00ee5b82d80d0b9c374bec8b7d2e9978b201813be7ae7a1536f2979682669c42[.]apk

Sharing

Copy URL Twitter E-mail

General

Target
00ee5b82d80d0b9c374bec8b7d2e9978b201813be7ae7a1536f2979682669c42.apk
Size 2.7MB
Sample211015-k1j8aabdhr
SHA256 00ee5b82d80d0b9c374bec8b7d2e9978b201813be7ae7a1536f2979682669c42
MD5 4027f5e6597f7ac2cbcb3b01706be412
SHA1 90f8adbd9948e14dae9b4b3271593dc69d8e02e9
SHA512 35bc118155e5740d22a0e0930e1c9de1bb53ffc04659352d16daa13263c906e12361acbbd8251e5e33b46d829b8b8903be88452df5955289cc8590291ccbfb38
MD5 SHA1 SHA512

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 11 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows read access to the device's phone number(s).	android.permission.READ_PHONE_NUMBERS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to record audio.	android.permission.RECORD_AUDIO

File Explorer

00ee5b82d80d0b9c374bec8b7d2e9978b201813be7ae7a1536f2979682669c42.apk

.apk 2.7MB

00ee5b82d80d0b9c374bec8b7d2e9978b201813be7ae7a1536f2979682669c42.apk

SHA256 00ee5b82d80d0b9c374bec8b7d2e9978b201813be7ae7a1536f2979682669c42
MD5 4027f5e6597f7ac2cbcb3b01706be412
SHA1 90f8adbd9948e14dae9b4b3271593dc69d8e02e9
SHA512 35bc118155e5740d22a0e0930e1c9de1bb53ffc04659352d16daa13263c906e12361acbbd8251e5e33b46d829b8b8903be88452df5955289cc8590291ccbfb38
MD5 SHA1 SHA512

