e88794848330cf236812da531a04e644b866e5036ce450074bf791a9fe0b6485

Sharing

Copy URL Twitter E-mail

General

Target
Voice-Changer-Voice-Effects_1.02.109.0804_apkcube.apks
Size 51.1MB
Sample260814-3cte6atepg
SHA256 e88794848330cf236812da531a04e644b866e5036ce450074bf791a9fe0b6485
MD5 0dd9c27a6219617140087dc14ddc8244
SHA1 4f9abba01da72c60b75cfe6d130f3dd1b71f2f6a
SHA512 e51e1f3bc3da748393caa112a9d476ee5a40ad8ce6527ac815cb5f526f73fe27bdabcacf0ad04b072aab287b01fa6162dbb397d9edc7dedd033e6bce77dfb71a
SSDEEP 393216:hm4Eyt2HHqupIYAqWskHnzeZwh0g9E4HysWOKm1rs0VoTYvfAFA3SNe:YUt2NIm2HnzeZwhbDx0m+K0ASs
TLSH
T109C7C042A6424E79C4BF837968B7430077332E45BB875B472046F5A8BFB36D16FA92C4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  APKCube.url
- Size 46B
- SHA256 d9d2f7aa31bf07ba32c021a65184836b8cb8c377e72039d07919e865c25e9d58
- MD5 916ddeb1270e744cb559a9cdde88a400
- SHA1 cfaeb1811039337ff1a8f39c2ca75b5250062601
- SHA512 dcd8dd051cdd4ab39e5a2bfcf10991dfe8717652497e1e7c02dd8cb65d3cf17f8f85cf56116c72859e1b080351b2f9732cde4578667702d9ad7163c97dbc6f2d
- MD5 SHA1 SHA512
Score

1^/10
behavioral1 behavioral2 behavioral3
- Target
  base.apk
- Size 48.0MB
- SHA256 e86f4c8752be0aa54b79fd974b76e005e1a17815cdbdcd3653a148ab8a437d6f
- MD5 86008bc3e3ceecf602807302bbcf868a
- SHA1 5ea8f1533ba3a36834679afc0b0ee5bb3f3674ec
- SHA512 26fd9fc5eb73c36e1816a7080e3d3cc6844df09246d458a26d73bba3d05912e024713019d3f6643e5dfd05a4c17896010283281b138c7bdf17ec93b38465c587
- SSDEEP 393216:vm4Eyt2HHqupIYAqWskHnzeZwh0g9E4HysWOKm1rs0VoTYvfAFH:uUt2NIm2HnzeZwhbDx0m+K0H
- TLSH
  T18CB7CF42A6424E79C4BF837968B7430077332E45BB875B472046F5A8BF736D16FA92C8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

