89d46276332df4e0014e5d0d422adef2540a5962d2e0fdac2dd1cb75af9cdab3

Sharing

Copy URL Twitter E-mail

General

Target
TranslateYou-19.0.zip
Size 802KB
Sample260706-ye1j2acw4t
SHA256 89d46276332df4e0014e5d0d422adef2540a5962d2e0fdac2dd1cb75af9cdab3
MD5 109a2322a22e6fe29638fdd6f7d683fa
SHA1 317b3ef765610e6e9261a1896573b629733634b9
SHA512 1c6b2880cc70f1b5b6ae43d57b4b04957fd1ca1c36078c45564b38d9581e20c3efa92ba61d189568ff0ccc09256b8ae5d60edb15790dd12277dd5fe79b8f662d
SSDEEP 12288:sR6ssodlN6MgBPsCNT+rofkJ8LBF9C2KBb2xLh+33cnI2lf8RFV3ZTW8kE1BS:sPssNxgRrCI4EC2NLh+iI2ly9kf
TLSH
T10405BFA9897E4D5DD25A8936B7C013C2F729ECD0B278DF4A254528736C87D2C2B2ED4C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  TranslateYou-19.0/app/src/main/java/com/bnyro/translate/App.kt
- Size 2KB
- SHA256 060300f86383538669a2be1001e70ebdeb4ced61e3553b3f783fc775f596bc22
- MD5 77af483d16f1ac47e814e614d0bbc72b
- SHA1 24ee469097df057e47f1a131ae5c1c8a228a96bf
- SHA512 780c03ee0e5c6f5edb1cc88ed17473b557acc5f991405cb4e344c25325d34f651518c15d932acbe86acdea3ed7e7fb6d8f3502aba05aabae5801b0fac2683a3c
- TLSH
  T12841035A18B18571428723632F5621C9713287132FB5FC54394DE267AF01DB833BADF4
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  TranslateYou-19.0/app/src/main/java/com/bnyro/translate/db/DatabaseHolder.kt
- Size 1KB
- SHA256 a42359af26ec88152f934cd438253b629e033213ac8bc4df134380d96c0b2df0
- MD5 ab26ff2fd1dafbf77f58816b992f538f
- SHA1 443e000349d217cf5c67f7c0b7d9a7d682a19446
- SHA512 8c08838636993f13ebbb97e87e68f932e4b8bcebd1d5ec7d9446d05634d476d3c213ca5a935b2ee053a5b0f9a63ba6be6511e76d4e581d27c84b8d3d0dcbf253
- TLSH
  T17521931E21A1C773050902A1394B91CFB227B36B3AD84481380EC3AE9F66A3032F6CC8
- MD5 SHA1 SHA512 TLSH
Score

8^/10

execution adware persistence spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral3 behavioral4
- Target
  TranslateYou-19.0/app/src/main/java/com/bnyro/translate/ext/ExpOrNull.kt
- Size 852B
- SHA256 3176c9de16d4c58e736796574e931ec2c2e9e15c8bb5df40dac9d33a7aa70ddf
- MD5 0d8a5081f0667b5de7b482e71a6210c5
- SHA1 0f4e91536139246e1c0778625f1d65157e255037
- SHA512 71f819e11c8cedea28da5a6e3644188dabc38e69129a8a0e4ff8defa82ce95cdd5485d6ef566af50d4cd7150b41e2967dca618b39fa2b100877a77ce2111fa13
- TLSH
  T137010C0E14A0C7B7894123E53A0641CEE227EA9732ED5490710E936F8F069B116A6DA8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  TranslateYou-19.0/app/src/main/java/com/bnyro/translate/ui/components/LanguageSelector.kt
- Size 10KB
- SHA256 63fbe64b7262a81c9317e26eb0e66b124554c07b61e6af2f136b71042a3eda77
- MD5 8a551800e642dc958e1bd105c45ca79f
- SHA1 9ee49401b0b754c9edda4d57ac7954f742e13af0
- SHA512 3bf25e8c8a9817c5a8debfdf4c0b6b9eeacd18ba033f1656423fc2a35bd6ec4578be30ccfef070139e3362f00c40be7f1d38ba045bfdf0d8eec3e30c0d896f18
- SSDEEP 192:kJU/We0axHsH2Z0YHh/fWiyHZji+HIxC6f6xC5YCfSCmV:kJU+yav
- TLSH
  T181223F2956A00054294B72337D6D3DE07AB046172921ADE57F4EA2743FCF81C56FEFA8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

