e65ed2f864d8f32305320da5400e9fb4df259b87cab06fd06cc6f50696d3a5d4

Sharing

Copy URL Twitter E-mail

General

Target
APK.Easy.Tool.v1.60.Portable.zip
Size 49.6MB
Sample260905-ms95vaar4x
SHA256 e65ed2f864d8f32305320da5400e9fb4df259b87cab06fd06cc6f50696d3a5d4
MD5 0f3fcb28ced416e940e4e49fbec6a0f0
SHA1 c8e3a0edd02407489321824c69d789b6357f5e39
SHA512 652710a236fc9109119d8c98cd139d694b0b521004de607de5a7013b7d5e1c73baf4cf1653cad180eba5947a82e4a3da95352925a919e83aee77a881be2e76d2
SSDEEP 786432:KJ/Gijp+a8N4nUmCtXnvRtxIHeNH8PlJ2Fijp+a8N4nUmCtXnvRtxIHeNH8PlQYi:VGYNo8tXvDHcPlJcGYNo8tXvDHcPl8D
TLSH
T109B73376BDF5108F584A58FFA43032DC829971D1A08D82B2B4E31BFA8F8D751D65CA72
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  AETShellExt.dll
- Size 22KB
- SHA256 ee082972f4cf37519bbdf017f23f779baef8b30b06446ce698c1b580dfbc0a24
- MD5 bed96f50e3c497036045c3292f6d34fc
- SHA1 df5c36d5d3222efce834c963755fa7427ddb7d2d
- SHA512 8b869ad5b6d92570140bc6a0df1a0661304d27fad15340b1e87c9c3e9814f914510e598740661fb3e770f80f82aa947b37daf37376bc431257e36483c5e41c15
- SSDEEP 384:71qDQMSiZTzOuX9Tsvkvfokw2wAEpbwAwHtwAcqlCnrwA+tkwA1Aw4wAiMTwAAJZ:7wZJ3FCk+sECruMIdQh9
- TLSH
  T1D9A24A6472BA947CC53F0B322DB292905A7B6F801D76CF0E7C8502AD0D51B858BB3B27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  Apktool/apktool_2.6.1.jar
- Size 19.1MB
- SHA256 bc2b9a87ac5a86905b6ca343c21a0db3bc37bdd51154bc9cdf65523d95895d34
- MD5 361f0c97e34aa93c7c1d8aa3e4828f69
- SHA1 f19cead377b1db01b2c7e1348aebb40e071ec548
- SHA512 3cab65fe5cdbcc072f486281cbc1efde84eb0ecb5db52bd633c07640bf3f09fb79861df303e9c569f1399aa307226545ff0973039c31c3934a70890c6af5f48e
- SSDEEP 393216:CkyM3Zw9Rt5P66rAHKFNn514GWU/zgY6tKJzlWhkvOS4eSa:CHoA5AKF7zR/t6tKF+iSa
- TLSH
  T12B1733B5F5A4E061F9874472A8330793797A06A0D1A9406319F42AF1DE0ED06BF5F72F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  Help/APK Easy Tool on XDA Forum.url
- Size 368B
- SHA256 5d679cfecf9598c958ddd5824aa53d79cecaf64841145f9af1fbf65ffd5e5a0e
- MD5 13c6b709e190b84bdf96273443c29355
- SHA1 9cec7922eee66110e173538de8be2df948c6d034
- SHA512 9b652526325e1376a7d90bca839d61c45c51833ff1c1c63e41b05d3cb94476af61f888aa3110dc66f620aaff64583c8f61287bbbae9a1c643a39738a01a7c23e
- TLSH
  T1B7E02BA6D8A58698C50244061170B9A8949EB4957CF3D4DDF264C3C53C6A46FC48E610
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral3
- Target
  Help/FAQ and Troubleshooting.url
- Size 382B
- SHA256 ce8691834fa6395a3778a50df3196ac3bc7d6b29e75744ca4114993cb47276b6
- MD5 8246094f80935119302bc859f5e42c52
