a42c608a6a18e895d4046185ff6b1cf91b22a6695d09fd21ef4bdb19b30ddf79

Sharing

Copy URL Twitter E-mail

General

Target
PvZ Guide 0.23.zip
Size 177.1MB
Sample260722-bthw7stwhw
SHA256 a42c608a6a18e895d4046185ff6b1cf91b22a6695d09fd21ef4bdb19b30ddf79
MD5 657277a46a42ce3eafe4f726956de101
SHA1 caa483853acb51502be1df6e7460d9cd5e021e15
SHA512 57f236ae5268536431ea29c411d9a1c910a6e066f161895551fdf58e7ca4be4dc9d17c6ac09af8cba0612a09a932352990200b3af1601fc0719d9b875916a910
SSDEEP 3145728:DVPbfxNRXsIMmgjC8wEQ8HkoPAJsNvbsa4J7QXBI1mONGBigT0/7sp96oRt0/w7S:DVPbfxomv808yUA9ABipGBeA9VRt0ala
TLSH
T19C983390E1E0FAA5FA7739B74871629522B7E36992BA14F84343813217C3DE30475BE7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  新指导0.23-9月9日.apk
- Size 93.3MB
- SHA256 25dcc1971efed19ad28e4b2ca6958ec53408dfbe2235d73b1f603ad1ffd11144
- MD5 4eb29c135cd0b2743079ed8ff29f8dbc
- SHA1 9badf4aca4e3a3311953616c6fe198cd8c132038
- SHA512 abfbfeddd66dc82c40d597b82a1790d1ac985b8ac8e217726cb28d85c8e8ad1b4fed68c15c603b6766d63f147801a809704f5304d902c07fe6e47ec0b2b5856e
- SSDEEP 1572864:nPooRAjQhdE66gTzlvYNgYUDjkaDRhSGDYcfeNS8nZVMowUmd0ipTYlBs0GUIA7F:Peu+yxgiYujVRxD8pG0PlBhV9T
- TLSH
  T15B283352CF88CC27C275697985F2723292BCCE5029674747DE327A6EBD77E883A12740
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

defense_evasion
- Checks if the Android device is rooted.
  defense_evasion
behavioral1
- Target
  植物大战僵尸新指导/GameAssembly.dll
- Size 45.9MB
- SHA256 ed2d291789fa0ed1107afeda3d2c7e17420fe4b52eb5b62dc4bc2e09d33b54a2
- MD5 b54f3527c2af3936f56a1744b0354e2a
- SHA1 897e2e9d45be7b3febc9357cbac72a25e497c504
- SHA512 b7e8ea986ff7b65f6c8ab0d913fbd0e7e9dc4e8e8701bffb9cfef60ecbaa889b1d86a5359400986075f71710a7828cbccdbb57376af7ffe62f3eb3cf15ee0097
- SSDEEP 393216:gpDdPfMjMvV9iydpWrHiBJpUEA206E2FZj12oOYUD5FRW2jO1DY2bNZsxLe40oYI:kXv99OYUD5FRW2jYDY/PBV9dmiZ
- TLSH
  T16FB7494AB7755448C0AEE1389A13185BDBF238846F246BCB21904B9D1F737D8E87BB71
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2 behavioral3
- Target
  植物大战僵尸新指导/PvZ新指导.exe
- Size 651KB
- SHA256 fc4e44dba277180c863b72b26f4336c3591753a9353cc86564e1544eee1a1fc2
- MD5 93949839da24fe2ba53bb39dcfb1d858
- SHA1 34ecabff6f6b4a107a20abb7a4e43e1f206afb47
- SHA512 ec5b68606584add4f726ed5deda4f561592896063e95f529740c0a13958d549f444089001d1abe8438c290511b15a35c96793d34dd2fc2255cd24110936b0ff3
- SSDEEP 12288:jH744aOD8HNR9jiUXB6VwlHNgZOh/K/byFO2bxcfV6f9eb:P9aOw9mruh/K4Ov9m9m
- TLSH
  T16AE46B16F5DC2468EACEF4349F18DF9887022664EA18ED1778F61E094B0CBC729C59F6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10

