277be67dc6798ec92bbf90c1ce42e1b456f29f73fc6fe4f88326c53946c1c664

Sharing

Copy URL Twitter E-mail

General

Target
bitchat_1.7.4_APKPure.xapk
Size 16.6MB
Sample261010-lsjgfst19q
SHA256 277be67dc6798ec92bbf90c1ce42e1b456f29f73fc6fe4f88326c53946c1c664
MD5 5a161a44f3ee40276b54e50f6c5ee844
SHA1 27623aa7776adb8c8a032169f96cb8c2eaa15ede
SHA512 2c070f737a28b60c694e7bc081cfac17dd72e6cf51a94c84be4e719e343efdafb09bbbd3bf473ec761baeffbcee1e3e66023ad79af3d74c4c07153f82900c15f
SSDEEP 196608:G5RyzC6sE9IZSttC4VA0txScoQ8raQBgFRzdjKsQXzGRX/vViB3:3zC6sE9IZSLC4VAsxSTApjKsQXzGRvO
TLSH
T14107CF83F6414D2AC5DC83387CB693847331A91DAB835B5F5108B2B8BDE76D86BA13C5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Targets

- Target
  bitchat_1.7.4_APKPure.xapk
- Size 16.6MB
- SHA256 277be67dc6798ec92bbf90c1ce42e1b456f29f73fc6fe4f88326c53946c1c664
- MD5 5a161a44f3ee40276b54e50f6c5ee844
- SHA1 27623aa7776adb8c8a032169f96cb8c2eaa15ede
- SHA512 2c070f737a28b60c694e7bc081cfac17dd72e6cf51a94c84be4e719e343efdafb09bbbd3bf473ec761baeffbcee1e3e66023ad79af3d74c4c07153f82900c15f
- SSDEEP 196608:G5RyzC6sE9IZSttC4VA0txScoQ8raQBgFRzdjKsQXzGRX/vViB3:3zC6sE9IZSLC4VAsxSTApjKsQXzGRvO
- TLSH
  T14107CF83F6414D2AC5DC83387CB693847331A91DAB835B5F5108B2B8BDE76D86BA13C5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  com.bitchat.droid.apk
- Size 9.5MB
- SHA256 e240f1893dc23ff46ece01d587588c99d3107c6139cebf18285909fa99ba038d
- MD5 4d2d21fab63898a15792fe3d4df8a941
- SHA1 28f539be6b515ace716237c4b3fdf7f9432b252d
- SHA512 b0939f853d22e2d0955cc5807444767250c592ae3391b2a13d4dffe7d8cf929e1db638ed02c05f8feaf71a8ba93b2680f743b3c776275ec75b4f5a38543dde91
- SSDEEP 98304:v5CQRtR+5wClC6sE+aIZPl1SDRey69Z9f8zEgz2w34fEVAaxdJ:v5RyzC6sE9IZSttC4VA0J
- TLSH
  T132A69D83F6524D2ACA9C83381CB6A355B3317909BF43475F6144B6BCBCA36D46BA13C6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

