d971f85daa13cf1775ae76096cdb8c140c50675043c98508f41e81ee44ec54b9

Sharing

Copy URL Twitter E-mail

General

Target
Desktop.rar
Size 184.7MB
Sample260923-ye5trabc76
SHA256 d971f85daa13cf1775ae76096cdb8c140c50675043c98508f41e81ee44ec54b9
MD5 d7a74dfa601660977c8e521c6d3b7387
SHA1 7887be792887cd1225e4f5e03c147355cf66d3ca
SHA512 f6233e6fc3c7cead141f8db80a4f4ce6236c9a833dc7f5a8b74575ff046563a0479593770ebda13ccc59a880a65105bc1dc38f87d2eab29485a2bca470949a7e
SSDEEP 3145728:dFn0a2JT6Dy3DfpjLpcw5F9/RNxj7rYNFRmo+XNf6/VXtXkizYETDx7wbbsyi/ch:38tTFR97M1moicvXBDdWbxi/cqmZc3Bs
TLSH
T15B983391D1B27728FFC8C88B0779279B22C022675B68444BDD1FEFD84D818E977A3865
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  LA PLATANERA RD/LA PLANATERA BOT/LAPLATANERABOT.exe
- Size 51.4MB
- SHA256 8b51a85df6508880f18beb237dc86dd82f06edf70a00ac34410f3190b2cee1ba
- MD5 919ad9ee2a21c0f97a9c7a911fedad15
- SHA1 2456b2190aa20b19fee9f56800f85af1e082b325
- SHA512 6ece8b8d6b7502a0aaaa69b6529da37fc20b8881aa93664a215989f00f53493327afe6efd96fee20939d4d3c417c4c7c500ee9c01ad7e9f424065fa4eeadb558
- SSDEEP 1572864:OnddZnbNXuwZ0BHrUe13cV7UU0t0CslqgiT10pCq:OxXuwZcLXctUUY0CEuWpC
- TLSH
  T1B1C7332691A1035FF817A63879FA82A7E175FC445712844F2B1A677B12FBED38C37A40
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Loads dropped DLL
behavioral1 behavioral2
- Target
  LA PLATANERA RD/SocksDroid_1.0.4_APKPure.apk
- Size 771KB
- SHA256 4a92f430648fc4f6ea22abd0e5f9c0dbff2e3daf2220dd51616b3e7c341e2136
- MD5 813da647dcf263c650da66365058d404
- SHA1 fd6024425f9ed2d65eb6a5f17ca15c301b32937b
- SHA512 1a6b5ea5e7c27e5dbb78023e6bda42a6f032b05374fae8f20ae32f161ae92cd7715706979a08e4748af4ae40971b0ac4cfe18d33d6a2c7ed38c87137e6c0c9f8
- SSDEEP 12288:/xFfENK6vYRUXvWSINChELyRfBR1Ge1YIf9BGbo87EqnWuJ8WR:/TfENLvhECh+yRBGJIfKE/uNR
- TLSH
  T13FF412FEA7EABEF2D8D6553C603AB3659021844197D3DB830B1C16A7B4472C17F18A78
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  LAPLATANERAV4/LAPLATANERABOT.exe
- Size 89.8MB
- SHA256 a1439a499be80819cfdb6b535f57391a3c07017f775c24145ed644cef91fd06b
- MD5 f2c273856882985f5fd70167c6503069
- SHA1 8e77935a40b984539c22e5fcfa7ee5349c60853f
- SHA512 948e8c3f4647795a15460a304cb01624dfa568ca8460e5070ab26df92d58ac14f21b4accf1e0c025d513cb12a2168704e47e691b50d0bf6021e87af0126510b4
- SSDEEP 1572864:EnddZnvNXuwZcHroR1/MV7UU47bkRkOGtjkqZmyEF30CslVgiaYzMpPf3wZ:QlXuwZcLWMtUU4qAkqk30CEMYop3g
- TLSH
  T192283365A0E1035BE96BF13479E6C367E171B4809223C45F2A2A93EB61EFDD34C37A50
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Loads dropped DLL
behavioral4 behavioral5