- SHA1 b7b63903beec0a6819d02563df828d28219b3198
- SHA512 f3291035ea0195c461bb7f87085f3b9d92d842a3347a750e1e0eab21e59b640893e5645e370add4f29c2d0fb9114bf44d1bed67153f57458dd17a382b35a9ab6
- TLSH
  T1D3E0ABF6D8E5828CC40248062070BCA8889EB4957CF3C4DDF264C3C53C3E46FC08E610
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral4
- Target
  Resources/7z.dll
- Size 1.2MB
- SHA256 4d61796b499a4177b03e8e36778ec57293bebbf26412c69e19d3248602a2bb8a
- MD5 34738b1b326c7f65d365a5b33e045662
- SHA1 54f86f6d3b5d96584d6d2a76023f3522e09706fe
- SHA512 134faa16f9913d4cfdfb8efdc9cdda6ff6907016e0f46e3f72792cbc183a688fab0484f251efa562639a75582e380b099481d79d6324e5aded0a8041492414ce
- SSDEEP 24576:XXm+ENgUCp+R3RuC2HhS6yR1xF2rH8W7f3z9L/SDidq2:HX7cRuC2Q6S36DJuKq
- TLSH
  T1E7457D11F7F5C078D58A5630871DBBB540FCE71ACA2068C76BC0BE6E6F318D6C229999
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5
- Target
  Resources/7z.exe
- Size 329KB
- SHA256 b8c3871a5d6a473a2e9d08684a481aea7467a97d0a433cf55b127323ef61218f
- MD5 453821572a13cc6ea0736f9db6424e13
- SHA1 5f994bde8db4b658781756eaaca9416909a3a420
- SHA512 22468064ae306037d2b241e8a985ad5b037b45f6873e364f46d8066018533993e66834288227ae86e94e23511386f0afcf52776060b17dad11dfba4bc333b07a
- SSDEEP 6144:qnzsyDn7PDS+FDflUjvJUkbEOyF1rOpsuCOuOff5kYF/lTRHA:q377SKfgvqkbFyFJC5RzH
- TLSH
  T177747C133BF9D03AD6420231DF5A9BA5E0F9A26909740D4363C40D6CAF74996E379F2E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral6
- Target
  Resources/AdbWinApi.dll
- Size 95KB
- SHA256 d60103a5e99bc9888f786ee916f5d6e45493c3247972cb053833803de7e95cf9
- MD5 ed5a809dc0024d83cbab4fb9933d598d
- SHA1 0bc5a82327f8641d9287101e4cc7041af20bad57
- SHA512 1fdb74ee5912fbdd2c0cba501e998349fecfbef5f4f743c7978c38996aa7e1f38e8ac750f2dc8f84b8094de3dd6fa3f983a29f290b3fa2cdbdaed691748baf17
- SSDEEP 1536:Jwqdq+3pvspmLh8SCykrpTG7kfGHuNezq02XJqo+iFi1yCP:JwqD3L8Tezq0et+ui1y
- TLSH
  T17BA3592138A1C172C8D261B90AECF76193AEF4B10B3599C7379803DEDD653D25B7528B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7
- Target
  Resources/AdbWinUsbApi.dll
- Size 61KB
- SHA256 25207c506d29c4e8dceb61b4bd50e8669ba26012988a43fbf26a890b1e60fc97
- MD5 0e24119daf1909e398fa1850b6112077
- SHA1 293eedadb3172e756a421790d551e407457e0a8c
- SHA512 9cbb26e555ab40b019a446337db58770b9a0c9c08316ff1e1909c4b6d99c00bd33522d05890870a91b4b581e20c7dce87488ab0d22fc3c4bbdd7e9b38f164b43
- SSDEEP 1536:l72doFmOiHizFbPlspcsbj5ZsP+YeTs1p:lSSfN9+YeTs1p
- TLSH
  T1C8534B227991C072C89661B909FDE651A27FBA601BB184C7779C03EBED303D1AB79347
