General
- Target DeltaESP 3.4.1_v2 - Normal.apk
- Size 835.5MB
- Sample260819-bbdvjabp3s
- SHA256 f03665d9db39205c17f68ad756e9113dbb6f2188319938890af4961d25b2d7fe
- MD5 f146ca43b079534f284ebef8697018e8
- SHA1 5d6043dcb2a469dc453fec1c724f392c62131716
- SHA512 d13f9a3d968890cab3a0c2948e5c2a6061bbf7049879519da8919fb362e57422a1263ad55157f626ed23b5aff6710afc6775cd08a9310c1ce46014c215fb4bde
- SSDEEP 12582912:a5kTFP9QzXbPokxM+lCCi8vBx4pSLFqRKs8pwvnGbl7RC/gx3vWzyUeqZgyRBvtv:lEzZx2CFMysKFQGblagxARtY7MGU
- TLSH T120993355DF865ECAC46D35B089A70F1033FE8CAC43928B439BB83179AEBB7546C16847
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
DeltaESP 3.4.1_v2 - Normal.apk
Resource
android-x64-arm64-20260325-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
pink_es.ogg
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral3
Sample
pink_es.ogg
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target DeltaESP 3.4.1_v2 - Normal.apk
- Size 835.5MB
- SHA256 f03665d9db39205c17f68ad756e9113dbb6f2188319938890af4961d25b2d7fe
- MD5 f146ca43b079534f284ebef8697018e8
- SHA1 5d6043dcb2a469dc453fec1c724f392c62131716
- SHA512 d13f9a3d968890cab3a0c2948e5c2a6061bbf7049879519da8919fb362e57422a1263ad55157f626ed23b5aff6710afc6775cd08a9310c1ce46014c215fb4bde
- SSDEEP 12582912:a5kTFP9QzXbPokxM+lCCi8vBx4pSLFqRKs8pwvnGbl7RC/gx3vWzyUeqZgyRBvtv:lEzZx2CFMysKFQGblagxARtY7MGU
- TLSH T120993355DF865ECAC46D35B089A70F1033FE8CAC43928B439BB83179AEBB7546C16847
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Listens for changes in the sensor environment (might be used to detect emulation)
-
- Target pink_es.ogg
- Size 1.8MB
- SHA256 98e0fc0c74f5e430bc3f988f6e24a13d73cbaa0189961d5e448bdbb925bd100d
- MD5 ca28f60849083a9d304ce15a253fe412
- SHA1 b84abdb5b1f4c92da89d6c8eac07c886a8daee75
- SHA512 6ceaf87ef2603444f633e37b5fe40482eaf8c15ce4b9276ae62e1ce5a691860fdec1e77e88eb905e47fc348e931eb7ffba0575687b3eab4dd7f06fe91b86f62e
- SSDEEP 49152:yu0fOzV9bZoNS2GlHUHNmIN9xvbIzVzdFbyNWc:yu0fO+NBPHsnfsNWc
- TLSH T12095233D914AA99DF8CB70B24C02003474BD8E7E53D477AACC63B1937A3FAD4095999B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.