f7abf91acde62ba4162693c08e311941f1a69238c7834098d953cedffbc720e0

Sharing

Copy URL Twitter E-mail

General

Target
MAR.zip
Size 7.7MB
Sample260924-wvhm2sys8k
SHA256 f7abf91acde62ba4162693c08e311941f1a69238c7834098d953cedffbc720e0
MD5 58a9825f5013877bb1e1d2ce400ef670
SHA1 b7469a94a1761d1d19bc39e4995dda0213e00d27
SHA512 64477a95c18bf3b1c9f9dd5e0fedc18ae572414b6aeee36f971d2a1154ac0be8de62cc4ec83f2bdd5dbae01c287b652e507c953b02821af440ca00f6fec315f2
SSDEEP 196608:qm4OJ1A/PYdNqqWdTGmfpJt3DatMjSHWbVTTnzFDXH9jr:qm4C24W5GmBJl0HWJX1X9X
TLSH
T12386337EC0EA95D5B367E434DB0707D4A07A1C2A626E88E50B535BCE1C2C6C49B7E13E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution linux

Malware Config

Targets

- Target
  META-INF/com/google/android/update-binary
- Size 612B
- SHA256 bcf4b1d9913f3af17755569c853e0b5a75b8005f6a18eb3f86dadcc0e968c29d
- MD5 b48a3faaac5b116c9214033f0c65eebb
- SHA1 ae5e2790ba696c866b6a8913bb071081d2ee5164
- SHA512 1318b2c020b2d6afb3f963ba15712ed2e97c90644a5ef018fbd937673fdcb182813387994c6b7742b9290f69e73e56b19974f1321a2079814c0c8bdf9b0ad45d
- TLSH
  T1A7F0C04EB6482E463B8701F040CF96C510A2F7C92EAB3AA000FEB5E44C9C4949093214
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral1 behavioral2 behavioral3 behavioral4
- Target
  action.sh
- Size 15KB
- SHA256 f8287b1a83eca978a7a5db87203acb4432aa56d09be4dc6c6e4b5961fc9534d7
- MD5 67b0e744eb65a8250b8bb4a2bab898e4
- SHA1 b6cc8a73371e1a4eb62ad300c94d828a530b0075
- SHA512 982f6b60bade122f0894d8b4d0ef12afa44fde4309880b3c1cbf3c7bf729247aeb92271d165bd3a97641f46c7943ee4e812be456fb77967696cc5445222d058b
- SSDEEP 192:yDIVvmzzNSoqiF4f6qtMjDG3MhVsoudGqyqsYS7hErkKEVq81D+EBPB2:QqmSoDGnGqyz+R815y
- TLSH
  T1A772D762F90C85711A9D84766F86A9946125439F123838A870FFE0AC7F34B6474F93BF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6 behavioral7 behavioral8
- Target
  common_func.sh
- Size 19KB
- SHA256 2f47053516778c13f1db917b4e61162ce177df7534f417f4509d7e94a84c460f
- MD5 624750a4284437fd9bb05aab97df0a38
- SHA1 e1ff210a6f461c7388cbbe210f7dfc1493ac516f
- SHA512 02f5fdaa00f6297a18367e14e54fbced3cad360af4539802a1df1279413b91d01ecc6bd7575bdb02cc06ed19e5c9ca277137ed1e90dfc0a18d5642cb0fa8a86d
- SSDEEP 384:l43TQuvRBxCO8hI3iYkVk6tsBlDsBlIP5EFcm57f53Klv:l4EuvRBUO8ct6tsB1sBeP5uTf53Klv
- TLSH
  T139920A86F9910CB12B4D92B85D87AD0075CE024F066D6A59F1DDB69C3FB4268F0F439B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  common_setup.sh
- Size 1KB
- SHA256 21bf24a808f6fce44a6111a1f23b3829b63d0ea46e28362b2d67b2bff8c4b549
- MD5 8d1362d7bc76ee9e0c3b40ba24558800
- SHA1 1fa8bcc89b4d81153b44ea61acb18408eac609d0
- SHA512 570de222efb93ca2c0256c5a2a51cf211486b088efe9adc3e2f1126f374b672a9a35c860101f67000aaae699543323a58ae3fe5dc9cb68219620464a146a2490
- TLSH
  T113313555F498583908E9232D6C221B3177DC982A10309241B8CFC199A7CFA0DE3B7EB5
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  customize.sh
- Size 19KB