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral8
- Target
  Resources/aapt.exe
- Size 1.6MB
- SHA256 aa18b5646881ff3b8ca9879045a1b4a44e2d5b24fbe14486fc8236789de8237a
- MD5 80f136b0642bbc25c7578e0d24d4673b
- SHA1 883596e63700c45ab0d4d880b883f687f65c2457
- SHA512 4a95ac6b8d6252b68ccc842e8dd36056d5b0a773a86d4a8234f39cc2195ccec06fc64954655956447dfc27896720c92f8dfa4a39c2bb568c21fcc588723d86fc
- SSDEEP 49152:XPNjtbkZdmFxzKyfMKiTYQ0QQQKXQQQQQQQf0Qw:/NjtQZ8Pf1
- TLSH
  T14B758D45E693B1B9FA8315F0121FA33FBB340B018728DDE7DAC4DCB46A52AD1143A65E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral9
- Target
  Resources/aapt2.exe
- Size 3.7MB
- SHA256 fb89f3b5406a5fa3a0849b057063c4205d0774c7f363d055048e35313e070b79
- MD5 ed31826325dcdb80a04f782bff57f77c
- SHA1 f0c665492670e2b3f5900ac4d495b0c8a449871b
- SHA512 7f9eeef0bec942425a86e9d875521704b2ff8f9c3cb57e80f57b1bf20c92a5e21a22ab768a37cefce7a2079d5337c35aaa9dcb7ed065c0feb37a444916352f4e
- SSDEEP 49152:3R48P4avKq2U7UMtFhKSH0PXgw+/sDAMLLpETi0SaA0NL5Bz:eqL7UmWSUPbLIxTz
- TLSH
  T104066C49F74371B9DE4701B0205EF23EAB340B15CB298EE7C6D0DD747912AE2163AA5B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10
- Target
  Resources/adb.exe
- Size 5.7MB
- SHA256 348179b6593cf255bed4f79df4f298a8d449230f596ae033e29f5d28647803b7
- MD5 34a0a9c969b16e1dd2790fcc18158649
- SHA1 ba72918e44ba8b9e351de5619e206f04dbd2fddd
- SHA512 3890e7798e942ea877e58614c58ca8dd45f4575f2b65a454910a69c7da7ef573c9e5127a741d4b4d45cd01391282557b92f2d8f710520852a6cdda3a06e435d4
- SSDEEP 49152:Q1PTJJqjdBkxOUx27H3qCcnqCcfqCcMs1ii/uwsgyHyM5WBNCV1tNmHfDP3GZwFZ:QpoBkx5uHTs1DsLHyM59kGudh1Nxt
- TLSH
  T1C2568C49F68372B8DA871570106FB23FBF3407058724CEF7C6D4CD74A963A92293A65A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11
- Target
  Resources/apksigner.jar
- Size 968KB
- SHA256 ba13fc4122f3c8ef23eed76e13792b033fd0506de90ec3ff1e5773e383eb6f15
- MD5 16c82bdd120d4b5803deafd3550afa5f
- SHA1 c1e0626fe98fdbe2f1d483f99664ec957f44f891
- SHA512 9918a24392d397a64f39489dba1c73b1576ff1e6bc2c302f3fd7bb037b9f42f620ee90c12ebb625e927543e3163fbc47bcf99c93fde6deb0b9376e171f792bea
- SSDEEP 24576:5hCPzWIgo1IhgOBAxoBSTNDGbe48+mrmCJprmhBK5I:5hCbW6jAAks7R6OohBK5I
- TLSH
  T12F25E1239D75403EEA334236E06AD464F91926D8E093B21F72E46BCB5D25FC39743AC9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12
- Target
  Resources/apktool.jar
- Size 19.1MB
- SHA256 bc2b9a87ac5a86905b6ca343c21a0db3bc37bdd51154bc9cdf65523d95895d34
- MD5 361f0c97e34aa93c7c1d8aa3e4828f69
- SHA1 f19cead377b1db01b2c7e1348aebb40e071ec548
