f338e9f914cbd919036ab71f7b6ab973
- SHA1 bb2c448982715eb636ba5683d5932772823f60ad
- SHA512 a7f2d763e169b6bd051638ef840394081f0035a9ba0d82cb23dc4eb8d60133af62a3984cdebf14a744bb8cfc008990ee647d9cde79bbd2945791c2430e65e063
- SSDEEP 768:db2VQCW9aJIhyPu8yWIshsGUc1eTiTxMt/W0fzZ16n5tt7ZGG:dbcJayPashsGUzTP5D4mG
- TLSH
  T1CB733A47FC969A27CD7A8134AD43C6C51429CE018E079B0B7A54771D25BFBE68F8A2C8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8 behavioral9
- Target
  config.en.apk
- Size 68KB
- SHA256 2459fc22152540bcb2d97042605b3eecf958829fecd7285eb3e94ed311c0882b
- MD5 311842a4172f209d42a5b06dad612065
- SHA1 ebfa7ae6c33f189a2b83c93e4387a4871e635787
- SHA512 a40aa1dd3d5d68da480e7bb6332da54ad3d36279c30c479ebb0dcde96644cf4b619c54714cd59838c3718ef4dff51e44ff015fd4aed5585d5523a04d71453532
- SSDEEP 384:0t05wZAgkWlaMFArshNwJ1e1TST/u2TgPTsHlprHl0HRk7Hl4rHl4IRoI3h3QtTw:gaTg3FYshNwJ1e1TBZRJR3QCzQ/668D
- TLSH
  T17F63E546BF90162FCD7B00356D97C115253ABE03DD4A8A07EAB0761C29B76E18F962F8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral11
- Target
  config.es.apk
- Size 144KB
- SHA256 fd5c987f94802bc729570fafc5a7087319f4171b6e989fb291274dbf6716942e
- MD5 1a39e06fa5ad4d387846da8a71e85392
- SHA1 abb31793dd6d046ac35d0ce50a9a2f8f329cfd91
- SHA512 122722a408570108cd1960967350cbd68c7bbf53ca98a262fafde287610fd2d7f01d535379f32241fd4c18043734949bb302110cc4a6f9e827df6bbed22ba8a5
- SSDEEP 1536:WZC7faz5XQqsashn8/d/DjOEO2OVnl2LOaOFOmOYg3nD:SCggqsj8/d/DjrhGloF+9rgT
- TLSH
  T1A8E36C4AA59B7A63CC76C43D9887C35E2069CE005F179B07A654733D21BF3E0AF926C4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12 behavioral13
- Target
  config.fr.apk
- Size 64KB
- SHA256 ab358eefd04f3d5de7f82d3df8974247a5800c75c624bd38ab14bcc7ea5da0f6
- MD5 b1b121a255a5b29a5613fc3584f67481
- SHA1 00df144ddb457b0acb1c99e700af4790198ee213
- SHA512 0e3d8c50105996df99084aad41ccc1709aca5ddc3b8886de0d62f2a2e0e21d630fcf22e8de0d3d0b498ed2fa20b5b05dcb447442d8bafbc58b515d1f8a95a6f9
- SSDEEP 768:XXGEC8tJqTXfu8yWIshsGEc1eTiTKbZ0bSk4E+nfE/Zg:X2E/tcTXfashsGEzT11Qh4E+c+
- TLSH
  T19E532A0BB8825663CCBA8678AD57C35A153C8D049E479B07BA90770C25BF6F58FC72C8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14 behavioral15
- Target
  config.hi.apk
- Size 44KB
- SHA256 e58630a79100a6e3672639d40874fdf5b383c5e801089507a055b2c02bbada94
- MD5 e208a756aa8925476b2b1f245deca427
- SHA1 f5658a486eee3084697a75216f2018ee5f6840a9
- SHA512 2bdb4544f4dca81ae7b27d6e3f8b95e27069a0a5c2721cdf731ab9921ca6d7413b43ad81f8ba80939662fad3fcb2c01c21420674bd631108442717380513708e
