f58eb92678e9d8b982de4987b249bfa8593f7c1524aff3be9976a5cb478d3263

Sharing

Copy URL Twitter E-mail

General

Target
LSPosed-v2.1.1-7790-release.zip
Size 5.5MB
Sample260817-pp85gszfqf
SHA256 f58eb92678e9d8b982de4987b249bfa8593f7c1524aff3be9976a5cb478d3263
MD5 3d499ab48c03b9a0b51c7dbb4ab08a4d
SHA1 31324cd3b20768c46470ac78e74f99e22327f461
SHA512 d117d49cb839b240b1bd65b8ba3df4f00c163a770003bdea8e29826854f52c2b1ef74afadb3f4f179a2d7d97db11c9c8b9608610a370eaaca433ad5f8cc0dba2
SSDEEP 98304:ny2r3LqjaB4Cb5mwn1OdkQY/260azg81B/RRWDbdZRNwILH1f:nDTZlFmw1O+Qp6Br/G/ppLB
TLSH
T14F4633F73850D8C2E7F6147433D52A136AE55E5044CC7A6227266AF2B7AE2ABC38711C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Targets

- Target
  action.sh
- Size 265B
- SHA256 7351881e961dd180b942c4d0d9b665c50e1c528d38abafa3ec0453159f15b6c1
- MD5 bfef104ad182a59681388b4388b950f8
- SHA1 70f6399a5c1fe67fe1fd61f4822d08de9e93b3c3
- SHA512 7fb9e8326cea47d397225e8c4848b7878d5ecf2ca8b03b125752e9444523422aeb68feb823378791a8ac768f0b429d6a32da4bee5d25e1e0248d168cded7c478
- TLSH
  T1B2D05BD0E2664F7E9C0D4093B21D06902CD80F49F8705DA56CC405D1672F717C6C9FD5
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  bin/arm64-v8a/dex2oat
- Size 129KB
- SHA256 2952a8c16291affb984ea690161f37f8182f378ea81a7377ee9566cc2b797b92
- MD5 2c6e6ae6991f7c258920c6bbdea9410e
- SHA1 a596b17fce60bb4ac7e0a35267b76861d7e3bbf1
- SHA512 fd0ca8d162c4f1f3b44b90339dec21dd562d99d1650507cee9e827a4d6f664021bdc658a51ed56efee94980949b887373e972d7b4dad0c924c71434d35ef6342
- SSDEEP 1536:8fAbMou7eZT4K//a1mAG9WcKQycHMwem2qMLIvKWI0TTa9IixITPjTgABuPwWRrt:TZTGG9WTQycHMwemNm9IiZrEs74L
- TLSH
  T1DDD3C3898D4D4D28F2E4B4FD5C5E0361BF376908EB6B97C19933D624CE666F08C32662
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4 behavioral5 behavioral6
- Target
  bin/arm64-v8a/sign_tool
- Size 152KB
- SHA256 3f63d2ee9f67862d0641e9ab82463984c2a0b74df7f385308c7f9fd8be05337d
- MD5 df07bc6f2e626bac043a09055766965b
- SHA1 c90779340d378602fed2741791a32432483ed3a2
- SHA512 5b0e72fb9a0b4317d4253f19c51522fbeb313c76d55a5b55e4ef5afa417acc10358369d5ba39c577013f684fcc4bfde7def08d4fbcc780506f9b74d1278d4644
- SSDEEP 3072:rExTd3zHZ0DELbTfVmShR37eMPn2o9Bos0B+4y/UeDl8:rExV50DErfVpLN2rZyseDe
- TLSH
  T10EE34B89CC0D4C29E4D4B4F844AA0391BF376A08BF6B57C25933C664DEB6BF09D72661
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral7 behavioral8 behavioral9
- Target
  bin/armeabi-v7a/dex2oat
- Size 73KB
- SHA256 9a420e7c003086427f74523a2b904e4cd4418244d654b9c5f2efc256462a517a
- MD5 c63667c461449930ebbf8a99beb70327
- SHA1 8d8a9426d2d67a8a235b375f269e7f5ad34c2d8d
- SHA512 645761d2467cafaf82cf53fdf0a325262fc7e5dd09d493720dd8af3cc6872a1d3ae33266604f7464963454cab885d670cde814a713d6864420da9a4aa6589a86
- SSDEEP 1536:ZsKobbyVwD+LOOq1tfNXFVfN7X9xat3SwY2dGa:ZkXymD+Yp/hXDaJP
- TLSH
  T1B2735D9CFB608076F44E427FFF624271BAD04C6CEAF96FE95B1AA1365A303689D40435
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11
- Target
  bin/armeabi-v7a/sign_tool
- Size 121KB
- SHA256 f633331dfa315f94f8d249a4e555b9232e4e786e70f0b1caca368c8798eed866
