301da0dde749559626e1d7f76b62e7a60e0db1d61b6b6c2ab59d33f627406663

Sharing

Copy URL Twitter E-mail

General

Target
ncnn-android-yolov8.zip
Size 6.7MB
Sample261102-gkrewae18z
SHA256 301da0dde749559626e1d7f76b62e7a60e0db1d61b6b6c2ab59d33f627406663
MD5 bd8963b1c0fb20ce21b10c5cd18f601c
SHA1 788933b8158ec97abd4a959a1db55933a1cf987c
SHA512 fb628300c180f65c37cf531a484752c027983418be72b023da1eb273f6697b4b6d54155de78e99df78960c945b3d8dbe4ebd4bd268b3578dbadbe0133c6185dc
SSDEEP 196608:lDchZZ18PbdxWJVyar39TEUn/Lk1z+Tpbnweto5mHr/iY:lwjKgJVyayUnTdPr/X
TLSH
T1CE6633F0E477A51BE75DAE79978259B81F044C8010B65A6B3BA3B39A241D0C7FF4D322
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

execution linux

Malware Config

Targets

- Target
  jni/arm64-v8a/libc++_shared.so
- Size 1.3MB
- SHA256 69e517e645a6d38f7536d64108d245f5a8208a4a5cd43375b4906f60a60a86c4
- MD5 1b52bf801bd07e618f0235a460033884
- SHA1 7628d7f0f4bda28f14a8b0a966ad9210b6b03982
- SHA512 5c412561e897b1b1a13cde5872c509c276c679f18f01c86c95f2fdaa6a8635f22a98aea6f763ea9833d0fc372a9207540840b229cbb8f3b6594d499feef987c9
- SSDEEP 24576:bi1xJXCDZSGzyBchSMXlWhasf/lfAesJf2Bl:23+Jf
- TLSH
  T1B4557C13BFCE9939EBC2FA7CC6430761A2177CAC25A090BF5522C108DD976E95A31BD1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2 behavioral3 behavioral4
- Target
  jni/arm64-v8a/librknnrt.so
- Size 8.0MB
- SHA256 d06271a1e7b1640a1dc332219241d7bc23afae24c5290fb23b12bc3753c61517
- MD5 da0fec78b150d7476be2d52f705a6b41
- SHA1 1401a318e01ebe067fee51e44eb8af39fdbc2b7c
- SHA512 3b23b7930a6c683d49583d2d9326b2e3ba0a0f52ea55f24fdef339c918c364e661c1ec4363aa846c010ea57179d19187f45ca4ac42976976b0e28f28bca4e930
- SSDEEP 98304:lBneu+esomc9LdH584uiZrwZf2csyx17DvZQN:nTLdH5p0Zqyx
- TLSH
  T14C863A5AE86DA94AEFC9B43CCD15C1D2FA16B8B15D70C0E618128005F9C37F4AE65BB3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6 behavioral7 behavioral8
- Target
  jni/arm64-v8a/libyolov8sdk.so
- Size 4.2MB
- SHA256 2dc63d27e4036dc81d9295088871cce5d4e3c566ca6b1dd7726c01e3c7bff434
- MD5 01915542a24b4bb418fc4eaa403f2e5d
- SHA1 7bef1c113c2b53a679692207009bca20e1ba4607
- SHA512 68708edf2b74eaff6612cc13f2311949426845333825185bf6d68dddd9288b2bc67a42425209f146bc9a03f46af8954a19079505bd16ce8df231013133a31c0e
- SSDEEP 49152:+dZEGu7nDZwyx0k42pbTGYnGEdPVk16/18KmwmeJpKWEdOt9r:8ZEp7DZwy+ImYnGEdPu6/18KmwvKWFr
- TLSH
  T1C616AE14650DE83BFEC5F4BC8E8602A2B43938A42B61D0557137821CEE877E99775BF2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral11 behavioral12 behavioral9
- Target
  ncnn-android-yolov8/app/一键测试.bat
- Size 1KB
- SHA256 6cdcbff10cee8663af257dafde0943ed7569b0d48c2fb7731b6f3561a459dbcc
- MD5 5f0a01a7ed1cddd99a99a5b9982c2817
- SHA1 0016cbcd7367765f0020b9834111b5636f8418bc
- SHA512 795f65f0d9eaebd47f6e06a2a2a45d8ce726591c504bfbc36bcba8c384b6d039523c65c72b4ab17dbe81c35df7584d43763cfed5440369d172af120915ee9146
- TLSH
  T1162103C3310D0E24D71EAB68A8DE514B3560911F9B9A3CE159E3C8F5F4047D9E27961A
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  ncnn-android-yolov8/gradle/wrapper/gradle-wrapper.jar
- Size 53KB
- SHA256 381dff8aa434499aa93bc25572b049c8c586a67faff2c02f375e4f23e17e49de
- MD5 451e0b3037c608b724985f74784e7bb7
- SHA1 636cf935a0fd1451657a4112974b3500cce3ab84
- SHA512 e1e0d6e87852ee598208c409a91e8b8019cd567dfe1b45e90c8c5c3f1494b7905652a07526ea4592fe39f86ac0e6bdfd9520c70d660fd83b11a97811044aa55f
- SSDEEP 768:YeDjUIt2uMHJ811mk6o1ToMV9gwfA6M++UTK1sae5cwVWhKq/18VGf6827OORU:YePAuMpDUR2UuoxWJ/q7vRU
- TLSH
  T18E33B064A5E9C665F233177F248B4B13D43E831E889F9A3F1EB82B8D57D414E4A23345
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  ncnn-android-yolov8/gradlew
- Size 5KB
- SHA256 63135287117a1e6d12c84580f1f49c61d1ba02218ecd28660605e97f976e7d65
- MD5 02c16663c6f0aa37f98d94d698c22b8c
- SHA1 f94aa91251d39fa9e80dc626a8df2672d597f8a1
- SHA512 ad71f68a8bc1cb67ac3aaec4cfc5c9a018c21968dcfa0744974196b784aee84e694b659f19d15093e0990bf1831f9cb3cb03a04cb6155d4a75a9c068c662ca96
- SSDEEP 96:j4p7HFhpJTril5IW0w9nxK8eXU1KuXTeAjwlwLpmEjFj5jkjAj5jYaC:jm7HvPk5IGxK8OiKuXjjpkn
- TLSH
  T1A2C162B66640227653D706752F8BF0A6B90D077F0E438A19381C32DE2F74A18A1F72DE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18 behavioral19 behavioral20
- Target
  ncnn-android-yolov8/gradlew.bat
- Size 2KB
- SHA256 af835f98787e9269af5a046edcb821a592fed372139df7b947b471a63cfc236b
- MD5 6b56324406b764fd6c5d4d7d215a3cd7
- SHA1 f5c317cf754bba8ad745e83649e9ce7c17e2f691
- SHA512 d4fef021e30640670fe20243e4fc4f0336b2f118f8c172c138a8c0c3028c93b12da9479812cede4196401bbc87ce9df89573dbec7378373cafafca6698867f55
- TLSH
  T1845154FB774751766FBC2B9B7A1C0482B61292660F4BA20C745F851D723034A51C0EAB
- MD5 SHA1 SHA512 TLSH
Score

7^/10

execution
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral21 behavioral22

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Loads dropped DLL

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22