c770010ef491dc2c59abe29236a39e38e053fc31f79f870ac91d1c6548866507

Sharing

Copy URL Twitter E-mail

General

Target
1win-Club_2.0.0_apkcube.apks
Size 46.7MB
Sample260731-rt43fabh74
SHA256 c770010ef491dc2c59abe29236a39e38e053fc31f79f870ac91d1c6548866507
MD5 6122758ffe8147bdd24c5dded6365117
SHA1 3800b2c0d3ac563a4623164fff6e76829d8efe38
SHA512 a74246f4d9dc6ba484d46cda73df1ca14af810021547c933cf0a35f70bdedc05b23e3a524f5ecbba7aaa25a20392a8499a2d5f2977083e03188bd382900cabe2
SSDEEP 393216:ZPLgX9wI3/wU5rULxU8GzippPXXdSnq9c+sSoSS8rcNdn8dnlx:9L+L5oxU82ipVdSuycINdA7
TLSH
T1A1B7AE57A7515E33C4AE973A94B687013B325F899743A3471006F6B8BEF32D1AF896C0
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  APKCube.url
- Size 46B
- SHA256 d9d2f7aa31bf07ba32c021a65184836b8cb8c377e72039d07919e865c25e9d58
- MD5 916ddeb1270e744cb559a9cdde88a400
- SHA1 cfaeb1811039337ff1a8f39c2ca75b5250062601
- SHA512 dcd8dd051cdd4ab39e5a2bfcf10991dfe8717652497e1e7c02dd8cb65d3cf17f8f85cf56116c72859e1b080351b2f9732cde4578667702d9ad7163c97dbc6f2d
- MD5 SHA1 SHA512
Score

