5a6230569947eb80845ea374183eac09a24301445efa1a729aa5c454b9073db6

Sharing

Copy URL Twitter E-mail

General

Target
Honda+RoadSync_26.4.10_APKPure.xapk
Size 162.8MB
Sample260704-rb255af121
SHA256 5a6230569947eb80845ea374183eac09a24301445efa1a729aa5c454b9073db6
MD5 8e3a3ee64754a4b7884b5abfc48a9fec
SHA1 ca03151785f3161f9040fe3dd8485437e039ebf1
SHA512 3616df876834f6668bb61bced674ef34c03027e2fd9784cf913b350e02cd19d70cdb2296d31fdcfa4e24bc69edb5eaed5927be0b79e0c547a59309e61a1ddbc1
SSDEEP 1572864:0VhJHavRpP9MqWbLqmNMoOA/LkVqWYjnc4VQJC0Z3wWoISD:0VhqJUG4VQJj3wWY
TLSH
T19E88BE1AF68D983ADDCEB1FC8D5A0796773239541A12D3A22421921CFCE33D42779BE1
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  com.honda.ms.dm.sab.apk
- Size 60.0MB
- SHA256 b9dc91ae33650356f85690984564c26fda38f6467702090ee037f1b569bb5327
- MD5 c641e986738ca9448c19d4db0051488c
- SHA1 59bd00e976d7811ddf89b41f072f474f20c3fd8f
- SHA512 7bf1d70d33b5c28e58550abb6c5d5096db3d7099224b6bd3d86c1d762bbd8722865aa55f4ef4945d632568fa3684c630c3f5dac702d7528d513c2c7e7f1e55a1
- SSDEEP 786432:ls7Chv31xNHH7+vcWpVtrpdhMqWbLqmNMoafgG:lVhJHavRpP9MqWbLqmNMoOR
- TLSH
  T1ACD7BF13FBA24D31C9BEE779A9BA53147F301A89770383422144B0BCBCE35C96B95AD5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