- SHA512 3cab65fe5cdbcc072f486281cbc1efde84eb0ecb5db52bd633c07640bf3f09fb79861df303e9c569f1399aa307226545ff0973039c31c3934a70890c6af5f48e
- SSDEEP 393216:CkyM3Zw9Rt5P66rAHKFNn514GWU/zgY6tKJzlWhkvOS4eSa:CHoA5AKF7zR/t6tKF+iSa
- TLSH
  T12B1733B5F5A4E061F9874472A8330793797A06A0D1A9406319F42AF1DE0ED06BF5F72F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13
- Target
  Resources/baksmali.jar
- Size 1.2MB
- SHA256 d3116248cce4f82ec5a31eb7f95ee75daff42ddf6eed0ab573973dc53fbad2e5
- MD5 9ef9dcba677533541b8a1385e6af550b
- SHA1 833a70ad51d9e1224a5580366e9c9853139b409c
- SHA512 ab9e83ce82be58776e6e641c1377aa8e1b70ff67e351f110366d63900b5878e49d74415df6412b47edd06499c81af2eb95196804f64d9a761b12d9351f010c09
- SSDEEP 24576:d3zBH8tQwgkZjFwL9mUqi+bGr8DncDcCbVGXMi:ZzkbFwcUqi+bnnIceOR
- TLSH
  T19D45CF4BF5B8E463F99744325463066B7D6A4340D54E017309FCEAB2CC2BC0AAE5A7BD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14
- Target
  Resources/libaapt2_jni.dll
- Size 4.5MB
- SHA256 a439a9bc2981c5f11a2bb75578f66f2b5b6afa328af05f8139321ddfe8322fad
- MD5 e84804160656ee1f7038a7a6fc1da82a
- SHA1 05b1f548c81cfd6e61e5828db80511ffb8df690d
- SHA512 ee2780d87bb801ef02f82427aecf0de2c7c496dbd4024edc5ca8d1db393c669b3cb6e263470b38811d905f0bdc7a9f3649d467082e1135710837add13fcddeae
- SSDEEP 49152:pqwBh9NbCoGOf3hglVHqyl47Gjt97AQTUVC2q7VgMbryS41CELpm1fUJ65PI6aPA:pUoGOPavHqyv7qaYCYCp
- TLSH
  T11D267C07EB83A576C98B55F4205FB22FAB300F01DB298DE7C2D0CE6536526C35A3765A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15
- Target
  Resources/libwinpthread-1.dll
- Size 76KB
- SHA256 3f41452eb1e3aac78fd29e83a530154ff8ae66f2e70a9d54b92ed49b57cdf2fe
- MD5 89c36848e4e5b4b1f38d54ce286f8c77
- SHA1 91bcff0258201826a77615bdad7d7315b0885af4
- SHA512 dde9b72c1396cfdcc74a22989cc10e367cd03b9abee474d647272f6c8e8aa2a6b868804c335bc2773a5e3ba66dd390e7dabe78344b5839c06315b04cc62a5a2d
- SSDEEP 1536:dj+7MrgyymQhXeVt3UcffVrl9jETRopN655HhUoEi1zuRvwHd541wQ04Mim3YCgb:dj0MrMmL30TuauRvw921wQ0Pim3YCgma
- TLSH
  T12C732915F70380F9D8131A711186A9D765B0970F89159EEFF7AC8C6DF73EA8099380AE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral16
- Target
  Resources/smali.jar
- Size 943KB
- SHA256 9544299578b16f771d8aa8eaefe0d3718ca03478c16f3c356f2fcf1366bfb116
- MD5 0386bfa3676962fba8ca560392d7c78e
- SHA1 d8ccbea713665f2eaaee3fc868a4ae66e5041668
- SHA512 38876215031bd8be74b7e7ba8b66548d717a0a210b93f9ced9b2e2f75cc15a42897e163846bb70e2d6a5d16e1cef6ba7e992d635958efd9a41841e4183f44cbf
- SSDEEP 24576:tDWQIUzmnJSOL8RE/NjNV9tgXFHHpAD/mg5c3Gwyt:k8REhNWFnc/mg5c3Kt