- MD5 ec0117219ebd39f5e342166445e83850
- SHA1 b0c92f43bf9de80d4899d65276d3699229993c13
- SHA512 68d5445de4cabd8a9592071d5910b7525bd4e1bf0613ad4ddb3e19008e7dd177dcd2797e37fff24737a34aaa26d8b1ca02c281a9c4a0d88783f3c66f6c180581
- SSDEEP 3072:bxCEZTd3zHZ0DELbTelv+nmKVyHBStERF46eWry//h1R0:bxCEZV50DErelQRQstERF46eWry//h
- TLSH
  T1ECC3BFC8F355145EE48D923E5BD386987651C82CFFFAAFA9622BE8161A30B7C4D10371
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12
- Target
  bin/x86_64/dex2oat
- Size 116KB
- SHA256 fa65a3a83093a27c0d01e3c3e9cce31df6b20e1135c41a4bfd3e008285c949f2
- MD5 d32295b516fc82f422c45d09e9507621
- SHA1 a7191be59d980216821fc67ca60db1fd0d66b5e2
- SHA512 18f0a27a1b698fd410e9f794f88e59520240626bafecdda5d0e1b3335caf21c32f3610979fb88d597ff7f3fe674481b149fb21f1e8286dd56077363bd9e1e6a2
- SSDEEP 3072:jpnt4UmZH8yDUg4KEv7qqDeOtiwCE5/8Phl/Bsl/T:jpt4TZc2To7qBxwl0U
- TLSH
  T1E7C3090AF566009AD9ACCE74833D5C96933B69065243AB2F1A6B76103F3563EFF15E30
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13
- Target
  bin/x86_64/sign_tool
- Size 148KB
- SHA256 bae6e209baee40980562ad4872eddfa6b3adac61e3904c8e066674788129b5a5
- MD5 7f8c2d1db992930e1af2decf27a0f548
- SHA1 627fe14e0622924c38143e772031d562aeabf481
- SHA512 cec685e84165170285d92f0a49e24ad4ada67a302d7693766653e057fee3a402ae071f244f61fa605e1895f2a462cfb6bec026dbb9e201f30b556fb1e0f877dc
- SSDEEP 3072:5ERTd3zHZ0DELbTp+xMsa4lfHrDlY9c2nm2xnMiTdcn:5ERV50DErp+xMzu9hn2xMP
- TLSH
  T1BFE37C0BF56A066AD8ECCAB8433E2666537B79515302BF2B185B65503F3967CFE01E30
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14
- Target
  customize.sh
- Size 3KB
- SHA256 e0baa57319fc39a2f80732ef39f82686b9a318e89c53288bc96f5d66f6afffde
- MD5 2cf980114f380ae157a1c48f466d3b79
- SHA1 eac28d64dba3bb9372b1cf3ffe711e66043c6519
- SHA512 e872493e178b7b16042dbe5b8628ce7a8822bcb868223b8255e25fd781c6c4f89436b0f385aad0ca5954bc2faa41892dbcbc4f0709b642c3f721d994b8f58605
- TLSH
  T1F171120A54D34EA862E90F81D11219C522D9A9E19FE83A9AFE40B4ED733F5E49237314
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  daemon
- Size 422B
- SHA256 c89b337b826e93218c5aa3da6e384bab9afa5faccaf5c86d88a078ccfa7c9cad
- MD5 b5178217fc8ae493a41034289506aabe
- SHA1 2011e4e4efbd065f518b6be53ff97a15a9f18811
- SHA512 ca7f92874bc358df670130c5c82e53f7d102b4e7808d31b3859456cf853bc4551400d6203fc27e948ed4593d59eb7697d6923c079df772031c1eaf50f6971772
- TLSH
  T14FE0A344327E1676ED0603B146A6A1255346A19FD3717C64388579AC6C5E416B3B4F84
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral17 behavioral18 behavioral19 behavioral20
- Target
  daemon.apk
- Size 2.4MB
- SHA256 96f76baeaa5c9389174247897b7ffaa6e3c8865edbce3e1038a91c37105309dd
- MD5 38b4c787767ef4d4be90a5c1bd4ebbf2
- SHA1 9c2c46c32c49230c30e2d57a3de1a3533bd7236d
- SHA512 037dd70e04733b6e3aab5fb7685305f6b2a356ecea424975b377a37d209177b4a3097058378fe111a5e32ea3feb94484a58c22a8a05f249692b87a5257483109
- SSDEEP 24576:49UFAf5IaBZ9SF19gtL9az9DQiU0aFptL4AhIE/Xr0SWfxxIyZ/tbEix6bHDtG7:xqf5IXH294Rs3R+SWfPdt4DDtG7
- TLSH