- SSDEEP 768:+Dnyp+5N6SEC3P4S2zUlu8yWIshNwJ1e1TbsGnXooUWSgF:8yg5N6SEC3P4S2zUlashNwinX9
- TLSH
  T1C013D84DAFBCB2A2CDBD38757A8AC93645346F3097D546136580B38E64B3EE04BC62C5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16 behavioral17
- Target
  config.in.apk
- Size 100KB
- SHA256 8bd38c224fa1e8bfd8be9b872149cf10de84cc8bf582271832d11d1600f62a30
- MD5 61996ba7fda0a3cee5d5fb4d2d7b767d
- SHA1 616f918ec8fbdb04a9072ea770c5de75aa71a06e
- SHA512 be7a5be96a2cf6bd761a7c918a9d9c18fd05bd4cd1750508fc9eea49ffdc93ac063c1b38a56f3210c8627b9b62fc197050fdc603d0b9de27f361f644a4894e87
- SSDEEP 1536:aw+bJIF7F9gLxUashnc6/d/0AZzAOAT4cwE:awX7FS2jc6/d/0+zHm0E
- TLSH
  T1EEA3D40A695B7A13CD76C97D989BC70A206DCE114F076B0B6A007B7C15BF7E06F866C8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral18 behavioral19
- Target
  config.it.apk
- Size 92KB
- SHA256 b097ed542de135e99f9c29c8fa1dbd08d4f85d7b20ddc42cb705f29f2993e092
- MD5 de889cceddf0d83fde92ebafbbfca6b7
- SHA1 83fc96822efcc736a3c73505e4492ef6a4aab587
- SHA512 fc4470da75b2e5ebb212128690a1d5e66bdcb613e75fd873e71bfcea6e3fdcdfc94f6c2d022fcabbdf339d5c5e25b767495aa9ff049c9bfce2ae829ecca8585d
- SSDEEP 768:zKu/0UfoKOcYzn67TX3GWxsu8yWIshn8/e1e/5TKKuYRRereRRMeRRgCCOgqmLnX:+u8OzYrUnGqsashn8/d/0YRVR5RuCy7
- TLSH
  T1A293D556A457AA23CC7AC53C9897D34A216DCD405F476B07AA50372C21BF7F0BF8A2C9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral20 behavioral21
- Target
  config.ja.apk
- Size 40KB
- SHA256 4533478d09ea7e7c9cec8a815dc2c226963297048d1c94714280b3f2d93ebe0b
- MD5 3fe123ad3033d35ded5190a296c06316
- SHA1 506f455ccd703cc7677ee33ab7360063eee2d2e5
- SHA512 a605e11da0c220534c9c06dedbafe58fffb0dc83b03c2bd566a30293803d1e018f3243ca18fd082f821fb508437732c875b6aea1904c8ce6836b9ea82816c683
- SSDEEP 768:DnbXLFoLTbUlu8yWIshNwJ1e1TQdJbEWCS+jqJvvaqat:Db7FoLTbUlashNwiEbBhaqat
- TLSH
  T1EE032A0FAE945A23CCBA4174AD8ED11116398E02CC469B17A5ACF11C2AF73EDC7967F4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral22 behavioral23
- Target
  config.ko.apk
- Size 40KB
- SHA256 e28465fecf364d360380de5685667c5b2a7af22761c0865280e4c533ecab5e93
- MD5 dac764df74ffcb17517dee9c6744dd8b
- SHA1 258898c1da2f3972048a1798f90b62136f527fee
- SHA512 7f3a63a9b41b9ee2aff412eaa67164626012d5a52887fc8c594ec29ea15e7463c817c702ab1b6c9d25064ef8eb4f13a279c04be3a5bbfeeed7dc04361c75a041
- SSDEEP 384:SuYpjfUU44Huyqm5yWIshNwJ1e1TWQKV6Zvi82VcNtTpeAt1NtTphtcV2Y:Snj8Ulu8yWIshNwJ1e1T0aKAl1hY
- TLSH
  T108032986BDA99623CDBE4474ADD6D61615348F068E468A03F980B60C29F77C18BCB3DD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral24 behavioral25
- Target
  config.my.apk
- Size 44KB