execution adware persistence spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral7 behavioral8
- Target
  TranslateYou-19.0/app/src/main/java/com/bnyro/translate/ui/dialogs/FullscreenDialog.kt
- Size 2KB
- SHA256 f3ace9760f386d729a58dd4d91c5928355ccb894933bc8dd8a010ff8962aff74
- MD5 dc62d91dc0b6dd014fc9d0415681f700
- SHA1 c9d624289e3ab4bb8a8ea3f62969f6afd9b6473d
- SHA512 019a84daf11350419578a797826af398c6bea016cba737c4d0b93053fd204d2091291b9a8a519c1f3d5c3dfb68ca7c8338d43e4f7fd6f05809ab07e42385043e
- TLSH
  T17F5132298BA01031088723732F3E27F572A593B33926B5D0394D537DAF9781E08AAF80
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  TranslateYou-19.0/app/src/main/java/com/bnyro/translate/ui/dialogs/PrivacyPolicyDialog.kt
- Size 3KB
- SHA256 afd7048f36bec76b93de307f1e04bdb3d5c71604fdd6246fe9142eeb45d51816
- MD5 71a58a29e6e3e1096372caf4f3f11930
- SHA1 8fb4aa456b904522a94ca50de8be078501fe4fb5
- SHA512 0d330d8d919e1b0c6f7ccd556a82646ff929f3cd5da66aed8d812d28e9b10e3d394537613059993b4161edc7c0a5dfd5c95c580143a2f185bbc2df010d477792
- TLSH
  T19251002B46A00611488B63632E2F25E477E553673A7DBDA03D4C67B91F8A42D48BEF84
- MD5 SHA1 SHA512 TLSH
Score

8^/10

execution adware persistence spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral11 behavioral12
- Target
  TranslateYou-19.0/app/src/main/java/com/bnyro/translate/ui/models/TranslationModel.kt
- Size 15KB
- SHA256 b051b9503d58f87499c209402a0fda0901535592f115aa086798f88e813f013e
- MD5 d61fd99f6f8fae73ccf766ecb4091ee8
- SHA1 d1edd7cd22e646ae6cb5e2866987d92fe37d140a
- SHA512 cac31cc27e629002e4d985ccc9d246b78f91d8db11b2d1944d1b83a6d757b58e255d9c6cf1e0adad1475aefe27db232215eb1b1f9e87abec96adbaadbec0b4a5
- SSDEEP 384:kJUz9J/wDu8iBFOqp6WHig9puhyRkRtRR:kJUsC8o0c7uxRR
- TLSH
  T1A762656A14F110106B0312627FFA15C9343986531B3A9D64BF4D815BAF97D38A3EEFE1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  TranslateYou-19.0/app/src/main/java/com/bnyro/translate/ui/views/AdditionalInfoComponent.kt
- Size 3KB
- SHA256 ee502851b111cbf08bd1033ade3a3bfcd349ef9dba226e7e59cd26973f01de98
- MD5 a725d55d3c89f34f8219ede98e516e0e
- SHA1 7a73a1b11aa33dfc16c9c9488574bb9e1e87a42f
- SHA512 6dd745a6fd159ef8bba89855031a29448b49d307675d8124744cee41329c09020b0a4ffeacee9e806fb104f872c1f07b4a5e8362917a8eda4f7c46acffdbc91f
- TLSH
  T1CB81CC6A05A04151C44B62332EED24D871B586576D72FC987E8C42B69F8B43D4BFAF10
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  TranslateYou-19.0/app/src/main/java/com/bnyro/translate/ui/views/EnginePref.kt
- Size 7KB
- SHA256 a6eb2308969d376b06a638145d5b6dc4201ad451791e9a2468264e9ea2ba8550
- MD5 c9a0005d215420c0a221c9a91fdc4e7a
- SHA1 150674990acc13f5465d73ba686cbd82d943a826
- SHA512 0f3c04fdfb72760de5c282472fc4610f6952f2f60b26b4b8b4cff226fceac62930921d55df54e770a645ab51dcd8059854cba38ef784040e7ddaa0e5cbbe7371
- SSDEEP 192:kJU2Nz2AuHFuBUEHJCvm7f1bMmdD83ACz65yiSCyL:kJUSPBUEHcmD1bMByU
- TLSH
  T1D5F12675456000B00E46A3235D6D13C9767282772D3AE6943D8CA6AC3F55A6CF3FEEA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

execution adware persistence spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral17 behavioral18
- Target
  TranslateYou-19.0/app/src/main/java/com/bnyro/translate/ui/views/TopBar.kt
- Size 8KB
- SHA256 82b22e273ed1c5fcc61eadef07425172b17b78629ffd6d4654c0496dcb5bb538
- MD5 aa86fb6cf4a5ec5bd7c612c5a13f9a75
- SHA1 3b3cbbeafb91be291f5800ca84586c6458578bc8
- SHA512 7e2a81e6f84910a7447996e761c64806920cb2009320f3486cdfbeacf2fbf360fe98204bd0439140de6cda0f47b42a91ff7184f02b93dcd88648c7081d041322
- SSDEEP 192:kJUeiukhdzZ98i9IU6d02CywEBaToSXRQStDZbXXamErUSrAL/L:kJUckhn906bqafbVbns+H
- TLSH
  T1B002431E0AA500120E4B63233FBD24F47AA0C3573B755E983D1C52B95FCA42C99EEF95
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

