075b6cff12d1d7a236ca441eb5ea6699fa610fe412fcd1acf44fa6483c84be78

Sharing

Copy URL Twitter E-mail

General

Target
faceapp.xapk.apk
Size 80.3MB
Sample260723-tyfxhsfr2y
SHA256 075b6cff12d1d7a236ca441eb5ea6699fa610fe412fcd1acf44fa6483c84be78
MD5 148d589991a2ebcdee6150d3bb4d20f2
SHA1 d396b1541eeea46a61fda5d2fcd8fc52ba8b0e76
SHA512 dc94781e4219f46ec570783c2eda7eb660fe662758d1c538ae3270fe2b8ddf504c4b9ac5c192018720aca511f26784fcfbca3e69a9d9c5f4ccaabb3dd8d207b6
SSDEEP 786432:RvIk/Sjjkk1amHeZTdFtrDPyaNOTCuw1K2p7Nl6uBAF30gfAoXMtqF48IwCf81+R:Bdajok1XeVJZNNlQ3Motl7u
TLSH
T1F708E14AD50DC933CDCDF17D4D9E0792B2327D181692C2953926B20CFBB36E05A76BA2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  faceapp.xapk.apk
- Size 80.3MB
- SHA256 075b6cff12d1d7a236ca441eb5ea6699fa610fe412fcd1acf44fa6483c84be78
- MD5 148d589991a2ebcdee6150d3bb4d20f2
- SHA1 d396b1541eeea46a61fda5d2fcd8fc52ba8b0e76
- SHA512 dc94781e4219f46ec570783c2eda7eb660fe662758d1c538ae3270fe2b8ddf504c4b9ac5c192018720aca511f26784fcfbca3e69a9d9c5f4ccaabb3dd8d207b6
- SSDEEP 786432:RvIk/Sjjkk1amHeZTdFtrDPyaNOTCuw1K2p7Nl6uBAF30gfAoXMtqF48IwCf81+R:Bdajok1XeVJZNNlQ3Motl7u
- TLSH
  T1F708E14AD50DC933CDCDF17D4D9E0792B2327D181692C2953926B20CFBB36E05A76BA2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2 behavioral3 behavioral4
- Target
  config.arm64_v8a.apk
- Size 34.5MB
- SHA256 1371b9fe1c8fce4f2cdedcbf6abb4fcd96640c790e80c8f98c4bfdb4f5e6a613
- MD5 29ce65389be359b82d2a2355a22890f2
- SHA1 476dd4ae2432ba3ff58ba654e0951999c919162b
- SHA512 32412a6b141c5223c223d7d6aa484361e1a51f653a80a1cd60a9d5f892c04af95e94ff414e6fb0e8c8262a15b50bd08abe036ccb6b81d8d541bbe5e1b90f708b
- SSDEEP 393216:LOVoXMhPCtFYtH8IwjewyP813OkJaWSXlR:LAoXMtqF48IwCf81+OSXz
- TLSH
  T12D879E4DD50CD936DEC9F0BD8E8E0A93B026395912A1C1892D26820DF787AF45677FB3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6 behavioral7 behavioral8
- Target
  config.mdpi.apk
- Size 128KB
- SHA256 63a1ae7318b2315226f935b5ec2a18e4acddf96d53e581d7aa3e1ef4b78ff72b
- MD5 a0593eeb039f377cc959a96dc194d8e9
- SHA1 aec98852965b66ae9f9ef257215731251f87d5d2
- SHA512 630e7f58b0ee7a664b028e2e4527b1760265ac44c562e8d1493b9e875753e3285c7aebe3c53397931c25e1f1b36bfcd7c53bdfbbecc127a6c348530254bdfed9
- SSDEEP 1536:/u/TXOs0kWZrilL3fxgMqWNjdG0BtjMc+VO9Xn1YkTXb3ogiPUGq0pwoDnQauE5k:w6/ZrilLKM2Vwn1b/3ogiPhLrQaGv3
- TLSH
  T13AD39CB3E3BCA82BE963843B47BD1AA755158D901515EB251216F14D8FFFE82CA48FC0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral11 behavioral12 behavioral9
- Target
  io.faceapp.apk
- Size 45.6MB
- SHA256 b2196b281010f318748b2c9db842d14eef207e9f3337ab81781f4ec818b68fce
- MD5 598be9d9a313629e0563986926909886
- SHA1 28241d534e0e445c2575cf10264206dc184b3cd1
- SHA512 fb6c93ca047deb14ebdc34ed14333836a12c01d335cdcf31e7772203bdcc56f5b8ea8c33b6a48896b9d165e60a7d22b2cd572b9dbcce28a93c05be248de92e72
- SSDEEP 786432:3vIk/Sjjkk1amHeZTdFtrDPyaNOTCuw1K2p7Nl6uBAF30gP:fdajok1XeVJZNNlQ3b
- TLSH
  T126A70243A3228E37C87D973545B70B617B339D29674343673119B669FFB22C02E9AB84
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

collection defense_evasion discovery evasion
- Checks if the Android device is rooted.
  defense_evasion
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Queries information about running processes on the device
  Application may abuse the framework's APIs to collect information about running processes on the device.
  discovery
- Reads the content of photos stored on the user's device.
  collection
- Checks the presence of a debugger
  defense_evasion
behavioral13 behavioral14 behavioral15 behavioral16

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Credential Access

Discovery

Process Discovery

T1424

System Information Discovery

T1426

Lateral Movement

Collection

Data from Local System

T1533

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Checks if the Android device is rooted.

Loads dropped Dex/Jar

Queries information about running processes on the device

Reads the content of photos stored on the user's device.

Checks the presence of a debugger

MITRE ATT&CK Mobile v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16