- SHA256 7e7fc6ba46995d217ecfe9584d64769fb02982a63b7465605ec88ba12b5c7bee
- MD5 f7333c605bfc3b16c18e191a0e203cb5
- SHA1 0032b258f720e53b9142ca78c93332553cc3515b
- SHA512 a78b557c5650aa96996c27c43152cdf9b85d153410a55d87e3697439cf80586f7193e924b1a41f6a77bdc63cb71394910a240c66a14cd92dc8b318c3a9d5a14b
- SSDEEP 768:+Y1YHpC5FHa52kFshNwJ1e1TgjzsY4zxw5SuFJbG4O:+Y1YHpC5FHa5VFshNwi4sYKS2
- TLSH
  T1571396455C5DA10BECBDC53A1F9EDE252C7A4E040A058C82ABA074DF0D7F7E09762BA9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral26 behavioral27
- Target
  config.pt.apk
- Size 100KB
- SHA256 cee29e8f0b615c692306f61a1ba730088e54d826a86ab955b4578751de54cd88
- MD5 ba82a2297b9b71178946f25923cc8a60
- SHA1 376d410910894a0fdbb2e9a3fde16c94beaac5ed
- SHA512 ea96add72b88c7deb9418187eb32f913ad40fd4f97366bd604d6b244840b50119317d540db5bfdeec8e5c7351b5d95113b109fd9166e86d84660db44c1f9c52c
- SSDEEP 768:tCY4/eMSQbtpmCwaAYznE3Wxsu8yWIshn8/e1e/5TeHHF7I+YFpZKutESFpwQUJh:14mQbo3qsashn8/d/SFSF5tpFTPu
- TLSH
  T1D3A3C44A695B6663CC76C63C6997D30A216DCE004B07AB07A6503B2D21FF7F1AF972C4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral28 behavioral29
- Target
  config.ru.apk
- Size 144KB
- SHA256 8f01256561222c615af709bd23eef4faec7347a090f728cf5707aac8b3156de3
- MD5 77d6e7b8dc1798805c579607f9a66fed
- SHA1 6217fc89f71e8e117fa38e0c554f1a9745c55378
- SHA512 23790a6c1e049e3c18c3deffcdc7a16a2b3bc244ed8c0e5812c34cb86cff2c821e7301ff2e8f618ecd89627b376a4d57a6e4707818620c20cd4a49a4db7d37bc
- SSDEEP 1536:TOI0dU2LuOm2tqDhqvEPhnEVjeVashn8td/crRrhrcrNrhrpr27:TOK2LuOcDhqv+wjeVj8td/cF9gx9l67
- TLSH
  T194E34D56654B798BCC35E43D880AEB0D24A9CDB92F5B5B0325503A7D34FF2E09F962C8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral30 behavioral31
- Target
  config.th.apk
- Size 44KB
- SHA256 4dbb43c5963bf68e1a46909fedd7b1a95a4c7ef98e419a4dbef0a228b8addde3
- MD5 df7bc446efae6127ebe384f81474fa43
- SHA1 0795f64031386176c0188dc50a2b34c9063a465b
- SHA512 88855494f73246b355d72c4ad14f0f2b5c1b8c9f034e690594fe37453020e528cfefa8ef808ce03ba6d99568c44eab205065a7b191e8eccf791c384b974c8210
- SSDEEP 768:9GxNMuxwbdT5oaT5WrijWqinkA5d05KohiB3p+I+W5FfDkhMvKI54+9Oklz7Uluq:oxOJgghsrtUlashNwiJBZY4
- TLSH
  T1AB130873798A9A52EC7A093AAD2AF24516389F053F63F9D26580310D22F33D18753FD6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral32

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Credential Access

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Checks if the Android device is rooted.

Loads dropped Dex/Jar

MITRE ATT&CK Mobile v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32