- TLSH
  T1FA25CF9BF9B8E061FA874037585306633A7F0180D96E506209E8E7B5C81FF4A7E5B36D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17
- Target
  Resources/zipalign.exe
- Size 801KB
- SHA256 bb85a787be3d8b1116aa5e1b31460abe075e878956e98ab53aa98b495fefa362
- MD5 a0c54d0479048d8666813c9ca1b62dea
- SHA1 2479fc12837fdb8ee04c93d4eb9f87f9fba9065a
- SHA512 62402cccab9d286897d71e589bc4cab893912eebdf03d2bf71368624cb677c087a564cbe96664691724a4a6aaea30507f1d5a89a03777c18849d610fdf269f09
- SSDEEP 24576:DIHViVWF74PKDeIX4CUFp4ay7Pp0G+TtWSgk:MHG/A7xuTAk
- TLSH
  T15C059D48F653A1B5E92724F5254EF33F7B340B018B21CDD7CAC89D607A61AE1187B29B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral18
- Target
  ServerRegistrationManager.exe
- Size 456KB
- SHA256 d2f9fcab646ec1a1aa87abbae685aa8748bad05cefa6d0331bbc9059debf6fb9
- MD5 f9ec9035bd2fcce0569abc47a032590f
- SHA1 e2e6f7578be1b0ddaa10ef5baac166a33ba51d7a
- SHA512 ad8bded65105cc619f6543aca63b17e3b23fb5d95359a3d605c5f489c9d58ac8a296c2025d031ccd4ea8964c652fcd2c7c769896ff63d991e19f5f899fa271fa
- SSDEEP 6144:QFptzbaiLW0BQBQLwiqrn2XP9ZTxiUbLFITQ+mJe3aolBGb:0/bpLWwQ5iqDkwMITQma8E
- TLSH
  T1B8A45B10B7F80F5FD5BAC335947A59018A71F74D3A25CB0B4680D18E2DF27428DAB7AA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral19
- Target
  SharpShell.dll
- Size 440KB
- SHA256 63e0a221f9b84973195fb1514d06b26d7b5d539123ce010b7bbc3ee37ba0fca0
- MD5 70125553edff4465dce49b2eeecb9bb0
- SHA1 e6ae96cb114292ad9de448815e680ad9f467a235
- SHA512 1a0d07f623bafd1e621af2d5e29d89f898c13a753d38fd9ffac9fbe2c8ca6ebfa605f517ef9496c958f4b2a9113336c7bbd3db3eec7f1379487734d4aee632d8
- SSDEEP 6144:BFptzbaiLW0BQBQLwiqrn2XP9ZTxiUbLFITQ+mJe3aolB:r/bpLWwQ5iqDkwMITQma8
- TLSH
  T1F1A45B10B7F80F5FD56AC33495BA59018AB1F74D3625CB0B4681D18E2CF27438DAB7AA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral20
- Target
  apkeasytool.exe
- Size 1.9MB
- SHA256 4c686d554c2e323030f0ac7d9dc7cf179ae59273ab5edc35d837e1afa7e5db7a
- MD5 ecd05b7c5af91af8b7264d5dbdea1d68
- SHA1 58a9b57885ca2935026723df9c23a84dcbef4936
- SHA512 603cd417e50b2c4f24a4fc4647d0d40d43ad5041928cc8093f4c1dd9e7b973d73c84de5fe51ef3c31e80c4c1e4cea57214b0cbe6f1306a1690015b94f6d2fedc
- SSDEEP 24576:LKySd3yqpKeJjeD8nV4YNgBv689CIcLfz3ZP9F8nVWTyFoBkkAu:NSd34Y4fcpP8nVFan
- TLSH
  T13C954A2031678205D86907B45C32C1EE1A363FDABA17C75E3486775EBE336538B13AE6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware execution spyware
behavioral21

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21