1^/10
behavioral1 behavioral2 behavioral3
- Target
  base.apk
- Size 44.0MB
- SHA256 2faa7f71eddc841f703a32d5cc5d93079561f3075310ce3d73d8a9bd1fee5344
- MD5 43d413d0fe2d7d305ba41d23992f454d
- SHA1 14e9e3f21726e63fe4da19b8c1e085739698b661
- SHA512 97fffc2f14c5470d34aae82b0f0d2e6b33304bfb491a3e2d748dcab71884ae71e3c4d955a9d4b1ea30afea36186cd3ef5798754bcaf8db42d8899d01e53d1c16
- SSDEEP 393216:pPLgX9wI3/wU5rULxU8GzippPXXdSnq9c+sSoV:NL+L5oxU82ipVdSuy1
- TLSH
  T12DA79D57A7515E33C4AE973A94B687013B325F899743A3471006F6B8BEF32D1AF896C0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery evasion persistence collection credential_access impact
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Obtains sensitive information copied to the device clipboard
  Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
  collection credential_access impact
- Acquires the wake lock
- Queries information about active data network
  discovery
- Queries the mobile country code (MCC)
  discovery
behavioral4 behavioral5 behavioral6
- Target
  split_config.ar.apk
- Size 104KB
- SHA256 d5f12a33fbf0f22bdda82f02dcec3393c39732d049186cae373146701ad72023
- MD5 914b30d61988a598a2edd678b3d40032
- SHA1 4113bb6b1c028ec9e7b21bfb27cd0a64a56f054a
- SHA512 d677c5dd5364ed8f57e0bd9fa2210697b530524926ea1e021b48a4e2e9b1b77836e75b45bb179b3aee24495f202f7e912c4754cb8d7852c2739662cbf09f8cb0
- SSDEEP 1536:P5ZIBcv8QE21SnswEEd6BkRUU/E9MCmLJv3shFn3pujYfH3nmV2ZjzfvsjzfE5XJ:PzI2v0dUEhZ6n3prhk4Z
- TLSH
  T112A30A921A165423CE76CE3DD595F76CE5329E029A43FB2334427A1414FF6C2AF8A2F4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8 behavioral9
- Target
  split_config.arm64_v8a.apk
- Size 1.2MB
- SHA256 cead9f98ad929040733e6b4bbb5f6f86d7276ab5728bfe326bf322e1eb2ae73b
- MD5 f2d2c0d6b1b8c9396b2a2430a6c32e5c
- SHA1 f0e57392bd9dac46f849af0e6ec331edad68da3c
- SHA512 1f02ecb751cd94f6e44778285186a80097a38a142f67c57302f5df32b0a5981e65a6edc24e28c0c0cce53a2e1048be04640ea126552070643401787db0a6cd77
- SSDEEP 12288:d0L4+JB/ScYDrx7UIyPfrw5cY+omOyAiC5uomR9gBfquVzNtqp8PLLdzCK1lxIxa:d0McYYX/1oH31K4LLcQu1Bgd
- TLSH
  T10B456B0DFD4CE937EDC9B0BC8C6A0752B63134DC0360C2573A29991AFE876D98E65792
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral11 behavioral12
- Target
  split_config.de.apk
- Size 104KB
- SHA256 4cee7e5d0f7a21b43965794741d4216a55dacecceef624d725653e3705055d26
- MD5 39b121ddb3483093d4552cfeec9dfbc7
- SHA1 e7fb6b2d0dd72b8662d2071ba1ffc6e061b83b55
- SHA512 b722e6bca181a201a182d98b7638339255c0d8024286e038800b21060131fbbc38ee0efadad1963b445f6b5ad4d34ea73dceca82ae6b66c80c1e7da1e8ed14c4
- SSDEEP 1536:EcLOXOkY8+HGZY2IjRp1v3sh0KYpujYfHPgSZfuYLdUjzfvsjzftg2UY5:ZYshtjKYpjTikyW
- TLSH
  T11BA35BC6AF837923CD7AC63859A1C72E2622CE028B5347175640BD7E14BB7C15FCA9C8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14 behavioral15
- Target
  split_config.en.apk
- Size 124KB
- SHA256 51fb6f8ceceb59f07dcdab7673aabd4cbe8eec4813e09a483307e356e4120c2b
- MD5 8433ba3a4fb74af62ce9d95b147fa2f5
- SHA1 dd7303361f6161835375bf2cf17a0d4429ff141f
- SHA512 2d9d713b57c98e73d1975758752eb8eb277b80773fad82433e8cbce6ea4aead6c301fcb951908e05a8ed5c8279539e416b25259df3113570e772f37ab2dd8009
- SSDEEP 1536:wfhkrtqshNf8pEVHsPjzfvsjzfXVFxp24lpZ0:w5ghf8pEVqk9h30
- TLSH
  T15CC33946AB419A1FCD7B4438AD96C355293ABE03CD428617F6717A4C28BB7E45F830F8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16 behavioral17 behavioral18
- Target
  split_config.es.apk
- Size 124KB
- SHA256 ca4c1807a2d73dedf8c606055be96a81bd48c1d7caefb080439f622254b86e75
- MD5 7b67276cf6649200e16ad0204c3eea3a
- SHA1 67e7de1b03c76c3fe52e7dba5b02ec2d49d834ba
- SHA512 24a48692f6ef7ea7a8d9e78aa1efa32d096508816a40508332d36c8916d8c62ef70d9c390818bc6c1b82df1b679bed118a58361063ff3912755d58ac04218dca
- SSDEEP 1536:TGUUUEg0s0zzhSv3sheW6puWpfHpAaFKcygYWaNoDjzfvsjzf3MhZf:UT3hoJW6pkcXbPkPI
- TLSH
  T125C33992AA86BE13CC76C17CAA93C32E2169CD005A47C7176641762E20FF7D49FC39D8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20 behavioral21
- Target
  split_config.et.apk
- Size 68KB
- SHA256 cbfb532baf464b1f07be97343978b3f79597983eeb00787097ea7a739bdc6491
- MD5 a99944f7de79e581df289a872ad598ae
- SHA1 8a265b260131405b77e8cc76f32e2477385f33ec
- SHA512 b46b580e934c4446e7576eb35a8d0f4c88e71e4a079027bcc31a9ea7ba99dd3f18475ba333adea45bf5a5db062506578dbe95a0e3a90605ff8294ffd397da2bf
- SSDEEP 1536:QCliftLBtp4LtFshNfIpiPBxQbjzfvsjzfslkMntGZ:zKtLBkRufIpiPALkAFGZ
- TLSH
  T1BD638D536E909613DEBF0A78AE69C2295D378F014C608A17BA41BD0C2DF7BC52BD31D9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral22 behavioral23 behavioral24
- Target
  split_config.fi.apk
- Size 72KB
- SHA256 69a8150d969c72b9a99a5100d8e754cce60651c6c385350da8951eee0b986888
- MD5 ce1dc3ccbfd85a6ce77796da55bb28a6
- SHA1 81b30be8675adc4323fc818ae13252950bb6d884
- SHA512 d384801618cee7c5a4188acb80a267ef180934658f12f13c9ab4ce870fbd78b889611e279c58e45dcee8695135788bad28388de8a0545a9a101650615bbbe55c
- SSDEEP 1536:MH4PEtashNfIpb/WmJn8mMAjzfvsjzfvWPJelDif:MJRfIpbumdpkQ0Dif
- TLSH
  T111736D575E549A13DEBE4538EDA9C2292E324F018C924A177681B94C2EF77C12FC32DC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26 behavioral27
- Target
  split_config.fr.apk
- Size 116KB
- SHA256 48f1aba00f3e55cc2825d1f217fddab957868cc33d744bf308ae71e64d28ac91
- MD5 af57465d93edac763a21fbf6be8bff1e
- SHA1 bc2bc5b800d3f9a50609c955e46604fe5c4cfbf5
- SHA512 740a5ba04ff2ba6b673ef0e2bff6d31943fba27290c7ca7819b736163888c313b1acc9fcbb30e7a17c361bff36e00073691103a00ebf71d0579c71ca72b69ff3
- SSDEEP 1536:tcwRgDdg/vi9vnZDjrv3sh0K3pujYfHURrB2mMnwsMtVejzfvsjzfRhte6pt:tF0g/qVnZbjK3psvMumkfpt
- TLSH
  T134C34A866B823913CDB6C539AA63C32E2A39CE049B53C7035541756D28BF7E49FC79C8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral28 behavioral29 behavioral30
- Target
  split_config.hdpi.apk
- Size 298KB
- SHA256 b7e8fdb314e9c4905a20eaa93cd8671f50973218cae46e170e725120412e1617
- MD5 4c616396ccea6535d3ab34356628b6a9
- SHA1 7f740ad169492659cebaf861561ec733ca5a8d58
- SHA512 8ba31291f38c68e3cb167f7bb88f85c234499424964f504b561e87b40b33600a8f4b9628da4080b656357567c274951662e0df9666b7b92a1a7fff8099ac28e7
- SSDEEP 3072:5ZCCtTXAuljz2JwG/dxJOOGy78bqxuzslaR7bpvQD6OQrIdPFYGfKp2a88StEkRL:Htr9O3Gyaq0dI9FKSt3+Sx
- TLSH
  T1C5542AD3E36CB416EA73C53287B94697ACD80D441916A7660221F16CDFF7E81EA84FC2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Tasks

Sharing

General

Malware Config

Targets

Loads dropped Dex/Jar

Obtains sensitive information copied to the device clipboard

Acquires the wake lock

Queries information about active data network

Queries the mobile country code (MCC)

MITRE ATT&CK Mobile v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32