- Target
  LAPLATANERAV4/abriremuladores.exe
- Size 8.3MB
- SHA256 ed8476ac2c306509641d532973456a91be27284a8f95ef1f1d24a0b5c5a96784
- MD5 89f5347c8c4982a44e2ed1f5e89b0bb0
- SHA1 1104ed55835a34d8ebe76b7e4adee4abc39817fa
- SHA512 e4cdbc200ea625fcbf88ab43bef185502298ea1a75520035996ebdc8a86e530a50274d7a6d5967bde798e8f71e2ba9ac0a276fea5a3e183df16c4e531a8fdfe5
- SSDEEP 196608:WaBjtbW897Gax7eovq5XMP6PzFcsDHsoqsbRjMFb:zj1tdq1B7LDHsoqsbpib
- TLSH
  T13A96339912D105D7E4B7E23C0BA2A2A6C2727C106B22C99F1760737E2E7B3F15D36B50
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Loads dropped DLL
behavioral6 behavioral7
- Target
  LAPLATANERAV4/acomodaremuladores.exe
- Size 8.3MB
- SHA256 ee28f43b79ea573b2433c22dbfe9f38d62a26e8a00ef8d0f0f972d16d72acac4
- MD5 e1c8511643250ca9cfaf85c0a4187884
- SHA1 2f4bc49a6899301ca85f07cc6e6f5897cbd13a89
- SHA512 9b52dd9662583cc73aa249a38ce4eb987a90c4da3b932c3a3c81070bc3c02f1e79c45a444d1544955983fe7988a76120cfd0167e84162ecbec8a5b4b249bc09b
- SSDEEP 196608:M85PE4UtbW897Gax7eovq5XMP6PzFcsDHsoqsbRjMFb:TfU1tdq1B7LDHsoqsbpib
- TLSH
  T18396335952D001E7E4E7D23D1AA2A2A6C2727C107B21C9DF176073AE3E3B2F15E36B51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Loads dropped DLL
- Discovers running processes
  Running process information can be used to identify security tools or plan follow-on actions.
  discovery
behavioral8 behavioral9
- Target
  LAPLATANERAV4/apks/app-uiautomator.apk
- Size 2.1MB
- SHA256 5f06e7d10c06d264bf56fa579e9f7ae57d3c98f0723ba209d8f276253f898ff3
- MD5 82fa3a0ac58d8ded2af5015ebf767e37
- SHA1 cc6c4af38d99f40d60faed3752931da928647970
- SHA512 28365d0496fca2a8e56feb040b02e3fef13788c751622c4fedd14de89a8e52cb42d55279962b1ab787fa87f7d1a365dd6d1f320f672120dc7e64793fe330966b
- SSDEEP 49152:EIEtnGxOppeGD/mq8XHNczOT/bSOc+BubNxIe7cK5g6Eve6Blb:gtnG0pbzmq8XtcSqsBubNxhvKn
- TLSH
  T11DA50191F3C9BD2FCD7780374BB70B7A15564C4A8A45C61389A9B22C5DBB9C08E85FC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral11 behavioral12
- Target
  com.dish.wireless.boostone.apk
- Size 17.0MB
- SHA256 30b053e57dc546c4bed858fb3adc7d48c9f306b60553ef30b44f5529768e1693
- MD5 2baec54ce5b7e7e66fca8826e95adcb5
- SHA1 5d3e39eda2cf5b6007bab0ff65783bf9d0212f75
- SHA512 df9f43176d28a807a6e2d1e0a466422d65f82906762722f57d50ed7976d8efd2aea4131fa149b9ebe0f6e5a2a9f7eaf59ac4d305b6a3971233d82434ee8172f4
- SSDEEP 393216:Ia1qznLOLk5kxTrDbvegvPsHx2B/Fmnm7P9g3He3fh2VnP:Ia1qjLO/vDbmgWx2xFmnm7cHe3peP
- TLSH
  T1570722C2F32DA41FE8B754724D6AD265071A4D81C4426B5FBA44720C2AB36D46FBAFC3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