defense_evasion discovery evasion execution impact persistence
- Checks if the Android device is rooted.
  defense_evasion
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Queries information about running processes on the device
  Application may abuse the framework's APIs to collect information about running processes on the device.
  discovery
- Queries information about active data network
  discovery
- Reads information about phone network operator.
  discovery
- Checks the presence of a debugger
  defense_evasion
behavioral1 behavioral2 behavioral3
- Target
  config.arm64_v8a.apk
- Size 74.9MB
- SHA256 6280b6b9a466cc55336ef7c54f182f00821767b760d4b9e48e41a7c94cef93c1
- MD5 14bbe0d0ff996564cfe82d7777a7f735
- SHA1 c5f2ef3f907e475c83cd46de6d6d9691732b3838
- SHA512 28f22ed6b8e512cde27c02d70adb7fda5f2b145350bf0b9eabbe1794f97758ae6fe7bbb7adb4e52ad201b3244c81fd72336cce5defe9517c1085561395aa8aab
- SSDEEP 786432:O7YKSRh2ezFDuLkVqWw7zts0ZQ8ogTCw6pT/:s/LkVqWYe
- TLSH
  T194086C5DF68DE82BEECAB0FC8D4A0997763634541A10D1B56822860DFDD37E4233A7E1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4 behavioral5
- Target
  config.de.apk
- Size 244KB
- SHA256 16fe7380d487c6b4fc3843c64aa598da9cfcfa685089dc0981b9c49105a98c76
- MD5 4700e6f7d97b3377cd8a4c65628c8804
- SHA1 87bf018747cd8610fc855c39431f99a9c4a72da2
- SHA512 3d042b2bc9890c88fd6f85272aeb267516d79245d52e264b08d04323a056e79dc25bc5310cde0a6b181c05481dc6ef6d406fbaad8fff2dafe1bdc9ffd8bb53bc
- SSDEEP 6144:O7+5tH4P5/nn9TUYXrsXQeC3gi+Zuy2D39iVfoLytUfuZwx/ytDKOluBqHwVe7GH:OavudnlbsXQeCwi+Zuy2D39iVfoLytUJ
- TLSH
  T1B6346A92CCB6B857CDB3EA3B3741853525329E064242AB4795D8B67832373D2DF9B2C4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6 behavioral7
- Target
  config.en.apk
- Size 132KB
- SHA256 b579a4e9c649053dcf4932589e77d41564a0114ca36b26a4a8a1dbc065171e16
- MD5 5590b9c9dd73dbd5186a03e7bc85f5da
- SHA1 3b872d88ea5486a269bfaf8d2c35e4f43a269582
- SHA512 2161cae70309c985f000b4ca432e008968674d42afd875d293b06767407dae59fd848634b7d81b7ac38f43d4c5e105305f1e18026f7abb1493cfe347a8fad0bc
- SSDEEP 1536:ln3Yp4kpRUW9y63LS902EnC+3Btsh4nuCgM0pJr1K5t0hxDPqhgTlekfjZfj58:qp4IUWZLSQnC+xTnvgM0pF1KEhgg7l58
- TLSH
  T14FD3076A6865FD5BCC73C63A3B86D25915368D405B439B53A890323C22BF3D2EF572C8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8 behavioral9
- Target
  config.es.apk
- Size 240KB
- SHA256 6561923ca8ce4e912b040ef715a0c6a8e2b31223fdd39cad45bcd65046efc8b2
- MD5 588e917508939a266ce68ece95ac5b46
- SHA1 6df27f98264fb45fea2bb8ad5d84ba0aabd80efd
- SHA512 1f9dff3b3d8f04635a07890d9c8a705027659623a58c6283a4475b3555bba1f316110f3ca592a252a23ff3a8068dcce0877d642faa9baa1777b6cfcad57c4fd8
- SSDEEP 6144:poV8xaaVRFH+vMsXQeC3gi+Zuy2D39iVfoLytUfuZwx/ytDKOluBqHwVe7GiWC86:h1tsXQeCwi+Zuy2D39iVfoLytUfuZwxo
- TLSH
  T123344B52CCA8AE13C8F3967F7782C12290658D456902DA87A9D9337C31BB7C4DF6B6C4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral11
- Target
  config.fr.apk
- Size 252KB
- SHA256 7266e49eb6385ec7e3403351fc7ab80329c7df221a14f40999a99fedcb75c86f
- MD5 ddb556996012b71a10a26f75c9e5e92e
- SHA1 1d47271725c2e2835227df8abced7d7217ec7a6d
- SHA512 f99423837ac5397a4c3bf8006646e24d84eca13346d2a2be1e7de09424e33fbcf3d650871ed9129eb7c56b72f40a78ba970985df69d6e0e46c0675dcea5a4a23
- SSDEEP 6144:+KSQjTuKdzkM42bhqV9lXGkpsXQeC3gi+Zuy2D39iVfoLytUfuZwx/ytDKOluBqR:+gG8z/9Mbl2kpsXQeCwi+Zuy2D39iVfp
- TLSH
