1ab689c50b2b93fd355d3fcd8925c68688c15e26accd139d67b201ed14f85400

Sharing

Copy URL Twitter E-mail

General

Target
adaptation-volla-mimameid_12+git20240105201815.4fc8586.trixie.production.tar.xz
Size 26KB
Sample260724-j1fdnavfre
SHA256 1ab689c50b2b93fd355d3fcd8925c68688c15e26accd139d67b201ed14f85400
MD5 85120c99e003ec3dbd138d757622ccc5
SHA1 d75ff6effe3778ad9c112509cb2a0c5127e9351e
SHA512 b2cb46dc8d9f6a78d0cb4fcc383d4d15808a723dce38a203c8f39b169a30a475e75e2130d77cc3223e657285575fd5c64e8f37e55493a6a0c6f4b449b2fb2902
SSDEEP 768:Pto35r+5zv71gCx/OltYDM8CfL5sq1UaIh:i35r+lvhgY/OltaosqGLh
TLSH
T1F4C2E1F71A408250D16E81CB91F947FB9941A0DA890862FFD33497B286DF9FCEE85344
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  sources/debian/rules
- Size 168B
- SHA256 f083a4855c8df78bdd5d7de1c4f9db02bf6005e034894a114ce655d7ff12d071
- MD5 4f08e7d7298abc38f95cda04f5b70d2f
- SHA1 d0f57f49d27782b4c0fe9cefb78bac7e18ef4f7d
- SHA512 2cee8d9d836410b54083c81cc8463504edec93a185c12eaf4596867e0813ec53c0065c00d6478e312d53a0e522d0e8e7a6a9954373baa30436673a04dbb254bf
- TLSH
  T1B8C08011C05C55756D678405F56A40216C55A5555469351006F7113C87C7F561176C21
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral1 behavioral2 behavioral3 behavioral4
- Target
  sources/usr/bin/droidian-perf.sh
- Size 2KB
- SHA256 f0e0723e1f32656b762cf3771226294542df62456e9cda688d23db3cc4e74032
- MD5 d867d92314170cab6c5d10a868d5b062
- SHA1 70983ae06b43ae28f3f851ad889da99888348eba
- SHA512 1b3dc3ac553bac5882fff27aa623172ae8d9b601fceee9ef19c3355b4a01d0dc764570f86e02e6e5a3f183d5350fa4fe97587ef44fc33b0e0c8164d61b2578c5
- TLSH
  T1E941C0E2963787212A8D7561694ED82198B0D8CBF7D43464BF9F15906F0AA08C7F4E37
- MD5 SHA1 SHA512 TLSH
Score

4^/10

antivm discovery
behavioral5 behavioral6 behavioral7 behavioral8
- Target
  sources/usr/lib/adaptation-volla-mimameid/droid-get-bt-address.sh
- Size 229B
- SHA256 cddfbcc530f8a719819986bf02326642656eea879a85ffe0eba71bd73baf82d6
- MD5 5b273b8fb369ac4ac3336110b6929f9e
- SHA1 09e1b7a935ae64c5063e3bc57fc48db8f150855a
- SHA512 bfed148b446877431f44800c6d74b7aa9d59837d96449ef0d3ec9b6082600483d350af6d78217e6e304f350b49a4efc00c070d67e4e106d9042bff6f23b0093f
- TLSH
  T1ACD09705E00D2E7C5DCC3067C893444CAA0A74C0FD29600C238390D984D1A37382C050
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral10 behavioral11 behavioral12 behavioral9
- Target
  sources/usr/lib/droid-vendor-overlay/bin/vndservicemanager
- Size 53KB
- SHA256 0b884bd2c085fefbcc945f7494cf792847b276b2844f643d56e7492e228621f1
- MD5 9b102d774574a849777c4cf1fdac8f88
- SHA1 c1cfd8f46398360163e1c9edfc00d5b4b1ed6e75
- SHA512 7a345857597f72128526d8d4eaf1ad0ff9f0faf02f78f4c8c5c165f7fc7b8d953b0be1e451e0622e255101354e3f9a7c0a4dd817805b7469097a52e8c305f307
- SSDEEP 768:2f2ToWU85/feJn+J3on4yH6NN0ZlcwdzrEiT8tS:g2THUKc+J3KaNWzr1T8
- TLSH
  T18C336C027A0C9F33C8C871BC8B4707A1F5273D8A69298456B51B635EBBD53CDB24CB66
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14 behavioral15 behavioral16

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1497

System Checks

T1497.001

Credential Access

Discovery

System Information Discovery

T1082

Virtualization/Sandbox Evasion

T1497

System Checks

T1497.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16