defense_evasion discovery execution persistence evasion
- Checks if the Android device is rooted.
  defense_evasion
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Queries information about running processes on the device
  Application may abuse the framework's APIs to collect information about running processes on the device.
  discovery
- Acquires the wake lock
- Queries information about active data network
  discovery
- Reads information about phone network operator.
  discovery
- Checks the presence of a debugger
  defense_evasion
behavioral13 behavioral14 behavioral15
- Target
  config.ar.apk
- Size 44KB
- SHA256 53debc5b072e0f5e4135fbcf1885c0784ecdad7ed8f7adf5ab2bbe9111fa23ed
- MD5 74fe53adb26b73329e2883ac928ab9f4
- SHA1 4e4e76c99dc3757504eeedbb71dd8884cddf7c6b
- SHA512 1d4453e397f36d7ba429d1fbd34874633545e07e7b7f9b2b21c30b8658082d915d7e08955c964c1e3595f5e0d4be1c0388727e3aef7d78eac30bf08f54fca8a4
- SSDEEP 384:FuZqBxm1Rv5gFILFZr56tshgA4Bx1/z84CpjtDUDU0eIUrDVfdjY6:5mrv5gKTUtshgA4Bx1/QkDU0lUr9
- TLSH
  T18313E7922C608426CEBB4D39D4D6F159C5368E125D41EC11B9A2320C56FBAE297EF3FC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16 behavioral17
- Target
  config.arm64_v8a.apk
- Size 5.1MB
- SHA256 ebfa0f624c0365a1e0d1f0817aef54f24b0a3b7450c5e042b3db11a07a1fa9c2
- MD5 e3305790771588b60938ca6ea4c40774
- SHA1 04f909bbc4d825aa38409cf28d80bcdc283cf5ac
- SHA512 36f8307ca27ac98780ebff471edf84affec7cbe5c91e07287a68bc215247f33e7f658bd138eade9e154080f98d6c3d9fe9191e348cc2a3e4b589433163ed2760
- SSDEEP 49152:XlpzF6c+eaf3eEtTedJP5dTgfIILafNZ6oLPEAzAgVckOK:XlpzFt+eMtwJP5dDtKoZzXfOK
- TLSH
  T16746AF49D90DE933DAC9F0FE8E8D09A2B026345916A1C1891D23831DF646AF49B77F73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral18 behavioral19
- Target
  config.de.apk
- Size 52KB
- SHA256 b794331cc06d2635e2bc9afe7310919ca5513dce7f98537c26425110a22dc895
- MD5 1f1f07f604cfbdb9a8f5107920ff6ca0
- SHA1 e95aff7d0fd4087f783e86a142ce1cdb8bd1ecaa
- SHA512 2a1143aac91ec64eb7fc93402b444c41da497ad1fce10f46a399f3f15cf580a2ad74a380e95dd3e68a8695f24652e4fa55b5573eb9d431c25e89d4cc2ed99bdf
- SSDEEP 768:qgh7i/juVFAV1yKYtshglpBx1/bqB5vUbPBUQ:qIAZVlYtshQpBjevUbpUQ
- TLSH
  T105333B92BC519917CE7F02343D96E515143ACF400E025A42AAA1762C66BBBE797EF2CC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral20 behavioral21
- Target
  config.en.apk
- Size 120KB
- SHA256 ffb86a7510e0789d2298a067c751a6d497f73b2d3d8abf55011692b0a36bf903
- MD5 62e6ad7b67aa6d0bcd2158fc6c76749c
- SHA1 dec7fdfa4d2dc099fa99350c87f068fc44f9c176
- SHA512 36ef3f263c5be21aeca6b5080021485d5eed1d49677f0c522a6bb2c364e6a9afcefb9c96bb17c636313b63d35dd86203976658001195810d4430ca5e5895f453
- SSDEEP 384:v8RP0PaMU0Vl1EeYcoeTtkthu7JbRLkrtshglyANzx1/uNBx1NEcUcNsXhywnPag:v8hO7keY1TSj2tshglpzx1/KkNaxUsUh
- TLSH
  T176C3D856BB429A1FCD3700382C879250143ABD43DE468647E6B1361C25BF6F29FD62F8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral22 behavioral23
- Target
  config.es.apk
- Size 176KB
- SHA256 4541a466abfccd01c06401d28138c1903dca24369b8e829f107cd6cdfbb655ef
- MD5 bbca467ed3b0e56794ec2cf698e10edb
- SHA1 b36f41115ad353e82ab262371aaeafcc477f5b85
- SHA512 928131adba18d1ffca2feebb1862323d9d659a0cf6482a0c1a079f1341ef34179d56e1d8598a854a3e35869b5f93d8d83ca9573593a2177449d2473b00bca374
- SSDEEP 3072:7L4jUXzkOc+yhiq9ERDLIIJo2ZUc8V9umF:7L46oOwbAo2ZUVau