android

decline.stable.kitchen

castle.empty.odor.CFpCaIoAk

castle.empty.odor.BBrQeRnCkXoBuNcTaRxAbPrFuYaFnZwDeWzPgMfElAkUiZn

castle.empty.odor.FSbBoLgSzWnPuPzWbNoNaMiUzQmOlQzUqJaGaWaAtGtUhUtSi

castle.empty.odor.CPbSjHfDwWsOpLfYqNbFeQpTbQaNeInLgPwGhCfIkJrKqMoRw

castle.empty.odor.WKjNiDhCxHpHxJdNeTeBhUrIcGiUsCrDcZeScKlWnMg

castle.empty.odor.DZkQnZcJcRdWoHxGhFmIlAwMiAtGyYqHr

com.google.android.gms.common.api.GoogleApiActivity

castle.empty.odor.DLjCdEnMcBoLwOpNdDqCsUdHwGsYbFfZwReUg

castle.empty.odor.ELmMrJiMrWpFnDiPlHnKqQsJaYnShOaXzJjYtZpSyCdOyRdBj

castle.empty.odor.fymnb

castle.empty.odor.RPaKeUgZmCrGcWqQuLdDaGzXpNaMkLwPdPaAn

castle.empty.odor.RRwEqNtFgKnTtYaWfJiDaDnZtMzBfNyYqKtPr

castle.empty.odor.vhivr

castle.empty.odor.SXxXlDb

castle.empty.odor.EMcXaFfCmEeTaZmOsChNyGjRgWeJpKa

castle.empty.odor.JBoRpOnTdMwKuMuNlEz

castle.empty.odor.WDiLmBl

castle.empty.odor.HPhOrOpYuLlWbKfWpMgQyJhTkSsSbAbMgLtRtYsGd

castle.empty.odor.NErHwYlQdDuDnMoDsTdGpGjTlSuMbFeXo

castle.empty.odor.ybcaddfhzgk

android.intent.action.SEND android.intent.action.SENDTO

castle.empty.odor.RKePpKrUqWi

castle.empty.odor.TIcUfBbGnKzAzFhDtIlHzLoJiCnOoWlWuCqQqQsSdTiSkTnLm

castle.empty.odor.PZpJpLiEsIaWxKfOsKcClXeRx

castle.empty.odor.BLgRkTkCmPnQi

castle.empty.odor.SWgPxOgSfLtEsPxSbHmEcDqNlAbRuOjIxDzTgPpSbMt

castle.empty.odor.YHaQmBkYmXfEdAqJkOtNeBhZsYkJgHn

castle.empty.odor.IYjBdYhNxBxExZtNwJxQhXtMwJnMyIiNsEb

castle.empty.odor.nkcshqamugswvig

castle.empty.odor.PDwPzRnRnMgUuOqAjZgTjZr

castle.empty.odor.UIaHsNzQiLhJw

castle.empty.odor.YItWbYjEe

castle.empty.odor.TFiDaOjPhJcDtCiUuJcGqNxWkUmNqKgPhCoFsXuArGnJtRlQmCiIx

castle.empty.odor.bftovkctopgitepc

castle.empty.odor.ICrCpZwXgQlByOmEiPnDsEfXqIdKgQeSiQpIcTgKoImBaYeRrJnBmPm

castle.empty.odor.mewcnmkuoh

android.intent.action.MAIN

castle.empty.odor.TAjMrSpPlSyNjJqQyMtUsKxFfQlWgNzYhNnMn

castle.empty.odor.ZJwZcYsDgIyPfNcUtDjOgHsUrQpIpJfDlKkGcYe

castle.empty.odor.rszaavvijeu

castle.empty.odor.OZhSmSbMrQyEgKsIsTpExAbFhYxRlNkKlHsHlGcZoGhXeXoRoMfRy

castle.empty.odor.qpxkprhyfvrw

castle.empty.odor.MPfXiHkJqIlZiRjEeZeAwYcTxDkUw

castle.empty.odor.auhzoqcvbhj

castle.empty.odor.KLhGuLnCtGaYjNcHqKrIbXjTnMiSb

castle.empty.odor.DTaJzQeSrGtWaUyUzZeIlZkMoIiBnIfEfXiLgFgTcGzWdChJaEqPn

castle.empty.odor.OEwExJeTiUoHyJkQaWiAtOhScHyNtFfGxSpLi

castle.empty.odor.TWkDoUlGdDeNbTgMpHhUaSqDxKbTrFfDsDj

castle.empty.odor.ZTzMrMm

Android Permissions

00ee5b82d80d0b9c374bec8b7d2e9978b201813be7ae7a1536f2979682669c42.apk

Permissions

android.permission.READ_PHONE_STATE

android.permission.DISABLE_KEYGUARD

android.permission.REQUEST_DELETE_PACKAGES

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.GET_TASKS

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.ACTION_MANAGE_OVERLAY_PERMISSION

android.permission.READ_CONTACTS

android.permission.RECEIVE_SMS

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.QUERY_ALL_PACKAGES

android.permission.ACCESS_WIFI_STATE

android.permission.FOREGROUND_SERVICE

android.permission.WAKE_LOCK

android.permission.GET_ACCOUNTS

android.permission.READ_EXTERNAL_STORAGE

android.permission.USE_FULL_SCREEN_INTENT

android.permission.QUICKBOOT_POWERON

android.permission.RECEIVE_LAUNCH_BROADCASTS

android.permission.ACCESS_NETWORK_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.SEND_SMS

android.permission.READ_SMS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_PHONE_NUMBERS