execution adware persistence spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral19 behavioral20
- Target
  TranslateYou-19.0/app/src/main/java/com/bnyro/translate/util/ImageHelper.kt
- Size 6KB
- SHA256 cc1f63e6668d783abef252eb7f693709f18514c09f367cc89eac6e714fc2c5da
- MD5 a73dbab7220497e6b37b95826fc545d1
- SHA1 3fe2725ea4b59979ebd345ef300186491bc97dc4
- SHA512 3c398440c8fe3b23872eabdb1bf2003be2aef0e9bc1417210a7cda689e0ade5b579c414996ab440fbb03fc8a71a3c94f633603ff00de76d62bf6673188a4bf5a
- SSDEEP 192:bJUe0/mPNyd/T8n2hYpBOV/HZIWQl4TBJ4oxiU9b:bJUe0/s3iktmPUs
- TLSH
  T1A2D165465EA621524A06025779FD2D842AF0C2E32B2F8C9D3C1C522D6FC5A78E1F7FD8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

execution adware persistence spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral21 behavioral22
- Target
  TranslateYou-19.0/app/src/main/java/com/bnyro/translate/util/SpeechHelper.kt
- Size 2KB
- SHA256 da3c1071decd9bcfa459d9ffe4112cef96dfde22e7fa57340d465a729c19c297
- MD5 0ecdec82d2d723fa36b7724fdea7ea31
- SHA1 64de34f8b585741cf3cd1dd890f4398a5deb5e6f
- SHA512 cb776438ea038a75a272d43fed588a0dd277872ae951c180156a9e2d8615e4ed0c8580b6c638699b0ee6b5c7c0ead2f8b811964122ffa13b8761bbeda38a9929
- TLSH
  T19E41325B14B8133349052076358A3595ABB493833B94CCE0790D539A9FAB57029FCFD8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  TranslateYou-19.0/app/src/main/java/com/bnyro/translate/util/TessHelper.kt
- Size 4KB
- SHA256 371ad00c21382b9b25cd192ce406c9b8c542dcec01a73766ed78cdc50b89fc34
- MD5 c3c1f2c2299c647e4a3db842380864db
- SHA1 7bfa6cf103beaeea1ad1ebd597c610f8d3a4c814
- SHA512 8ef91412edae2f17810a0c9542017602000c59e8127ff46525a06c4c0b0353925eb546673b62224e6f6746083771854a1391bac4173bf6cc6fd8335fc74574c3
- SSDEEP 96:kJUerb5xK0/OAkd5bXYXCxRxQu6henul+C7OBUuJAej:kJUeBxK0/O9TkSxf6henul+C7Oqub
- TLSH
  T149A1B62624E110706B0A30A0B88E1545B771D54B3B0CDC65BF4CAA69DFE3A70E2F6FD9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  TranslateYou-19.0/gradle/wrapper/gradle-wrapper.jar
- Size 42KB
- SHA256 498495120a03b9a6ab5d155f5de3c8f0d986a449153702fb80fc80e134484f17
- MD5 3a7794bb805d141627d87e6c8f42cfcc
- SHA1 c282740b583d2f485e2af5bbb8225b2ead908e85
- SHA512 afdac5accf0a919c44345773ad301e88ad6622169b3274b3e01b281e45e85c2b5bacff4b39d3506740f320c754983819e9cdc6a788e43c92c787c673d5f4b09e
- SSDEEP 768:u55ck97IWdaT4Q5Lq/3M0wFdap4/vZurAiioZqeS03Hh:mjIWdaT95+5p4XZ6AfmSIHh
- TLSH
  T1FD13BE629D58A56DD043063B21A78BA49379A30E49CCD73F1F72270DABD029F5B0379E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  TranslateYou-19.0/gradlew
- Size 8KB
- SHA256 a3648413b47ef77af21d5ebc36c687c7d103aaef3e17f33de7d4f080a6f300a3
- MD5 f092910dfa8e47c5a37a452c3f6baf8a
- SHA1 8354dd64ce8112f42852288ed83e22d0b26a3e4c
- SHA512 f07fe8b8d014dbf5f08594164bf8fe8b58d30efe2bd2b97e700d6230cf78b9ded26f2dbaa2c3868d938fba350cdeff77a0ebd712b6d9b04c1d27decb56d42dea
- SSDEEP 192:SyWm7H8yzJ1XnRy230LhI+vcHD7oRDe7PSRe5WW:S/m/zJZRy62hbFRKSR+9
- TLSH
  T178021A6357812374074506776E9FB0EEA72162BF1F83291C749C960C373A93A61F2AED
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30 behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32