defense_evasion spyware trojan
behavioral4 behavioral5
- Target
  植物大战僵尸新指导/PvZ新指导_Data/Plugins/x86_64/lib_burst_generated.dll
- Size 160KB
- SHA256 d9bd6f6744779874df7088ffc456e1c1ac5377a79327705905cde5ccfe79dd6e
- MD5 bb3ec49b6a865bf751e0c0e65a0a6537
- SHA1 0664766a63e69d3ae16afbf91ffbe171ed9b2823
- SHA512 122f74b5296971e287cb0f946fb3204b0f7898a610fe8d2850dc56b9068c7c87f2fb420c359a6d6050a8e12149c46fcad9d9ebc6b5e529fa12c220bd8c19c329
- SSDEEP 1536:PaVwuNVOHdxfZsOnqewwxZLLQqppwY1ow7lyVU2AHbm/973P9qrmVh1IQLSlwpiS:C9NgHdndnJzndTjIh3VhIGlSu3UW1
- TLSH
  T1FCF35A7C1587A5AEC03A8074493EAA97A0B33D0517C54AE318E115BB3EF19DB9FBC81D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6 behavioral7
- Target
  植物大战僵尸新指导/UnityCrashHandler64.exe
- Size 1.1MB
- SHA256 b750286a0fc24b3734d7d38d877d3ff426c726cdf2efba6dce8553b13c0afbc8
- MD5 b64173d6bb7b8b8d82d4d841a9666f2f
- SHA1 dedcd28d0d5da7e2f1319fcb3f79af2562715cfa
- SHA512 830893ce7e08cf9a2996e9f15229d4b9e9ffb96387a63064c0bf0ac39da56f48303a16192f29e531d5a39ac084ea678b098087d2adce9a974b7190c8c0ed95a5
- SSDEEP 12288:Rp+jI+RCMfCEt5Bl6PwsGCLm5sKD93bVmc/9vo/mZRuxVqUQfz2fzZ3:Rp+MYCSCuLCLm550QjuxUz+zZ3
- TLSH
  T1F5357B5A6A9800E8E5A79038C956491FF3B27C1607608BDF1390B76B2F3B6D55E3F720
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8 behavioral9
- Target
  植物大战僵尸新指导/UnityPlayer.dll
- Size 29.5MB
- SHA256 4a2914f6baa5c686624207403c288735d688dae7d257be347e81a0d547225c65
- MD5 69173f4c3a67bcb40ec88513c8fa2a6b
- SHA1 bddba4f5b48ac66f4097ed1f062729028f431e34
- SHA512 b77be52bf798688a5e701fb49e153c7016c04e8785b61522b51d4eb1a49043e805f44915fe5a69b25fea6fdf9c047f3f12b010efb0859765b511c74421c228c3
- SSDEEP 393216:atWe+j3lNAyIHIK2slIWW+hZVWI3UOvqf6PWEknZ+:aHHgMxq6+fo
- TLSH
  T1B8679DA6B2B840D4D47BC074C65FA90BEBB1344A033086EB62E149956F73BF11ABF751
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral11
- Target
  植物大战僵尸新指导/baselib.dll
- Size 409KB
- SHA256 06e4c5121fc885d1241c0c5ce2bad087843571e99ac6c907a598cfa71f14e90b
- MD5 0ce8575bf295e1e4ef68587fba16eea6
- SHA1 a3d974daf78ce85b8afb15ec14536eea075a13ac
- SHA512 de22a8c2bf56e2b5777cbaa8dcde89aebddb4b2d4ad6264fb00bed9d661f5998251c95c16ff3b5c5a5ceb968041600a2045ea27c5b26f05dd91d29aceb50f8da
- SSDEEP 6144:3uInkY6mJtoLpzxkzt0R60Htptb+REDqDY92q31YM9Ci4DTFD9GiXTnDm:eInZ6mXWM0NptoDY92qFn9c7Dm
- TLSH
  T1A7946B59F76408B5F5A790788973850BE7B23C8A176487CF23A4439A2F33B91593E372
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12 behavioral13

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Subvert Trust Controls

T1553

Install Root Certificate

T1553.004

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Checks if the Android device is rooted.

MITRE ATT&CK Enterprise v16

MITRE ATT&CK Mobile v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13