3c262188584cadfc7aeb59a5fbe75357e12aa157db904ab58e6b10b43b535700

Sharing

Copy URL Twitter E-mail

General

Target
adaptation-volla-mimameid_11+git20240105023454.606adb0.trixie.production.tar.xz
Size 26KB
Sample260724-phcgyazdla
SHA256 3c262188584cadfc7aeb59a5fbe75357e12aa157db904ab58e6b10b43b535700
MD5 46835eb0e392c3218c560cfc37d7eb05
SHA1 fb5a8d4bef4780c5458aa075d886ab572523557b
SHA512 9849b00e18c2b7c060a8a3902755048b9c9bdc6b9081470e98a05898bd35d90f302fd9970da4d4b41e3bfabe08f694b526bede1c33d0f86ff5111613430dd5de
SSDEEP 768:a9+PabSTDWJkc2Xk5ZtjcN+bIa+YIrbQZ1KeM16Ct0dqYe:+ru54tgNuIbYE8Kr16CCdpe
TLSH
T16DC2E19B44F0FC84269642F6D67F30ECF3DB873525495B838A05A05F992DF8637A405E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  sources/debian/rules
- Size 168B
- SHA256 f083a4855c8df78bdd5d7de1c4f9db02bf6005e034894a114ce655d7ff12d071
- MD5 4f08e7d7298abc38f95cda04f5b70d2f
- SHA1 d0f57f49d27782b4c0fe9cefb78bac7e18ef4f7d
- SHA512 2cee8d9d836410b54083c81cc8463504edec93a185c12eaf4596867e0813ec53c0065c00d6478e312d53a0e522d0e8e7a6a9954373baa30436673a04dbb254bf
- TLSH
  T1B8C08011C05C55756D678405F56A40216C55A5555469351006F7113C87C7F561176C21
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral1 behavioral2 behavioral3 behavioral4
- Target
  sources/usr/bin/droidian-perf.sh
- Size 2KB
- SHA256 38183da5a2ea6147ee5fa0e80f60e493ff31c59e03e76d48b2f3e4819c667efd
- MD5 93f741b3bc4b043ae89077009abba201
- SHA1 0b4634fb091e0c39b3a96947ff5448c4664772e6
- SHA512 be8466b44a246f340daa296cff01f5d758ccd9052d42cb3edb91d34e9bb9bd6f87d2f08c9aea5a57cff092169c3df8bdcdf6a977b348852bf148ac70a34b717b
- TLSH
  T1D5419EE2A63787212E897561994ED82194B0DCCBE7D43464BF9F15906F0AA08C7F4E37
- MD5 SHA1 SHA512 TLSH
Score

4^/10

antivm discovery
behavioral5 behavioral6 behavioral7 behavioral8
- Target
  sources/usr/lib/adaptation-volla-mimameid/droid-get-bt-address.sh
- Size 229B
- SHA256 cddfbcc530f8a719819986bf02326642656eea879a85ffe0eba71bd73baf82d6
- MD5 5b273b8fb369ac4ac3336110b6929f9e
- SHA1 09e1b7a935ae64c5063e3bc57fc48db8f150855a
- SHA512 bfed148b446877431f44800c6d74b7aa9d59837d96449ef0d3ec9b6082600483d350af6d78217e6e304f350b49a4efc00c070d67e4e106d9042bff6f23b0093f
- TLSH
  T1ACD09705E00D2E7C5DCC3067C893444CAA0A74C0FD29600C238390D984D1A37382C050
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral10 behavioral11 behavioral12 behavioral9
- Target
  sources/usr/lib/droid-vendor-overlay/bin/vndservicemanager
- Size 53KB
- SHA256 0b884bd2c085fefbcc945f7494cf792847b276b2844f643d56e7492e228621f1
- MD5 9b102d774574a849777c4cf1fdac8f88
- SHA1 c1cfd8f46398360163e1c9edfc00d5b4b1ed6e75
- SHA512 7a345857597f72128526d8d4eaf1ad0ff9f0faf02f78f4c8c5c165f7fc7b8d953b0be1e451e0622e255101354e3f9a7c0a4dd817805b7469097a52e8c305f307
- SSDEEP 768:2f2ToWU85/feJn+J3on4yH6NN0ZlcwdzrEiT8tS:g2THUKc+J3KaNWzr1T8
- TLSH
  T18C336C027A0C9F33C8C871BC8B4707A1F5273D8A69298456B51B635EBBD53CDB24CB66
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14 behavioral15 behavioral16

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1497

System Checks

T1497.001

Credential Access

Discovery

System Information Discovery

T1082

Virtualization/Sandbox Evasion

T1497

System Checks

T1497.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16