  T1D4446B97CCA6B983CCF3963BBB52C2264435CE089651CB8399D53268317B6C5DB9B3C4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12 behavioral13
- Target
  config.in.apk
- Size 176KB
- SHA256 34ae3d34d74cbcc812001026511335ad67e8effc7f630f0f00e4aa690ef91889
- MD5 454d0b346fa825a33512125d398cf6cf
- SHA1 b0e850635c5e97fd37652b7cc10779c08b991bfc
- SHA512 99befb7a8fe0456e3450d709155025aa9f8fe37b5513dc2508736e107af3d370686f4762a09af559a5160f8db5ce61c2c8634ace612112bb7adae8333569bdce
- SSDEEP 3072:fd7IjaUF1sZxQeC3gi+Zuy2D39iVfoLytUfuZwx/ytDKOluBqHwVe7GiWC8LXeor:18aUF1sXQeC3gi+Zuy2D39iVfoLytUfD
- TLSH
  T109042846CCA9F81BCC7286BB63969126183D5B068B42DB4B8ED03F7821773C19F576C4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14 behavioral15
- Target
  config.it.apk
- Size 240KB
- SHA256 9cb0aec82dfce3c594e08eca026058087c9ba6e3a69acb673669d517ae2824c1
- MD5 65bdfc00ac00219af7e98a882bdbddcb
- SHA1 de34cec7167eaabf1ab58ad78d8db7c8071fe087
- SHA512 21ca7f73c344e74846d45a93ce5d5a74df831beb5e97f5f75a6bff77395ff1fef5b1e8cb1d0920d1b2a926c3f7e4a7ee094c64526ec196638359a73a11b97011
- SSDEEP 6144:HNC3zhvO1J1GLCbK5mAc8YVBT+vYsXQeC3gi+Zuy2D39iVfoLytUfuZwx/ytDKO1:HYtG1JoL0sXQeCwi+Zuy2D39iVfoLytz
- TLSH
  T1DD344A26CC79E813CCB3963BA752E15454368C849A429B4799D5332C32BB7C0EF6B7C9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16 behavioral17
- Target
  config.ja.apk
- Size 7.8MB
- SHA256 da2218ad489aa1604bf58b6832c63d50a81dc0a9dfb54a3fa1709e6ea0f75f4b
- MD5 1fff2a715b175610214f0edc92b76fa3
- SHA1 1f1f2686b1bcb7c16ed111f374db528c05b7aef0
- SHA512 310095bf7867bd422ad2881fe44aa062224b4377578cef138fe1efe5fb27c817a1c0e946d5ecf5aa675747378f7d39e8c27286d703ba0a8de1011b27d747d11e
- SSDEEP 196608:GAp3SbBCe6fhnouCkh+d4mk7G3NIqDEQVHvfWKQFid/qX:r32vqnGk04C3NIqDEQVPeN
- TLSH
  T1C98633BCCA94E43FC97290772A2AE5D0443A9C1AC552ABB350BDF53421333D9DE8A1F5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral18 behavioral19
- Target
  config.ko.apk
- Size 7.5MB
- SHA256 0536ea674476520409b1ee0e179f70be8d7838fcc022c336d74f11ffaa64f14b
- MD5 7fb5a909bf1c726b446f5860d8f025cc
- SHA1 bfaa132769e8e59fbe6bde49b341cd6e1b8a76d9
- SHA512 deb43c7d21c5536b2cfa845a991ee28dfc162ea48e3798a6dc2ecaf3e35d81efd3f1b22cbc0706c7375cafaf45f00f769b71c7914a59e8318a94086e3b15c2c5
- SSDEEP 196608:TJ7pwhMs5WLl8rGb49T8/VVHxXvxIZSjOwYSQFid/qy:MhJALljkx8/VZFvaZS66
- TLSH
  T1F48633979C7BBA46CA72D5772BD05B204061CD6293430A8ACE66B90321FB3CBD74B1F5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral20 behavioral21
- Target
  config.pt.apk
- Size 381KB
- SHA256 a5fffc353ca93b54d7d675119c14fc2d7a33912c32b75c8741e815a08fddb44d
- MD5 42f76378b8244e1499d58590c81f96c7
- SHA1 9d2f09a0c8fc570417ed91c1891534e4a16bc598
- SHA512 d959bb13e36f7c50da3a788b9784484014d4e0c892bfd628a44d5bb07eb8b5999a803b92457ecffa7402f5017d8055a886d6a0887af6ad36b50cd588a9556071
- SSDEEP 6144:cqggYKhSM0YU9jSLM1DXI/r8zByFuA4p7ssXQeC3gi+Zuy2D39iVfoLytUfuZwx8:c3ZjL9+LMZI8dssXQeCwi+Zuy2D39iV3
- TLSH
  T132847C16ECA5AA23C833C73727679226505D4D056A03CA839AD9772830FB7E0EF57AC5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral22 behavioral23
- Target
  config.ru.apk
- Size 272KB
- SHA256 b47aae90a5882ba9d30a89d4295f1f422dc20159eeffb98d221f671c2ebe9032
- MD5 756bbbe038fb148ef046e7f1ac944e07
- SHA1 cbe22e025df4bb9dc66f43a572c7f1ac6f7957db
- SHA512 40674eeb884d96565381f2f987dbf8c80cc238ff54ea6554aa5a3b7986dfe9ae4f80d694969a21318952d37d2b2de1af2902aeaa20ed491913e15619fbf55dcf
