General

  • Target
    MyVestas_1.6.11_apkcombo.com.xapk
  • Size 23.5MB
  • Sample260702-d2dzbsbv6y
  • SHA256 5bd9af35e8852456add9aa34f55133d0425b54b48bbdddfbee1d9b14ba192fc3
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      config.ar.apk
    • Size 32KB
    • SHA256 5d8207d6e9b716646d204c2a512a183ef4a55d29f650752e67eca5741dc40acb
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      config.armeabi_v7a.apk
    • Size 6.6MB
    • SHA256 84592dcd85b3c52f6fe1f4ad7972a2379c9366e9b6bc2a16e282ae92fe6b261b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      config.de.apk
    • Size 28KB
    • SHA256 bf63d3085261213121ffb45678d8339e181079141fba5a6509157468e37ea530
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      config.en.apk
    • Size 60KB
    • SHA256 38a82e2aa9ea5b23c7be4364a6162696ed0e77648b7591fdaf371e1c10d5eb78
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      config.es.apk
    • Size 40KB
    • SHA256 d9e05b4d25c1f52ae78cf7ce3fe702d50201f6db52d564864a6d5c83ef58237b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      config.fr.apk
    • Size 36KB
    • SHA256 cf00021f9334ed39a412d30546a2190eaeaefa5345bbe4a8461a3c4191f65e93
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      config.hi.apk
    • Size 36KB
    • SHA256 cc803428263596349e808c6ea8aa9a6f4bbb29a82e9cafb68c7ee60b99e54acc
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      config.in.apk
    • Size 32KB
    • SHA256 7b65d06dbf3533625bcaec2bbfd05f64e0d98eab61e9b7961f06467a1142a339
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      config.it.apk
    • Size 28KB
    • SHA256 288d8c8eee80364a7d9f7425f12165992699667b2840ab55375fbe229a836d28
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      config.ja.apk
    • Size 32KB
    • SHA256 03e75062335e8a4938999d09f4bad0d2a5fed826c2fc50bb45f242ab231cd3a8
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      config.ko.apk
    • Size 28KB
    • SHA256 496c9d7800e66625b8b3591586e3a2a763b65ff86337dcc9ce6cab2b8b7620ec
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      config.my.apk
    • Size 32KB
    • SHA256 27cfd481f5455b88ccaf235a3505d85584c798f638a4475d5cfc50d6b37b6c88
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      config.pt.apk
    • Size 40KB
    • SHA256 d0c6217ef89e66e5b191660dc239772f9425d3282bb592059450b9a418ab5260
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      config.ru.apk
    • Size 32KB
    • SHA256 531b1cea8d49176eec93f7231219bf17b046597ddb1442b2082fa31b20efb60a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      config.th.apk
    • Size 32KB
    • SHA256 68aa0df1a3e88c2e0475ad947e40ac6eaf25c6de741c3a5a36c07d05158fca55
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      config.tr.apk
    • Size 28KB
    • SHA256 a5cbc314051d61d64cb54dcdfb024754c92eff79eee77bbe65bead809b08edf9
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v16

Tasks

static1

Score
6/10

behavioral1

Score
1/10

behavioral2

Score
1/10

behavioral3

Score
1/10

behavioral4

adwarepersistenceransomwarespyware
Score
8/10

behavioral5

Score
1/10

behavioral6

Score
1/10

behavioral7

Score
1/10

behavioral8

Score
1/10

behavioral9

Score
1/10

behavioral10

Score
1/10

behavioral11

Score
1/10

behavioral12

Score
1/10

behavioral13

Score
1/10

behavioral14

Score
1/10

behavioral15

Score
1/10

behavioral16

Score
1/10

behavioral17

Score
1/10

behavioral18

Score
1/10

behavioral19

Score
1/10

behavioral20

adwarepersistenceransomwarespyware
Score
8/10

behavioral21

Score
1/10

behavioral22

adwarepersistenceransomwarespyware
Score
8/10

behavioral23

Score
1/10

behavioral24

Score
1/10

behavioral25

Score
1/10

behavioral26

Score
1/10

behavioral27

Score
1/10

behavioral28

adwarepersistenceransomwarespyware
Score
8/10

behavioral29

Score
1/10

behavioral30

Score
1/10

behavioral31

Score
1/10

behavioral32

adwarepersistenceransomwarespyware
Score
8/10