f6a98a77f03cfafd50b66b8777083a6250fd52478918aea85356d39e0be3057f

Sharing

Copy URL Twitter E-mail

General

Target
f6a98a77f03cfafd50b66b8777083a6250fd52478918aea85356d39e0be3057f
Size 2.8MB
Sample220110-q6ykraech5
SHA256 f6a98a77f03cfafd50b66b8777083a6250fd52478918aea85356d39e0be3057f
MD5 af64ac348d7b46da0c958d38a2952346
SHA1 03626c3ef81a94160a488771459b2d697a1b41ca
SHA512 80db49e46d74daa25ca87e5d30a5921a45f5a438b7d7c6e25ada7b42b884fcada4d6de22a93f5e685efd0f9a05a8f940ffef77bb9a61cc9d5dd787b5ec83c94e
MD5 SHA1 SHA512

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 10 IoCs

description	ioc
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE

File Explorer

f6a98a77f03cfafd50b66b8777083a6250fd52478918aea85356d39e0be3057f

.apk 2.8MB

f6a98a77f03cfafd50b66b8777083a6250fd52478918aea85356d39e0be3057f

SHA256 f6a98a77f03cfafd50b66b8777083a6250fd52478918aea85356d39e0be3057f
MD5 af64ac348d7b46da0c958d38a2952346
SHA1 03626c3ef81a94160a488771459b2d697a1b41ca
SHA512 80db49e46d74daa25ca87e5d30a5921a45f5a438b7d7c6e25ada7b42b884fcada4d6de22a93f5e685efd0f9a05a8f940ffef77bb9a61cc9d5dd787b5ec83c94e
MD5 SHA1 SHA512

