cfe3adc10a848b05ae7d6d481aafd3f17e2078535010ccf616db54912fe0704d

Sharing

Copy URL Twitter E-mail

General

Target
udx710_web一键.zip
Size 4.3MB
Sample260722-phackshl9s
SHA256 cfe3adc10a848b05ae7d6d481aafd3f17e2078535010ccf616db54912fe0704d
MD5 da22904863b8a6c6cf51a0fdf461a48b
SHA1 29fb43ac176a7098a688d80b7f5f289baabeaffc
SHA512 a5346911f0c2a2b7d183f89f3efee5f1f49f7b4912b6c035bcf9d57139142deff09369bc7c80ae2c846895d142a36602a3a2cb393c268c2413080f2d47508c74
SSDEEP 98304:1L0I7vcYO6VzW6jOh0fg9edipLP6VCvmPg+Kpu2n+mGkYz:1L0I7vcYOlh0fg9eoYCvmI+udn9Yz
TLSH
T188263349CA419B8FD1E7CDF4A00E6AFE5EF46106A6DF087CAAA21B17D5431EC823505F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  udx710_web.file/AdbWinApi.dll
- Size 95KB
- SHA256 d60103a5e99bc9888f786ee916f5d6e45493c3247972cb053833803de7e95cf9
- MD5 ed5a809dc0024d83cbab4fb9933d598d
- SHA1 0bc5a82327f8641d9287101e4cc7041af20bad57
- SHA512 1fdb74ee5912fbdd2c0cba501e998349fecfbef5f4f743c7978c38996aa7e1f38e8ac750f2dc8f84b8094de3dd6fa3f983a29f290b3fa2cdbdaed691748baf17
- SSDEEP 1536:Jwqdq+3pvspmLh8SCykrpTG7kfGHuNezq02XJqo+iFi1yCP:JwqD3L8Tezq0et+ui1y
- TLSH
  T17BA3592138A1C172C8D261B90AECF76193AEF4B10B3599C7379803DEDD653D25B7528B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  udx710_web.file/AdbWinUsbApi.dll
- Size 61KB
- SHA256 25207c506d29c4e8dceb61b4bd50e8669ba26012988a43fbf26a890b1e60fc97
- MD5 0e24119daf1909e398fa1850b6112077
- SHA1 293eedadb3172e756a421790d551e407457e0a8c
- SHA512 9cbb26e555ab40b019a446337db58770b9a0c9c08316ff1e1909c4b6d99c00bd33522d05890870a91b4b581e20c7dce87488ab0d22fc3c4bbdd7e9b38f164b43
- SSDEEP 1536:l72doFmOiHizFbPlspcsbj5ZsP+YeTs1p:lSSfN9+YeTs1p
- TLSH
  T1C8534B227991C072C89661B909FDE651A27FBA601BB184C7779C03EBED303D1AB79347
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  udx710_web.file/adb.exe
- Size 5.7MB
- SHA256 bce1f6f6f6532266837b66d719bfbd177d406d6d7d8d5adfd5e7c59fcde651a5
- MD5 3b0c0331799d69225e1ba24e6cb0dfab
- SHA1 5584f5b9aeff12b32d214d792e373901af71f3a3
- SHA512 2b1305374a734cf34661b4720e38fb9dc91a080d1f53be6092276f8f54041c4acd658b10fd65f5db21ccabee594c0a008727e3aad7d289147dff17a346998573
- SSDEEP 98304:z235t9jZcDRH2WeOE4MvKey0GlJJNuZIqP:wuWMkSey0GBNuZLP
- TLSH
  T1D3568D89E693A1B9DE430470206FB23FBF340705C714CEE7C6E4CE757963A91253A66A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  udx710_web.file/file/etc/init.d/hostname.sh
- Size 648B
- SHA256 079377b7e5250dc1989ca3c76ea28eaba001fc73bf2b06975e5cf0f874a42a9b
- MD5 bbd402e7bc299cd00ae8d51e0a0469be
- SHA1 98e1c25e9b3e05adb1ecbe8c263a41ed20eddd7a
- SHA512 4214f77397221a1861376ad60fedb86bd94ea9dcd2d3a844544aee0592d9044994f87c8dbce533cd7b256e007c83381596c0bfaa71e95537afc194e76b2dd482
- TLSH
  T107F0F4712B70F3389B8B4541490059429D52C35B581BBD3AF8282BBCA7EAB4FE0625A9
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral10 behavioral7 behavioral8 behavioral9
- Target
  udx710_web.file/file/root/6677/dist/assets/index--W7RTxd6.js
- Size 363KB
- SHA256 a3b9e72c29045acca4bdfab4d2719330d836bf0c5f333d43772a46684b0d94c6
- MD5 a7d6d22b40d47c87c1c7c532c8b16213
- SHA1 2517c66d9e93e6a25eea8916502d7fe97bf862e2
- SHA512 011cf4b724bed3958162a424ff300e9b152dbd3d8b6a080d26a9c39333824892da055038f9f1e7de9b89d12a61b064e11c37dc88ce34ff33f9d83bd0fbea4d01
- SSDEEP 6144:GIPCzu6kYqVdgl9dlUPx863BbqFW3HwS8lS4KQdUPQf6ZOsxOhOMobAPzILPWB2K:GIK6lQfLBXrybU
- TLSH
  T1EC844C543151A67C9BEB42B1E0671D24F01D9FDCE94BDCA8F1BCC8523EA9C68428FB58
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  udx710_web.file/file/root/6677/dist/index.html
- Size 885B
- SHA256 d1a97261f79213d3a07a97dada66550b378b2c2dfeca51acba2f28d0118279d5
- MD5 f953f16ba6291528a6f8b67fe8badfb1
- SHA1 f356f0ba60d222eb27d2983321b64fcf055d8e48
- SHA512 2658345d103fa162d63bdbb9901c9dc92032ed92fcc68ec5a27e930a78fb7dedf70b02ea81bdac297a008e825e910b20447833755a37bcaf33e201ca215d7309
- TLSH
  T1B611CC8710D07C291131832879D0F49667B7DE28AA081ED1B4E8B06F2EC5FD4C9DB679
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  udx710_web.file/file/root/6677/server
- Size 188KB
- SHA256 d1de03a361a33dd8850a25a5b07be9be2ab67677a4f4c4c1780d2cd83e383796
- MD5 6dedea0491475eccd3e14714224ef0e9
- SHA1 664bfcb1d1a7c3c92d96f5b98446b338a1848928
- SHA512 6cb6e68af630e7b54a6288f54ec1ae312d3804adbdb6d2da0b91e958185cb71b1d9f134c4eebd995fcf94dbc59bbc956543171ab035bb59fcac9785c2073981f
- SSDEEP 3072:JtMzxMIkPRM138sPaeXXhZ837k810dT0K991v77NQLVA738r4LaHQzwTRL0Z2:J42q138sPa2j8Lku0dT0Er32LV5r4La2
- TLSH
  T156144A98FD8D3C97E2C3E3BD99C29272701351FCD22698C1F026474DC1CB79A9A686B4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16 behavioral17 behavioral18
- Target
  udx710_web.file/file/root/6677/start.sh
- Size 53B
- SHA256 76d97e9db44706a6aa8eea9860bdbdcac7908805f93547c6797a4df6ade656b1
- MD5 602cfb58020012298653b3ff190f633c
- SHA1 fd21394966e4fe4b8adba0225507f8030a6f88bd
- SHA512 087909fbc012aa7e86699c94e0412323af1f55c67f55a549b262f200adf678830d8231791f2a4bed8320b914b81f916f6131f897dbfc001e4f415017ca938bb5
- TLSH
  T101900295625A444545295811521901F4854C800A18825A30219997BA9955BE92902685
- MD5 SHA1 SHA512 TLSH
Score

