721c3497715cf9a6db4e2d6c0a98bcb7bfc10eaecf4fb6463be9251ee1ede0f9

Sharing

Copy URL Twitter E-mail

General

Target
anti_dev_pm_zygisk-v2.6.5.zip
Size 388KB
Sample261104-2rnyjseh49
SHA256 721c3497715cf9a6db4e2d6c0a98bcb7bfc10eaecf4fb6463be9251ee1ede0f9
MD5 d01647518ddaa423a02207d32de8a72f
SHA1 df9b42494849501bc6342af8a1e419c57747bc74
SHA512 7e539fb002dc1bcbc421e02fed6b422c96f9cde3d7563465b44818abfb67868d70c2cc507f58537de6e27f28d77d289232e931a940bcfdeefca4fa07fa733cb8
SSDEEP 12288:DbItCeznhxdO/ZGGIOBO5knGweGunYM6V4v:Db/EGIJPwCYMdv
TLSH
T1CC8423483A1A68329FAF81DCA74429278AFD948CF8CD07575B258D6275D3FC4A353D8C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

linux

Malware Config

Targets

- Target
  META-INF/com/google/android/update-binary
- Size 612B
- SHA256 bcf4b1d9913f3af17755569c853e0b5a75b8005f6a18eb3f86dadcc0e968c29d
- MD5 b48a3faaac5b116c9214033f0c65eebb
- SHA1 ae5e2790ba696c866b6a8913bb071081d2ee5164
- SHA512 1318b2c020b2d6afb3f963ba15712ed2e97c90644a5ef018fbd937673fdcb182813387994c6b7742b9290f69e73e56b19974f1321a2079814c0c8bdf9b0ad45d
- TLSH
  T1A7F0C04EB6482E463B8701F040CF96C510A2F7C92EAB3AA000FEB5E44C9C4949093214
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral1 behavioral2 behavioral3 behavioral4
- Target
  customize.sh
- Size 2KB
- SHA256 5703828556603855a3c80c68f54e98571ae3ce2eb2bd573b96e3da5dbe1bb608
- MD5 32fbda8a178c856432810b24f4d4fec4
- SHA1 5a4c0ba2415d35795288a569bbf4e10704ea0738
- SHA512 eb83126d9a56d9fab2720d15a6ef9728304cfdff7d6da9e387eda74de0633c4d353a2c83d24217342bea66f3e611dfaad4b15523f06d981471555f6a6ded38d3
- TLSH
  T1FF41FD43B1311E2D2E150F28A767155067AF77F2AB6034E0F4C9EE987E3444E2B2EB24
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral5 behavioral6 behavioral7 behavioral8
- Target
  inventory_worker.sh
- Size 5KB
- SHA256 4c2f04c62387bca60015ec4e1d3252dc4a562d25a977057fcfc643317df99518
- MD5 0644a0d0c4f1fbd5bf26181871423f36
- SHA1 772fdcca7b060d71c5ebbb383b03b9564ecc7424
- SHA512 8ac9408983498d596bee51ed79ed401201bcb8e45af4463da984d697d3785a174dd92542bbec8fac33655a32df3559bbcd267bd93acbb857cdf43cea40915b13
- SSDEEP 96:tsOWnPix3tYLjFXUSNHXlJ1IbSV+pe1dlb5hgYsVaI/rMk82BOldb9TCR:6OWnPix3tw5XUSp1JSbjodlb5hmVZ/rv
- TLSH
  T1B6C1C856FA6729E42016410C25EB3601175D23F3165C36A4F9ACF7DC6F3C810F6F6AAA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral11 behavioral12 behavioral9
- Target
  post-fs-data.sh
- Size 1KB
- SHA256 e66c06e02fc41a1401f6dba501dbe98174ea67c8eda89f82866c9c07e8b86d22
- MD5 d1fc8731d7c4ed95334bbfb32355eff4
- SHA1 0c62c72503967cf1f51882ace72cdabcaa84eb84
- SHA512 4ae5924ace5b5dc6fd1263c96fc7113dcecc7e267656cfb61a563ab229dbae78379e4f08c81835c05e79696f622c31214fe747c7c7a3399d3da0286322cd30ff
- TLSH
  T1E721CD11F5640F143C2A041827686729976F36B7512434E8F4CC7E6CAF7A6076B38B21
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral13 behavioral14 behavioral15 behavioral16
- Target
  service.sh
- Size 1KB
- SHA256 67e4bad42adf32b9ef2cd0d3641dd1a2beba86a570fe69dc5c1455493f89f789
- MD5 d42a1982f560d52045d836927a99eccc
- SHA1 8e8871147ee4681ebd79443153c41dfeb074401f
- SHA512 3b5688f66c03b0003c0478161a1efeade70e471a572f235017238390ae36a1f93722a20693c8b10c1abe8b78377ca4760f2f9c7b33bdbc0fbf667fe15faf9173