- SSDEEP 6144:kZcCrpEY3XdVDDcSvyABoMaDkZdWjRqfysXQeC3gi+Zuy2D39iVfoLytUfuZwx/t:eT3XdVcSvyABoMaDkZduRqfysXQeCwiz
- TLSH
  T10454E76199AA688BC471F43BDA00AE0938B64DFE2F56975315A43D7E30F31D0C77B289
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral24 behavioral25
- Target
  config.th.apk
- Size 344KB
- SHA256 71a13ffa41b796bb6d8b581ee937c60d93a92cafeedf0b48d960a3dec95ebb36
- MD5 4a9ade186be44526681ebed84d6522bb
- SHA1 c386f72800c76ab940d28364815bffb115fa6760
- SHA512 93537ad8efa9da99f86ef54d8dc441f278d318e0c5cb3f7b67d9bfdd56e250e04e8c321046802e1c146a1e395523d00925ac2ba2397d762c79138882f8cb6ab6
- SSDEEP 6144:PI34grX3ex8vrkLZTO7k8bBnwI+biNzS//iRMKgAxgrlbxsXQeCG+Zuy2D39iVfC:KLrX3g8vwqk8bBnwI+b2zS//iRMKgAxX
- TLSH
  T10D74F7736817ED96F8745A3B2B2AB3845539AE553F62F8D104C4315932F2386C923EE3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral26 behavioral27
- Target
  config.tr.apk
- Size 236KB
- SHA256 dc934fe82f40bf166a35bd5fe12a8bc13e5076a2c1b88fe7b07ac415cb7ff2cb
- MD5 cbd0c558dd87656da5f924ee24a52689
- SHA1 145578ec165a18584625880cac3c74936a7fc96c
- SHA512 5c62bdca803f1e3d7b6c512965956f159742f6a862b52b1f8719c1ffa1b17a18af2e34f3a93d64aa1d668056aaccc7b2ea64032e1c41fc430bf1f2d0f76b8c8b
- SSDEEP 6144:R2vRr4tKljPT1NbsXQeC3gi+Zuy2D39iVfoLytUfuZwx/ytDKOluBqHwVe7GiWCs:IatK9bsXQeCwi+Zuy2D39iVfoLytUfuI
- TLSH
  T151345C81DC79FC1BCDB39A3B67968225547B4E461612DE4799E8323832773C2CB972C8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral28 behavioral29
- Target
  config.vi.apk
- Size 188KB
- SHA256 b418ec590dd3208d682c985113a075f24cd587a97275b8013161c5e0006cac7b
- MD5 28f11e4ec182edb8a8e9e64f063f165e
- SHA1 a335e33bc11097bcb2209f184f6eb878de544c0b
- SHA512 f31e572dd192f14becc99a9df34b19f6f13999e9f077d38c0c062c0812d7c1ca4d8cef3066fccf53371d03d5192763bf6edd846484ec1347108a321b35c2b2ce
- SSDEEP 3072:qUQsH4vOO2gkLVin3TpiMYc7sZxQeC3gi+Zuy2D39iVfoLytUfuZwx/ytDKOluBb:9yOET31ic7sXQeC3gi+Zuy2D39iVfoL9
- TLSH
  T14F14F9114865F817C8BE9A3FD78980195BAAD80AE781CF876AE4357831377C09F677C8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral30 behavioral31
- Target
  config.xxhdpi.apk
- Size 98KB
- SHA256 ed0361d3a4d2bcc423963c81231ee0af14db5b471e29d055dc4f2bebff761766
- MD5 ca4e620de6014fb01a6c2528670b40e5
- SHA1 e4d0658a882458011793ddc834cf0a6833424645
- SHA512 cfc467fa96fe4c5d65a1c123a284c0e8452433fd4ec74c60b26f6492975aaa249a2f560f094d1dd5c05a1ec3192ed2d822b254029c611c11eacf69949142f485
- SSDEEP 1536:z+qgXho/2EFeJp+LcLU0bLMGtuJi21mCRoL4vGsShJXH:iquO2EFKoL4L8Ji21mtLQohJXH
- TLSH
  T135A37E73E369A82AD827C639C3F8465B844A4E94ED69F31D4B1DF20D9EF3E804541BC4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

MITRE ATT&CK Mobile v16

Initial Access

Execution

Scheduled Task/Job

T1603

Persistence

Scheduled Task/Job

T1603

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Credential Access

Discovery

Process Discovery

T1424

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Tasks

Sharing

General

Malware Config

Targets

Checks if the Android device is rooted.

Loads dropped Dex/Jar

Queries information about running processes on the device

Queries information about active data network

Reads information about phone network operator.

Checks the presence of a debugger

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

MITRE ATT&CK Enterprise v16

MITRE ATT&CK Mobile v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32