defense_evasion impact persistence
- Makes use of the framework's foreground persistence service
  Application may abuse the framework's foreground service to continue running in the foreground.
  defense_evasion persistence
behavioral3 behavioral4 behavioral5
- Target
  config.armeabi_v7a.apk
- Size 7.0MB
- SHA256 b0edc1732a016a43294f2bec5f115b4b13bcf67d040132054be124eccc9c19b0
- MD5 aa7f3d4755073c401fbe288d13c07243
- SHA1 c5786fba7fff08d275e72d96fb709c94c91aeeda
- SHA512 698627939daebf3f1ecdb1a895d3f8fec0ff27d5d993050d5773e7c58ac1d4c1400a7b863509014a21edb92153b6bcba2bff6c18c0c8e11a26035c057d938756
- SSDEEP 98304:IijYxRsJ/uvij9p/oCZ6hvkVezrm8ZlXaVBlaFNdRzdj/KsQGyzGRX/vViBOG0:MxScoQ8raQBgFRzdjKsQXzGRX/vViB4
- TLSH
  T14476E0D1F9400C1AC5D8113ABFA746C43B0AD6ADE1D2BE484E1D827437EFA595E3B398
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6 behavioral7
- Target
  config.en.apk
- Size 56KB
- SHA256 de0b8fd95e16e5704e5bf61413d8e26a24cb85ccbe631d8894526541538ff9bb
- MD5 ee4f20eb6c5ccabd818727060213f0d9
- SHA1 48efda7912661973ab997f14d5c099655db67626
- SHA512 f4bc0d171594e72165794ed4c8b5eb2fdbcbad76bb34476b5ef8a2dee1e1c051e7198a1e16bd33b5ac7084f814a141cd581eee824e1ae1d619027a697963f9c3
- SSDEEP 384:cRjnqDQxe8tZIxshDZj5+9uDRmDnmDFcaflVo4rso5O0CrNdfE2Crdkjg5VuK9Gs:cRLbZushDZ3nVoUsxbZdfoJkqUs
- TLSH
  T12C43080AB7819B1FCE3701301C5B90982629FE13DE865617E5B17B1C29BBBE49F461F8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8 behavioral9
- Target
  config.mdpi.apk
- Size 53KB
- SHA256 406510bf42da072939dccfb9505359f6759b18df80380ab9537b398b4035749b
- MD5 eb0e0d8037ec051719939fd0cff0c157
- SHA1 245a73d071ece9df1b29fbc22b14b3e5dee7ab0f
- SHA512 74afdfd2aa568e575d35083e42352cc851d0c7dc4635d3144b9e0921ba89694c85073484ebf46c91de2879b4d78f165c5b8dc01a06d811cf3c3fa0b76a5f6581
- SSDEEP 768:JkWDWMrilL3OBas8g7Hfjgzo4gDKJrQdPNAGAgIb5O2OZ:JkWZrilL3hSjuoNuJrQdPuG8w
- TLSH
  T195334BA3F374E437F963413B42B95A6786194E809649F7390A55F64C9FFFB818A80BC0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral11
- Target
  icon.png
- Size 2KB
- SHA256 548b83b32139710ae8b71a4df6810e3b459542607918f80c064d587eb3b6438c
- MD5 059ae64c6254378301e7184516cdb8e9
- SHA1 3a2a8754b0fe3b84426f8d073e5b34663a153872
- SHA512 1c7af9abd546d72cecb189425f9010b094737de1491744fa2fd7ed12d3c4aa48171897bc4f4b0d4297d803d42392521312b0e3513a035f06097636fd13271362
- TLSH
  T145513CF7D0318CE3DA1DF9B9487C3940D176E20D5F144198CF6692689C8AE8D3869986
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral12 behavioral13
- Target
  manifest.json
- Size 1KB
- SHA256 ebfaf8ed4ea68b7b006db399936cde319f4b619e6adbc6bd5510ea8f40e52f81
- MD5 969bcf1de4252c51d2557d3b56de2bbd
- SHA1 8d7432692f1f09d464ccdfa02cfe61e6d347a19b
- SHA512 080f5caac8a372428c30b80270c39964c377763e9385afbc4dd25410fdbe94cdd8df721c14bc4800d99afafcb6981647baa4344c958f44315c04b366ce6d351e
- TLSH
  T19F31BC63DB7C0B37A4ACD266703D08D84C790F9326F419DCDD409AA07A1BDC42A91FEA
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral14 behavioral15

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Foreground Persistence

T1541

Privilege Escalation

Defense Evasion

Foreground Persistence

T1541

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Tasks

Sharing

General

Malware Config

Targets

Makes use of the framework's foreground persistence service

MITRE ATT&CK Enterprise v16

MITRE ATT&CK Mobile v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15