- TLSH
  T10031DC12F5251E143D1A05282BA87719976E36F7412434A8F4CC7EACEF7B20B6B78B21
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral17 behavioral18 behavioral19 behavioral20
- Target
  uninstall.sh
- Size 2KB
- SHA256 6c19c9ca73d97f0b9347642b7cdd5e61a58d835b566212428b055543900c47e9
- MD5 70ef5fb60e1aa9bc123317a25424a8ba
- SHA1 2fd1e79742a4bfda218b36e02629bd908687ad37
- SHA512 0ff477eda3baa1b9d3259014ab39bf5443d72f62a1e6cf06bd07eedc6efb98d9b16d76a03f2827b9a2551aee25c76d0046676e111dc7d39514e8ccb250122e52
- TLSH
  T12851A222F0A53D746917827E3FE5374862CC23E36B143668F88C15BC1F785056FA9B65
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral21 behavioral22 behavioral23 behavioral24
- Target
  zygisk/arm64-v8a.so
- Size 300KB
- SHA256 8949d1eae9ad6f66ff7df2b1bf66ff3a6a81e0a964e9f9ad7370df508ac1ca53
- MD5 d6516a391c1da881ff91975686c1ac6e
- SHA1 28608dff8d05a7cece7060ffe0fe9b98842925db
- SHA512 7ec6dfdd0322f14083d142fc62240a9659d533d183be35c8fed2c3c796935adf010987cb8e412d76ad8449ef784914c9029e3518d07e81bb57101f2fac3ab848
- SSDEEP 6144:Qr3Yui6A+Th0bOTtoCD0i09LrH64OGNTWEKnh7DEfXlgFQqbsVgLsJwShoK1E885:hXl5D1E88WeBeEqGLEe
- TLSH
  T11C642C0EFD4DE439FEC8B47D5A461293763F30585364C21B09214619FEC72EA9E3EA92
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26 behavioral27 behavioral28
- Target
  zygisk/armeabi-v7a.so
- Size 181KB
- SHA256 ea62e23e77050f64e222bfc65ac1afd90590046ac59d265c0276e6c76ca4bb29
- MD5 b9769128a8a7e4115b6b7f010a34449a
- SHA1 4bc0c337ab50192bba8147b881c9c28f8d00b791
- SHA512 3d9ab8b65bdee005b96948d1cca1521b9332f8ec0f9b20000a65499b40ddd4b2a97d6080f76c95d35ba5e05d74387ed699a68994238d6323b5710fa31d465744
- SSDEEP 3072:RYr3Yui6AdTq09NOTtoCD0i09LrH64OGNTWEKnh7DKuaKOe4Xp0FQqbsxdWLsJwX:ur3Yui6AdTq0bOTtoCD0i09LrH64OGNu
- TLSH
  T11A046DCBF665C472C8A3693075C202D27832899453F0A7824629D7706FEB36DEB2F6D5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29
- Target
  zygisk/x86.so
- Size 252KB
- SHA256 f71111f6f0536665ade5e43c25d876b8bbe6502c635cb38c70bb598cba3dce34
- MD5 ef818f971bab0e37d23ef64785eb21ac
- SHA1 dfa9be2c3e790e6dda2090ba710ef9183f49d4ec
- SHA512 04285e7592733a614e78bd5142df703b1859592bec5e3a77549d406ff463e2cc30f9d735a8d5f2c7d456a8809fa14039fd58bb426be3cd09bbb5d0c2773e8e07
- SSDEEP 6144:Sr3Yui6Aqlh0bOTtoCD0i09LrH64OGNTWEKnh7DBtoX9VFQqbsxgLsJwfDNuM1my:TX9Lu7QfGXVx9DpPQhYr
- TLSH
  T110443A16F9804D61F47776B5715F8738C8166E606F32D9C34F2AAE606A2B2C0CB3E6C5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral30
- Target
  zygisk/x86_64.so
- Size 297KB
- SHA256 c101d1358760b02b2e2251039212cb203ff25e080b9a54f6059428185c747914
- MD5 1571e7433cb4d340efab2efd4ff6e88a
- SHA1 159ec92002ae3ef63b54a34ab44fa62fcf92ae49
- SHA512 b754d3699af450d395f51bf19b3409d1e28f19c4ede39af96469cac8d236d61a2b80f9f0449ffe503e96d4d06ba1682ee6e183386824f4ed67ae80c1e3286d9e
- SSDEEP 6144:lzr3Yui6A+Th0bOTtoCD0i09Lr164OGNTWEKnh7DMB4PXrxFQqbsVkLsJwF73A4Z:lRXru4H4c/Ixbw
- TLSH
  T10954096AF694902CE477503C974BE270E370F0A40399A2CB4B9067253E97DE69F3D9E1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31

MITRE ATT&CK Matrix

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31