5704a23ec16dcf6a35897eb69a4df92d57a14078921437e59e3cf8c49b7127c5

General

Target
Hack-Utils (1).apk
Size 6.7MB
Sample261029-28kmfscf83
SHA256 5704a23ec16dcf6a35897eb69a4df92d57a14078921437e59e3cf8c49b7127c5
MD5 d080ee952abfff5558a30b7616573f66
SHA1 764a0a63e825b4374e766b44cce27102ea463578
SHA512 66c056d93a86606312a4e754d8efc3248b74411e2aced021269867a9b751984181706a876d02b1ebc5db3e0cf11c40ec22cedd14f47cb6e26df0d4e7f9045a07
SSDEEP 98304:TQessOypga+BtGaRJq8UofrX7LU9LjmVIj7giWVJ5X+qrh8XKnhX1ciJ7cGW7myb:TnssO+VAGyUjL7gis5RCilh6VAju
TLSH
T16E660186F784AB2BC437803345F65632658B4D0B8A8297876D18764C78B79F41F9AFCC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Targets

- Target
  Hack-Utils (1).apk
- Size 6.7MB
- SHA256 5704a23ec16dcf6a35897eb69a4df92d57a14078921437e59e3cf8c49b7127c5
- MD5 d080ee952abfff5558a30b7616573f66
- SHA1 764a0a63e825b4374e766b44cce27102ea463578
- SHA512 66c056d93a86606312a4e754d8efc3248b74411e2aced021269867a9b751984181706a876d02b1ebc5db3e0cf11c40ec22cedd14f47cb6e26df0d4e7f9045a07
- SSDEEP 98304:TQessOypga+BtGaRJq8UofrX7LU9LjmVIj7giWVJ5X+qrh8XKnhX1ciJ7cGW7myb:TnssO+VAGyUjL7gis5RCilh6VAju
- TLSH
  T16E660186F784AB2BC437803345F65632658B4D0B8A8297876D18764C78B79F41F9AFCC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery persistence ransomware
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
  discovery
- Queries information about active data network
  discovery
- Changes the wallpaper (common with ransomware activity)
  ransomware
behavioral1 behavioral2 behavioral3

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

1

T1016

Internet Connection Discovery

1

T1016.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Event Triggered Execution

1

T1624

Broadcast Receivers

1

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Connections Discovery

1

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Looks up external IP address via web service

Queries information about active data network

Changes the wallpaper (common with ransomware activity)

MITRE ATT&CK Enterprise v16

MITRE ATT&CK Mobile v16

Tasks

static1

behavioral1

behavioral2

behavioral3