- TLSH
  T1AC042A12EAD57E03CC738279A782C22791A48D442A4AC643B565733C21FFFD8DB97AC5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral24 behavioral25
- Target
  config.fr.apk
- Size 72KB
- SHA256 537407eb4d11eb0f723a1503102e57da0e70b2c6afed432349de99ebcd7b66b2
- MD5 7be5c81c5bebc78fac960d3f2149b798
- SHA1 7ddf38b39829c0253fe1d4dadb62d4bd3f9d7b9f
- SHA512 d47b1ca69bf432336336458e318a14ccb91117bdb71f74a1fcc203ac7234c148e89acce87677d43353222d0ed32e6b46a226fba82a3fd96907c2c7215065b1d6
- SSDEEP 768:L40AW25WW54nNcUnzzouzIVtshglpBx1/iJUCVh+zTCSUsfUp:LfKBmcQIVtshQpBjdCVhAbUIUp
- TLSH
  T18673F7467D92A503CD76867D2893D2125939CE045E438753AAB1320C22FFAF69F973CD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral26 behavioral27
- Target
  config.hi.apk
- Size 48KB
- SHA256 d8ba477fadd55b18ad173a3c46c0630512263b413fe49cdbd22edd32d67cd467
- MD5 e9440e45886438aae99588e02cd3d280
- SHA1 c46f43d77fb0f3148fef4391dcc50f5286e75f7c
- SHA512 c390270ac64059873bd45b31aa5e9590a2d53fd3255ff114ee6312c3488855288631784e95022c23cb7e8ecb01b6dec10053b900158c24ba07f3ee16d791edc4
- SSDEEP 1536:OBSE/FqJHrFsymUYOqfdSH8T3hzSPbmS2DEtshX4BjDUqUkBEBQE:OBSE/FqJHrFsymUlqfdSH8T3hzSPbmS0
- TLSH
  T19C23F80DBF79F662CDBE38743A55883644386F305B908603A991738D95B7DF107EA2C8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral28 behavioral29
- Target
  config.in.apk
- Size 40KB
- SHA256 b725bb47c5905cb1f7c7feaf93e935dda467087ab21186a7e358fd7a1574a436
- MD5 81bf95465f726f3acb476f555645b411
- SHA1 b7d31285d21ccc779b6744e8a517977775aa1bc7
- SHA512 368bee4f1efec4f5453c20ac3127cf4e32be88a7c88c555f5f1ab5c050d8ee7e4f5b2623cde9dd659655a6e8b3277690740aaa9994cf4c7f7c9a65068d855a9f
- SSDEEP 384:Cg8KfgHw10x8WYSmrtshgA4Bx1/73sqOZaSjMUFzUb/VHHoAolj5:W7Q2fEtshgA4Bx1/hUUUxUJIpv
- TLSH
  T156032A567C91AA07CEBF05742CA6D50608398F014E559A46EFD0722C26BBBD35BEB3CC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral30 behavioral31
- Target
  config.it.apk
- Size 52KB
- SHA256 c310aa4f02f5d730861909fd0df3624a7e46ee84db06e0f619dbb89631067a68
- MD5 b4cbc3321fd8530b49ffdac3a125acd6
- SHA1 eb07b0009f992b3ba3a86919da35af830335139b
- SHA512 d03969a1975ed8d136db18869122f0d5e1db81097b7f3012f1cc3497dcf98ed8de0f5ae7c959e4e67526f60c887191c2ce0d7f74a9765b9418a1dd59fd309fa2
- SSDEEP 768:sJSoGt9Vr4qGDdTFtshglpBx1/+/SO7U4Up:sg3t9Vr4RFtshQpBjO77U4Up
- TLSH
  T145333C667C918913CEBF06782897F14111368E845D415A42EBA1321C22FFBD2ABEE3DD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Process Discovery

T1057

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

MITRE ATT&CK Mobile v16

Initial Access

Execution

Scheduled Task/Job

T1603

Persistence

Scheduled Task/Job

T1603

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Credential Access

Discovery

Process Discovery

T1424

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Loads dropped DLL

Loads dropped DLL

Loads dropped DLL

Loads dropped DLL

Discovers running processes

Checks if the Android device is rooted.

Loads dropped Dex/Jar

Queries information about running processes on the device

Acquires the wake lock

Queries information about active data network

Reads information about phone network operator.

Checks the presence of a debugger

MITRE ATT&CK Enterprise v16

MITRE ATT&CK Mobile v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32