7^/10

defense_evasion
- File and Directory Permissions Modification
  Adversaries may modify file or directory permissions to evade defenses.
  defense_evasion
behavioral19 behavioral20 behavioral21 behavioral22
- Target
  udx710_web.file/file/root/6677/vnstat
- Size 54KB
- SHA256 5a6d3055e5c2bb1c51d701cb3f70dd4086be0752ef8fdc2be203d127d888b512
- MD5 b21b463349ee53e1a9c8212664422e41
- SHA1 b44163acab2b16a6107d27482a74fae86b9f0c27
- SHA512 50fac42728c0f8fb162b72c32bb167015decec975d5e173b2c7b23eccceaf0dffaa49dd589c9a9be53eb2a111d903146efe084f4ff0ae1019dd27d9c120db890
- SSDEEP 768:/QPLmodtb2bBL4lw2jlj1ZGNu48dkYcebuh3DVrVVR7dRsAJapRAcDTZOZzB/JTX:1ABgLwwQZ0N2wg43D9vRAR9TZOP/JTX
- TLSH
  T1914301C6106A14DBC9BB6070C2002E2DCB8DF9846097B3F8DD462F4FE6B72636C28643
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24 behavioral25 behavioral26
- Target
  udx710_web.file/file/root/6677/vnstatd
- Size 42KB
- SHA256 ca3bdb6320f07e6a35215ef6863a788c12446752473aadceeb82799bcdf6c041
- MD5 261a778ba57df5e1c3a799eb6a8f42a8
- SHA1 3452bd7462a86975bee52e666e1d647e8854d7b5
- SHA512 89e4489afcf6a86e26ecf13bd14f49a2d2aa52e7e6ae5cc43a3d020023cc49eac332ceae89fbc521bfc52017d5871b11800adeed8b77c5cce3bb204f1e203e38
- SSDEEP 768:Gyyi69DT3eNqhzBcMMZBjjPkbIcEyt2uGUt32MujNKKxLB/JTYSQ:9yL9DT3yklMZBnCWm29UtmMujNKKxV/Y
- TLSH
  T1BF13F28D3D2671D6C9A5A8B68C5A17C42794223CB85BF3ED2C10494D1E7D2633BA1F73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28 behavioral29 behavioral30
- Target
  udx710_web.file/file/root/busybox-aarch64
- Size 1.3MB
- SHA256 cec9c93c2644b8d0b0f9fb3cfec1eb4fe7937cb77893e4dcbf53e3a0195ec7e9
- MD5 1ab11d9226a38230b9e9a7196ab40651
- SHA1 b7453ef31e9aad5384bdde2502e7794acd043906
- SHA512 be26f414dc35473be6977c193926c8e7dc1d1128537b8ea60b0c83f6a7e7d68f4b8eba8964e6e057294201e89b7d45d90666ca0dc0416ca2583956a6ebdd76d4
- SSDEEP 12288:g5QDDGoEItMH1HA1S5ZVX50uphNar2cotPNw0vKvJP4kUAQVFodTzDmpy5phtwtO:gqp0H7PyXvJPPTzyg5Bwnw22gG/kJLv
- TLSH
  T1B5558E95730E6D63C3C2D6BCAF7D4B62712B34A8419590F22610A6CDE1A7FE8CEF6051
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

File and Directory Permissions Modification

T1222

Linux and Mac File and Directory Permissions Modification

T1222.002

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

File and Directory Permissions Modification

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32