General

  • Target
    DeltaESP 3.4.1_v2 - Normal.apk
  • Size 835.5MB
  • Sample260819-bbdvjabp3s
  • SHA256 f03665d9db39205c17f68ad756e9113dbb6f2188319938890af4961d25b2d7fe
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      DeltaESP 3.4.1_v2 - Normal.apk
    • Size 835.5MB
    • SHA256 f03665d9db39205c17f68ad756e9113dbb6f2188319938890af4961d25b2d7fe
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

    • Listens for changes in the sensor environment (might be used to detect emulation)

    • Target
      pink_es.ogg
    • Size 1.8MB
    • SHA256 98e0fc0c74f5e430bc3f988f6e24a13d73cbaa0189961d5e448bdbb925bd100d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v16

MITRE ATT&CK Mobile v16

Tasks