6bc1b10a3af903e7e55d1a70d45896275e827d19514a7f3883a4334912142a8d

Sharing

Copy URL Twitter E-mail

General

Target
v26.4_26400.zip
Size 32.9MB
Sample260904-2kr2maar5s
SHA256 6bc1b10a3af903e7e55d1a70d45896275e827d19514a7f3883a4334912142a8d
MD5 36bf003a495b52c50c3af7d9b73c7715
SHA1 1ad386cd3f50ed075bd359eecc55e9618f029da6
SHA512 341b164b4bf787d61a23535dde39476848eaa716a2480dbeea442099df8acb3a157defd04b7525849df4e6c849b9782278b06010929a23d8721438ae355dc025
SSDEEP 786432:akUmfwzqQ+RCHgpEksnCXXKAAvNk/4BYzT9Bl2XeV6Gl1deFjtqkjFq:pLmKg/mKiwq39q0l1G9j4
TLSH
T1C777334E96F42140BAB272603605FBC99A5BD021F285DE30DB65C368F7AC8E9D5346CB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Targets

- Target
  v26.4_26400.zip
- Size 32.9MB
- SHA256 6bc1b10a3af903e7e55d1a70d45896275e827d19514a7f3883a4334912142a8d
- MD5 36bf003a495b52c50c3af7d9b73c7715
- SHA1 1ad386cd3f50ed075bd359eecc55e9618f029da6
- SHA512 341b164b4bf787d61a23535dde39476848eaa716a2480dbeea442099df8acb3a157defd04b7525849df4e6c849b9782278b06010929a23d8721438ae355dc025
- SSDEEP 786432:akUmfwzqQ+RCHgpEksnCXXKAAvNk/4BYzT9Bl2XeV6Gl1deFjtqkjFq:pLmKg/mKiwq39q0l1G9j4
- TLSH
  T1C777334E96F42140BAB272603605FBC99A5BD021F285DE30DB65C368F7AC8E9D5346CB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery persistence
behavioral1
- Target
  META-INF/com/google/android/update-binary
- Size 612B
- SHA256 bcf4b1d9913f3af17755569c853e0b5a75b8005f6a18eb3f86dadcc0e968c29d
- MD5 b48a3faaac5b116c9214033f0c65eebb
- SHA1 ae5e2790ba696c866b6a8913bb071081d2ee5164
- SHA512 1318b2c020b2d6afb3f963ba15712ed2e97c90644a5ef018fbd937673fdcb182813387994c6b7742b9290f69e73e56b19974f1321a2079814c0c8bdf9b0ad45d
- TLSH
  T1A7F0C04EB6482E463B8701F040CF96C510A2F7C92EAB3AA000FEB5E44C9C4949093214
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral2
- Target
  META-INF/com/google/android/updater-script
- Size 8B
- SHA256 d2b8203193a083e43ad076fde01b9c7821e0aa521e1f8077b8628fb1cdb70c60
- MD5 b39cd178923d60d67de5c5b81a78c242
- SHA1 2f3975cb5702e93bd7cad2e3ea8914f35fcff000
- SHA512 a5c6a06ffd023af1294478b0d20d8211ecf33f3e0fe6ae60e610a02935acdc5a984acc2fcc5e952701ad47c6471522121c3a0b204290406b0417f92b3f1414bb
- MD5 SHA1 SHA512
Score

3^/10

execution
behavioral3
- Target
  action.sh
- Size 428B
- SHA256 7cbd591b4085c5a55c6eab08b268002d31dd430df29e968b2573ac5fb4ffd3f4
- MD5 e3aa733e423e20156af0fa1c47814098
- SHA1 d4cb4c0636da78886abd19f9f77ec8b9d984a592
- SHA512 393e0b62d7e899e0aa28ce296551dec7cd82ad67108b485a03b8e3d0c59acc4c3a6b9999537a02c089772d1ef749dc443e57dacbc64ff4c79dafded18e0e9721
- TLSH
  T17FE05C216C4481B7285650943C986852326F91AF0B00FC6CB9B9C46CAA5AE9D38FFBD0
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral4
- Target
  customize.sh
- Size 5KB
- SHA256 2c658740b6d5356a0ca8706ef415e9a836747b399cadb4352b266baf680d3f6d
- MD5 412af896a1c416bce5c24b7e276219b3
- SHA1 c6df954d94cc27e70f7095f32f592137ab16fdba
- SHA512 02e442ea1d33d946fa70cd7660f3a59094467619947dc72acf936378f0991c20c5df844a9627775868b204e0fc16d36c77360c54e6623948997bae02995dccea
- SSDEEP 96:Mislu7zEJgm4u7hZiasJLZANEB1W0123anZuZ0I2XO7SA6zJLCuuo:MFlKc4KhZiNJLZzB1g3ansKO7SA6ztz
- TLSH
  T18CC1680DA6228FA11B54897AFCCF6450593871D30D973A54BA6FB2E43F3D70811B7B16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5
- Target
  module.prop
- Size 240B
- SHA256 444bbfec3a0cb80635b27e9e17291e27a9d1ef79c4af3fe7c83ab166ae013438
- MD5 b4bcbf382014bc1e1ae1a58a7052ba26
- SHA1 e7b7ec0285b46a4bad0ac5a9903093e9af14e796
- SHA512 9e99ab9a9787261e224f5a581534ddecca65d065ca09d9195b37e84fb4e64ec843bb75495758ac168d870b6def0c6e1265f4d508ffb3254ecaea354cb9ae04ef
- TLSH
  T17DD097D0FC29D8A168AD17CA3A88302850B01082C3C4C00002D69002B2C136BEA7BD0B
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral6
- Target
  service.sh
- Size 7KB
- SHA256 47d85a650f5e0688a54de25a8a4dbf3619ba6f9ab673b689285a34781bd5adf8
- MD5 1ae22a20da4bdd847d373766e31ea5b5
- SHA1 a305fa98b2aad8677dede22a414b9a4efdf3bdbe
- SHA512 4c01e6aabc44a2cee5f6ed4385a166ce3bfa3758cfe87ee0d870105c929b45c40810301948a8cef6b945d2e59e24b7ae53419e1d123e66d0b7ca4574f0d1f745
- SSDEEP 192:wKyl2C3FDaxSxUYQpui90NoAzNWja5X+iO5g:wKyDp/iqN6s
- TLSH
  T13FF16206BB5945F2114D80E9BEC62452DA2D50475B0432B9344EA7D83FF4B2C11FEFAE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7
- Target
  system/fonts/NotoColorEmoji.ttf
- Size 33.7MB
- SHA256 f06ab19cd58f6c42ee7e367205e54dd7931c1344b641b977a415a279cf11319f
- MD5 ee00cb681dd69010aa03717c2fee15f9
- SHA1 b36dbadb09b8892d268e63ae436253a14086f100
- SHA512 6664195bc4bee8289ce64b52c14c3671580f93e149ddfd9ee18cb11d2dfad1f81c07308974eed6d09636ada5ffbbc18aa7b23730767039806884c0a3ef5a2d9c
- SSDEEP 786432:mkJJSA0a/q+HDsEKiQW/ISril4GC0U8G9B2Q7MGdr2+oxiO/YryG2Kxp7:mkJJea/q+QEtQ+DrRGdUjjJuxiOwrkK
- TLSH
  T1157733D352908C3AD97E5F36461B509EEC330EB73D69F61A4835F4BA5B376C8708428A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral8

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8