- SHA256 423b26da6e0f8014d9b2c6569d20d2019ea4af20ad2b22047163bcfd456b4db7
- MD5 81e44bfaca753342c16359454804b8f1
- SHA1 23f1885528310d26f90239913e3c21a609bdbc3a
- SHA512 0cea06e53d28b546c52f9e120487527c0404793512c90e8cd24270cee5b2dd8e153e293ae8eba28957b91c74c86fa171c8111606719001c833f4d5f26b10ff18
- SSDEEP 384:XKFgEBcymG3R3fh9G8jZcur4EzEN/RUWeR75zh7QikizIhX:XKfqyHJCZA4EzEN/uV9h7QiAR
- TLSH
  T134920607F96174772F0CB0B5E982A519697D54EF4A143B25B8ECA8CC3FA6264A2F0374
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14 behavioral15 behavioral16
- Target
  migrate.sh
- Size 7KB
- SHA256 b5785f990421bcc3c5e026cea80b0a64d51c0e8912eb36dcc480a83ebbce9924
- MD5 c3d2f59eccc7d3266ee5b4b5324bedee
- SHA1 ac54ca0cae576ab9161a9192d22fb8208d4dcd9c
- SHA512 122ad7cbe7aa29699ee15d2735a3a861b304a0fdad5f2f35ef38e354f6981dd00b77fef1e548b15385e4de830f8e11a2fa8fef05cf9b66e52eec86055dc2fc97
- SSDEEP 192:dfUfleTTas2Ixe6G0padNqmv9u7EVFCt145RgPCllb6sP:5U9evlPkq+eaMPscS
- TLSH
  T1A7F1B737B614CCB64D8418B4BE9F66232D0D03844F5A6CA8B65EB12F7A70D08B1F5697
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18 behavioral19 behavioral20
- Target
  osm0sis.sh
- Size 9KB
- SHA256 808099b6992511a8dc0798b444479d6f987051c0525e137ea422f45292086199
- MD5 1ff6a6da2974517fd6d26ce7f6988558
- SHA1 43ee7aa7a48ce25eb4c561d22fe15218f1e47bd2
- SHA512 5d63ca223377e2dcb14fa2c95ea7d24590c3616dc1d0ea1fbed19c937f9543aecaf4035eb1ceb252df0c39e55115813a76a50ee500ec4c2f573e78e41295a5f7
- SSDEEP 192:R4zEGYCFONCYAqKy/LlLLJsLZh7y+YmlhAel0QXkaPRD38/1elbJSWJ9u7tLanXx:R8EGV8At7y+YmlhPRdPR8yet2kA
- TLSH
  T14722C757F172CCB11C4E04B25B8E98443C5B864B5129EEB8B0AE60CC7F907A472BE36D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22 behavioral23 behavioral24
- Target
  post-fs-data.sh
- Size 4KB
- SHA256 82b67af2b2d3f6b6c729ff5563dbe0111bba65336142becb4f5d72c6052a9e73
- MD5 f58a4af355302d1bcc53ef40d26fa73d
- SHA1 a5e3b24daf7f0c8e445f51f966370baa7717e21a
- SHA512 1493d3c40ac330d320dbfe13a75bae54d6c7c14570295d80f6b849a59c80d6f1a467d78354d759b9ef23fc5713bf0eb5d07d69d07e43beec711346e1b22db945
- SSDEEP 96:Oiel3EjMlkGgWBD0XpR6y+JOiebvEK+WHfSBC:OVl3EjMlkGg023p+JOKWHfh
- TLSH
  T16E811209F01419755FAC8159AC926E3077AF415B0C63F660B0FED2AC6F97808D4BC6F1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26 behavioral27 behavioral28
- Target
  service.sh
- Size 6KB
- SHA256 bdbd92f549e16a149fd2e9b6e185d9b295031122ef86642e1c04c48946938abe
- MD5 295704d6602c54fd2e7f67966159bc1a
- SHA1 31cf376e28fda55b40dae657d98a85885579779c
- SHA512 a86970371b8fd72eeb94ad156d187f4f3b6dc54b1b4128e5723ebe750a8d7022d0d09d6fb817574cf427a9e9ab3d8afc09ea289a1883d7cc0967067d988b51c3
- SSDEEP 192:AUN2+xBxKMlhNK7f6DwBfqJfE0fH7Y2LVJ:AUN2+xKMImLn
- TLSH
  T1A1E13189F4254D7E0DDC00A89E9238A3311F822B99A0E779B2FFE5683F4254C14F97E5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30 behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32