defense_evasion discovery evasion execution impact persistence
- Checks if the Android device is rooted.
  defense_evasion
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Queries information about running processes on the device
  Application may abuse the framework's APIs to collect information about running processes on the device.
  discovery
- Acquires the wake lock
- Queries information about active data network
  discovery
- Queries the mobile country code (MCC)
  discovery
- Reads information about phone network operator.
  discovery
- Checks the presence of a debugger
  defense_evasion
- Listens for changes in the sensor environment (might be used to detect emulation)
  defense_evasion
behavioral4 behavioral5 behavioral6
- Target
  split_config.arm64_v8a.apk
- Size 5.1MB
- SHA256 230dd9bd1e994594616d49a9c46b8fe1b923856dab66e59fffaf2c83e9744d2e
- MD5 b2418a0b84ee69b0a704d0bda919eb5c
- SHA1 c7302daf129438cd1dabf6e44d4f98898dcbe905
- SHA512 62303db226876d0351fd49e162b5c023744357ff7a0293f11d05e2b72847b6b22cc9b1d0b42ccc479d570b0cca95ff553f87f1454367368d7785adff91a56316
- SSDEEP 49152:ntdFHL8nXt0UMUY3HadgbKGwLrwtzWGzaYTwvUctPdPicGN9E:tf8Xf8HEOtzWGhwVtPdPicGN9E
- TLSH
  T1BD468C19FB5CDD1BDCC2B13848AF0B107731B8A89354C35B62299138FD877D98E9AB91
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8 behavioral9
- Target
  split_config.hdpi.apk
- Size 153KB
- SHA256 3d99bc469faa9aa923be39c8ebf1a692a4ab31059370c1f72287b071c6589551
- MD5 314a6bb67a8ea3609282c0cbf2b254b5
- SHA1 64bbea506c0ecadc8e8bd49d290fc41c1d5d038e
- SHA512 6afcae0834db0a03bc6f37d8f6992b87261a3aa6043dc565f9e7aba3ba7ee3c00fdb21b572da6a2e0b12af58ea4b5cc964944ca633d330c5dea671e2d75c8cf9
- SSDEEP 1536:uOu/6XOCj5iynaFW+gbfpjUFEP0PygVG7HuliGkWdBKXXOH0gd53oPGSvkK4uYvT:YZCQyausAuliud0KETV3uh
- TLSH
  T1B1F36CE3E32CA81BE972C93647BD26E724554C905624EB652512F21C9FFBE81CE44FC1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral11 behavioral12
- Target
  split_config.ldpi.apk
- Size 647KB
- SHA256 e11eaed13fc3dd41213328aad144be0066f0339dcb9b5b0eaecd82408f2454ce
- MD5 17608e43c658beced985df874fcdfad7
- SHA1 d7b3933f29a2111e383b617875df3566992224ef
- SHA512 dc17345b949e2a315c277fa16f24d130a1f4683385f707d9b5219e2109302fccd188c59088af865141399b0c8ed105459d0501a5548e6e5062375d5ac98a9a44
- SSDEEP 6144:5gN4vdQUoHJriSn5RaCUs51U2nBBAaf/rWN2Pw/smsHcgkm25x0w1YXgF3+7M2ht:OOqHZLCyULaHDv8gk50wj3cixk39
- TLSH
  T186E47CB3D3BEA82CE973C936C7B81AA798994D90A926E7250106F11CDEF7D41D940FC1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14 behavioral15
- Target
  split_config.mdpi.apk
- Size 149KB
- SHA256 b5d951cf06495df176026d681a8f09a39eec44f06df77092700b24ebe13d55e8
- MD5 ad1785eb11db97e71d3cb66823a53eac
- SHA1 3705e708ac621533842ec417d83503b18f8a73aa
- SHA512 73e9035ec8d6de80dfc213c608f1d2ed6e939537c26117c50a2af0df81b6aab6e629d26dd26d48e38912933f603bf7189b3806a26ca41e027c3622fa188ebdfc
- SSDEEP 1536:su/6XOCj5iynaFW+gbfpjUFEP0Py5kWKX9rilL3hWHBWw8QtodYqoPGSGcrkC4wC:rZCQyau1QrilLohB8Qrqc4kcB
- TLSH
  T1A0E34AE3E33CA81BE873893647B926E324154D905665EB652516F25C8FFBE81CE48FC0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16 behavioral17 behavioral18
- Target
  split_config.tvdpi.apk
- Size 199KB
- SHA256 28f4155950c4fe5279384b4d62deae80f24dd863577066a6a2a8841d33ca82cc
- MD5 a8153d929ea4c4ce9606bb0a4708773e
- SHA1 9adf855b38adb802747086de37b5ae34762465ce
- SHA512 d280ded20124206b1e9ac039db931dc5a5137e5a6f4d1bcc9ad07cbad41a565f9470fb115151442f4562d1c93c64cea1c2155c568e9af60415e0c2f80fa9a32a
- SSDEEP 3072:2IZCQyaulAuliud0brilLohB86bCTfjujQ:2Y4lAC0riqVRU
- TLSH
  T181145BE3E33CA82BE873C53A43B91AA314558D905665EB361516F25C8FFBE81CA44FC0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20 behavioral21
- Target
  split_config.xhdpi.apk
- Size 161KB
- SHA256 6f9c1709b13b698b7987b7c4aa47c67dd7844bc3723f0f0a79e15f049369b279
- MD5 94ce83a0b1327694fa34071a26bdfb2b
- SHA1 493feb2d9b555ab5f28402913df0dd0e1e0292be
- SHA512 dfcb781083c801c3efc3f300b8935da8c58864d317d55acc3e40028e6fd08d5790c67d1c55d24df5ba42ea3cdde3b01221bf2a1b30a1595efde68a3d60158fa8
- SSDEEP 1536:du/6XOCj5iynaFW+gbfpjUFEP0PyHoFRs0GQPios+Mcs4vNd53oPGStd1D088Xf+:6ZCQyaukFo+ewOZd1yaWO
- TLSH
  T1FDF36CE6D32DB81BD872C83187B92AE764594C905A68FBA52106F25C8FF3D81DE44FC1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral22 behavioral23 behavioral24
- Target
  split_config.xxhdpi.apk
- Size 177KB
- SHA256 0afb68efbe7df8b9052fe864de51073f095cd0a85c2d477ec800509e9693a278
- MD5 3072578d0c4f9e0364bb56dd71e7ec78
- SHA1 5082357828c3fe4f821cded1d47d7cdad1587163
- SHA512 f34c1f25495e75bf33015a08f3b7724e5b8c7e81f74d1aa5b78ba996b4ef1a19e774582b0b95f90dcecdcec25586328e7194f56f43e02332ea5b607f0b880f66
- SSDEEP 1536:ou/6XOCj5iynaFW+gbfpjUFEP0Py0mXho/2EFeJp+LceTUU0Q8LMPO00pNemd534:PZCQyauPO2EFKoLFTZ8LhpN8Ogce
- TLSH
  T1A2047CF7D33DA80BD873C93587BD2AA764154C90AA68E7652516F20C8FF3A819E44FC0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26 behavioral27
- Target
  split_config.xxxhdpi.apk
- Size 185KB
- SHA256 8f2f6c06d118c2529a158723a03ca84da4024437429c5a4af336192a6f0563d8
- MD5 1e610cdc0f012a5a472f61705ec15058
- SHA1 22488cd3c3917ecb7f260528327ddb742cab2d69
- SHA512 49485c127cfc3fa0324af73b20a1e60ee7e5336c48623d433e1f1795b9d87576916928f68974a5f1aa0680f1e531eed3a2342c068b8edc5384b3539f0437df34
- SSDEEP 3072:KZCQyaukLnLMDRb7GzgEWWWymPQoHHTyyWn:K4DR7MTLmxnGn
- TLSH
  T1E1047CE3E32DA81BD833C93587BD2A93645A4C905A69E7652516F21C8FF3E80DE45FC0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral28 behavioral29 behavioral30

MITRE ATT&CK Mobile v16

Initial Access

Execution

Scheduled Task/Job

T1603

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Scheduled Task/Job

T1603

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Hide Artifacts

T1628

User Evasion

T1628.002

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

File and Directory Discovery

T1420

Process Discovery

T1424

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Tasks

Sharing

General

Malware Config

Targets

Checks if the Android device is rooted.

Loads dropped Dex/Jar

Queries information about running processes on the device

Acquires the wake lock

Queries information about active data network

Queries the mobile country code (MCC)

Reads information about phone network operator.

Checks the presence of a debugger

Listens for changes in the sensor environment (might be used to detect emulation)

MITRE ATT&CK Mobile v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30