  T1CAC56B86FE080E1DE8DC84BD496F026DA519288C4783D587997AF135BF239F84E1EB61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21
- Target
  lib/arm64-v8a/libframework.so
- Size 1.5MB
- SHA256 0160c684a85244e743b4ea31eed4eb636a8d6e9a1a8a7902f5e2f7f19049d1b0
- MD5 aaf2ed7ca86ff7081eb9564eaa1bc5e7
- SHA1 b58d00ab574803e0d573d8b78d0daf4d71dcee0c
- SHA512 5e1982dc04542433e78ce9b0b5b453d581cb4366499422fab5df50a22dd776a91c9d7b3b3691e2ef5baf0f136a539716d646227c7b3bba37911579321c31c445
- SSDEEP 12288:XeI817DC+LVEi3mGLSvTflBIYTm6LC9i8nQwGjnCYJN36Ag+omCXzzvHHUa:XeIkTIjIYtLyd8n/db18X/Ua
- TLSH
  T1CE65D685CC0D5D38F1D4B4FC5CBE13A1FC2A69CC6B5B54C1583BA528ED93AF48126BA2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral22 behavioral23 behavioral24 behavioral25
- Target
  lib/arm64-v8a/libpreload.so
- Size 63KB
- SHA256 542dba5754c8e81b242f65a7dda15fb15cd4ec5cc53e074f87775eb4abab5c31
- MD5 10744251d542eab9db124ff49e3a6bee
- SHA1 b0567e3b164e05e4392530eb4e8150cf1fe57187
- SHA512 7b81ee95727c7bd6e2d38cde855b7cce35e99cd3e0ebd348bd6fb758194188189a026369e8375a559c13f20a0d5d330a783dc52a8e8eacd14ef9291da37bcb44
- SSDEEP 768:uqZV1VmLpAouMx6GUjwmK4bodgHrW4VDlPkrKcsXsipnitNOdm77//Dt:us1VoxWRHy4LPkrKcq7pisE7p
- TLSH
  T11A53D588DD490C29F0E4B5FD5C9F0361BD2B2954EF6BA5C29933D624CE627F484336A2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral26 behavioral27 behavioral28 behavioral29
- Target
  lib/armeabi-v7a/libframework.so
- Size 855KB
- SHA256 35088f75b5a2906d752160493a30d9d550327a9876c592fef286d0c684fdc11d
- MD5 1f411b79ffa8c4d32d09caef0b6ad7e3
- SHA1 b23b70582758b8b7745b2a4c2dfc49a36b6d4d58
- SHA512 dba5a2aad5281287b3d62cce73795d229b05b24a116076bfa50979681d5c9945897466a1afb68a3a729311af2a10fab2aa42f7c691afc0875ad8ac58e2b5b4a8
- SSDEEP 24576:QP0Op6KcvxOHsqRAO/PtxwqsPVw7K6nM:QPhp6YbGWtFgemq
- TLSH
  T12B154BD8F7A40F99E44F16BFFB628160A9C95D11EFB86EE85B0BD3317431A781E11620
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral30
- Target
  lib/armeabi-v7a/libpreload.so
- Size 38KB
- SHA256 4069b3b501c3024e0f2ab02eaea68899e8a93a60a6aa396cad827961277690ae
- MD5 19c338ddfec7dfb07cbc19d6ce611a7d
- SHA1 2c921c0fc734a38e8d5f1baf18de78140d1ade13
- SHA512 8e113f04f9e19bef7f5ea8fc5cab86f6c1034834a6e52f07e11c47fb67927a792a8000c881848e0b638d6094460c68034425542e2aebc2c3f03556b3cb64085f
- SSDEEP 768:vodSevqLjbdc1IUuQWe1HPFeacBIK6u+XVO:gMbdyJWe164ZU
- TLSH
  T1AD0339DCA6249937F04F433FABB243A5A98144ADDFE97EFE1706E0256B313A88C15570
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31
- Target
  lib/x86_64/libframework.so
- Size 1.3MB
- SHA256 c8b07f8856827822d3ce16f97dba6458a0335d29bded7d6632a9a9426842f8df
- MD5 69cfa2738d6faf3d1ac3009fa6315cd0
- SHA1 1b730d7146036ef902ea7694ba102ebb5fc7c126
- SHA512 e1334b9db2508c75df98f345337a3f75d350abde938bb719145a33e525fc85e644735ec4fb370a3745ef8abd688efec77f48d5290a2bcc319734ed41d0645caa
- SSDEEP 24576:/uA0fYYkME86JkKQORqPyO44wD9AgunLrDcsWuZDrw+8Rr:SKzRqjkEnLz8Rr
- TLSH
  T15E551906FA754655CC6CCDB4867F68A69318784A42C368370C96FA303E3683EAF56F35
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32