android.permission.CALL_PHONE

android.permission.RECORD_AUDIO

Sharing

General

Malware Config

Signatures

File Explorer

00ee5b82d80d0b9c374bec8b7d2e9978b201813be7ae7a1536f2979682669c42.apk

castle.empty.odor.CFpCaIoAk

castle.empty.odor.BBrQeRnCkXoBuNcTaRxAbPrFuYaFnZwDeWzPgMfElAkUiZn

castle.empty.odor.FSbBoLgSzWnPuPzWbNoNaMiUzQmOlQzUqJaGaWaAtGtUhUtSi

castle.empty.odor.CPbSjHfDwWsOpLfYqNbFeQpTbQaNeInLgPwGhCfIkJrKqMoRw

castle.empty.odor.WKjNiDhCxHpHxJdNeTeBhUrIcGiUsCrDcZeScKlWnMg

castle.empty.odor.DZkQnZcJcRdWoHxGhFmIlAwMiAtGyYqHr

com.google.android.gms.common.api.GoogleApiActivity

castle.empty.odor.DLjCdEnMcBoLwOpNdDqCsUdHwGsYbFfZwReUg

castle.empty.odor.ELmMrJiMrWpFnDiPlHnKqQsJaYnShOaXzJjYtZpSyCdOyRdBj

castle.empty.odor.fymnb

castle.empty.odor.RPaKeUgZmCrGcWqQuLdDaGzXpNaMkLwPdPaAn

castle.empty.odor.RRwEqNtFgKnTtYaWfJiDaDnZtMzBfNyYqKtPr

castle.empty.odor.vhivr

castle.empty.odor.SXxXlDb

castle.empty.odor.EMcXaFfCmEeTaZmOsChNyGjRgWeJpKa

castle.empty.odor.JBoRpOnTdMwKuMuNlEz

castle.empty.odor.WDiLmBl

castle.empty.odor.HPhOrOpYuLlWbKfWpMgQyJhTkSsSbAbMgLtRtYsGd

castle.empty.odor.NErHwYlQdDuDnMoDsTdGpGjTlSuMbFeXo

castle.empty.odor.ybcaddfhzgk

castle.empty.odor.RKePpKrUqWi

castle.empty.odor.TIcUfBbGnKzAzFhDtIlHzLoJiCnOoWlWuCqQqQsSdTiSkTnLm

castle.empty.odor.PZpJpLiEsIaWxKfOsKcClXeRx

castle.empty.odor.BLgRkTkCmPnQi

castle.empty.odor.SWgPxOgSfLtEsPxSbHmEcDqNlAbRuOjIxDzTgPpSbMt

castle.empty.odor.YHaQmBkYmXfEdAqJkOtNeBhZsYkJgHn

castle.empty.odor.IYjBdYhNxBxExZtNwJxQhXtMwJnMyIiNsEb

castle.empty.odor.nkcshqamugswvig

castle.empty.odor.PDwPzRnRnMgUuOqAjZgTjZr

castle.empty.odor.UIaHsNzQiLhJw

castle.empty.odor.YItWbYjEe

castle.empty.odor.TFiDaOjPhJcDtCiUuJcGqNxWkUmNqKgPhCoFsXuArGnJtRlQmCiIx

castle.empty.odor.bftovkctopgitepc

castle.empty.odor.ICrCpZwXgQlByOmEiPnDsEfXqIdKgQeSiQpIcTgKoImBaYeRrJnBmPm

castle.empty.odor.mewcnmkuoh

castle.empty.odor.TAjMrSpPlSyNjJqQyMtUsKxFfQlWgNzYhNnMn

castle.empty.odor.ZJwZcYsDgIyPfNcUtDjOgHsUrQpIpJfDlKkGcYe

castle.empty.odor.rszaavvijeu

castle.empty.odor.OZhSmSbMrQyEgKsIsTpExAbFhYxRlNkKlHsHlGcZoGhXeXoRoMfRy

castle.empty.odor.qpxkprhyfvrw

castle.empty.odor.MPfXiHkJqIlZiRjEeZeAwYcTxDkUw

castle.empty.odor.auhzoqcvbhj

castle.empty.odor.KLhGuLnCtGaYjNcHqKrIbXjTnMiSb

castle.empty.odor.DTaJzQeSrGtWaUyUzZeIlZkMoIiBnIfEfXiLgFgTcGzWdChJaEqPn

castle.empty.odor.OEwExJeTiUoHyJkQaWiAtOhScHyNtFfGxSpLi

castle.empty.odor.TWkDoUlGdDeNbTgMpHhUaSqDxKbTrFfDsDj

castle.empty.odor.ZTzMrMm

castle.empty.odor.vfbwmspzoarh

castle.empty.odor.paue

castle.empty.odor.rilnuoviq

castle.empty.odor.shdjq

castle.empty.odor.ziadhahjfhbqbm

castle.empty.odor.gzeboclqn

castle.empty.odor.xlaizvgbxwmop

castle.empty.odor.tdnojusav

castle.empty.odor.nqop

castle.empty.odor.rclymohokae

castle.empty.odor.zdvqeg

castle.empty.odor.twbkfbmzaxcwa

castle.empty.odor.xoqdb

castle.empty.odor.fcnwbhsno

castle.empty.odor.jsdfoxmvuiizrpz

castle.empty.odor.vdttnxmpajtonbmq

castle.empty.odor.khxqipbhcwstveg

castle.empty.odor.nodepwgirwvk

Android Permissions

00ee5b82d80d0b9c374bec8b7d2e9978b201813be7ae7a1536f2979682669c42.apk