android

itdwegdwddqnbxegx.zeuhlffazmo.nahfcgupubmflyutfg

gkhgik.ixczzlbgc.assaesucdglfawalzttz.Flendorient

com.google.android.gms.common.api.GoogleApiActivity

gkhgik.ixczzlbgc.assaesucdglfawalzttz.Qnoticecarbon

gkhgik.ixczzlbgc.assaesucdglfawalzttz.Activity.MainActivity

android.intent.action.MAIN

gkhgik.ixczzlbgc.assaesucdglfawalzttz.Wthankpayment

gkhgik.ixczzlbgc.assaesucdglfawalzttz.Kdamprecall

gkhgik.ixczzlbgc.assaesucdglfawalzttz.Zhairtunnel

gkhgik.ixczzlbgc.assaesucdglfawalzttz.SendSms

android.intent.action.SEND android.intent.action.SENDTO

gkhgik.ixczzlbgc.assaesucdglfawalzttz.Srippleensure

gkhgik.ixczzlbgc.assaesucdglfawalzttz.Hcaptainfashion

gkhgik.ixczzlbgc.assaesucdglfawalzttz.Qgruntsqueeze

gkhgik.ixczzlbgc.assaesucdglfawalzttz.Zbeltsport

gkhgik.ixczzlbgc.assaesucdglfawalzttz.Rwealthfederal

gkhgik.ixczzlbgc.assaesucdglfawalzttz.Activity.ActivityPermissions

gkhgik.ixczzlbgc.assaesucdglfawalzttz.Kangrysniff

gkhgik.ixczzlbgc.assaesucdglfawalzttz.Imaskpatient

gkhgik.ixczzlbgc.assaesucdglfawalzttz.API.Screenshot.ActivityScreenshot

gkhgik.ixczzlbgc.assaesucdglfawalzttz.Msupremenuclear

gkhgik.ixczzlbgc.assaesucdglfawalzttz.Activity.ActivityInjection

gkhgik.ixczzlbgc.assaesucdglfawalzttz.Rhuntnation

gkhgik.ixczzlbgc.assaesucdglfawalzttz.Dreturnmove

gkhgik.ixczzlbgc.assaesucdglfawalzttz.Activity.ActivityGetNumber

gkhgik.ixczzlbgc.assaesucdglfawalzttz.Xendorselength

gkhgik.ixczzlbgc.assaesucdglfawalzttz.Activity.ActivityAlert1

gkhgik.ixczzlbgc.assaesucdglfawalzttz.Mtapeice

gkhgik.ixczzlbgc.assaesucdglfawalzttz.Activity.ActivityGetSMS

gkhgik.ixczzlbgc.assaesucdglfawalzttz.Nreleaseprint

gkhgik.ixczzlbgc.assaesucdglfawalzttz.Activity.ActivityAlert2

gkhgik.ixczzlbgc.assaesucdglfawalzttz.Aluckytube

gkhgik.ixczzlbgc.assaesucdglfawalzttz.Activity.ActivityStartUSSD

gkhgik.ixczzlbgc.assaesucdglfawalzttz.Lfunnyidea

gkhgik.ixczzlbgc.assaesucdglfawalzttz.Activity.ActivityPushInjection

gkhgik.ixczzlbgc.assaesucdglfawalzttz.Qtankthen

gkhgik.ixczzlbgc.assaesucdglfawalzttz.Activity.ActivityOpenURL

gkhgik.ixczzlbgc.assaesucdglfawalzttz.Qdenialfever

gkhgik.ixczzlbgc.assaesucdglfawalzttz.Nboxpolice

gkhgik.ixczzlbgc.assaesucdglfawalzttz.Dabsorbscreen

gkhgik.ixczzlbgc.assaesucdglfawalzttz.Fweddingstereo

gkhgik.ixczzlbgc.assaesucdglfawalzttz.Msetupmaid

gkhgik.ixczzlbgc.assaesucdglfawalzttz.Hovershadow

gkhgik.ixczzlbgc.assaesucdglfawalzttz.Sbluevessel

gkhgik.ixczzlbgc.assaesucdglfawalzttz.Thoneyuniverse

gkhgik.ixczzlbgc.assaesucdglfawalzttz.Sabsurdglory

gkhgik.ixczzlbgc.assaesucdglfawalzttz.Qburgerwant

gkhgik.ixczzlbgc.assaesucdglfawalzttz.Aluxurydegree

gkhgik.ixczzlbgc.assaesucdglfawalzttz.Qenactripple

gkhgik.ixczzlbgc.assaesucdglfawalzttz.Gmagnetpig

gkhgik.ixczzlbgc.assaesucdglfawalzttz.Tgalaxyfemale

gkhgik.ixczzlbgc.assaesucdglfawalzttz.Dbidnumber

gkhgik.ixczzlbgc.assaesucdglfawalzttz.Fsuddenseries

gkhgik.ixczzlbgc.assaesucdglfawalzttz.Mobtainslush

gkhgik.ixczzlbgc.assaesucdglfawalzttz.Fwanttrack

gkhgik.ixczzlbgc.assaesucdglfawalzttz.Qassistmerry

gkhgik.ixczzlbgc.assaesucdglfawalzttz.Jcarbonapology

gkhgik.ixczzlbgc.assaesucdglfawalzttz.Pblurstuff

gkhgik.ixczzlbgc.assaesucdglfawalzttz.Dphysicalhybrid

gkhgik.ixczzlbgc.assaesucdglfawalzttz.Edrinklike

gkhgik.ixczzlbgc.assaesucdglfawalzttz.Btaxiranch

gkhgik.ixczzlbgc.assaesucdglfawalzttz.Bgenreball

gkhgik.ixczzlbgc.assaesucdglfawalzttz.Scandychoice

gkhgik.ixczzlbgc.assaesucdglfawalzttz.Unecksimple

gkhgik.ixczzlbgc.assaesucdglfawalzttz.Activity.ActivityScreenLocker

gkhgik.ixczzlbgc.assaesucdglfawalzttz.Rslamship

gkhgik.ixczzlbgc.assaesucdglfawalzttz.Qbenchlimit

gkhgik.ixczzlbgc.assaesucdglfawalzttz.Activity.ActivityAccessibility

gkhgik.ixczzlbgc.assaesucdglfawalzttz.Wtoastdegree

gkhgik.ixczzlbgc.assaesucdglfawalzttz.Activity.ActivityPlayProtect

gkhgik.ixczzlbgc.assaesucdglfawalzttz.Isunnyblame

gkhgik.ixczzlbgc.assaesucdglfawalzttz.Jworrystove

gkhgik.ixczzlbgc.assaesucdglfawalzttz.Larrangetunnel

gkhgik.ixczzlbgc.assaesucdglfawalzttz.Bjealousdecember

gkhgik.ixczzlbgc.assaesucdglfawalzttz.Yokayhockey

gkhgik.ixczzlbgc.assaesucdglfawalzttz.Himpulsedog

gkhgik.ixczzlbgc.assaesucdglfawalzttz.Kchunkouter

gkhgik.ixczzlbgc.assaesucdglfawalzttz.Xclerkantique

gkhgik.ixczzlbgc.assaesucdglfawalzttz.Hwoodexpress

gkhgik.ixczzlbgc.assaesucdglfawalzttz.Activity.LookScreen

gkhgik.ixczzlbgc.assaesucdglfawalzttz.Ystageprimary

gkhgik.ixczzlbgc.assaesucdglfawalzttz.Unamesniff

gkhgik.ixczzlbgc.assaesucdglfawalzttz.Uyouthstomach

gkhgik.ixczzlbgc.assaesucdglfawalzttz.Barrangemyself

gkhgik.ixczzlbgc.assaesucdglfawalzttz.Qtagschool

gkhgik.ixczzlbgc.assaesucdglfawalzttz.Whotelsudden

gkhgik.ixczzlbgc.assaesucdglfawalzttz.Ccattlealone

gkhgik.ixczzlbgc.assaesucdglfawalzttz.Mclutchtogether

gkhgik.ixczzlbgc.assaesucdglfawalzttz.Yribcompany

gkhgik.ixczzlbgc.assaesucdglfawalzttz.Fprintaverage

gkhgik.ixczzlbgc.assaesucdglfawalzttz.Oresistgeneral

gkhgik.ixczzlbgc.assaesucdglfawalzttz.Binjurytreat

gkhgik.ixczzlbgc.assaesucdglfawalzttz.ServiceHeadlessSmsSend

android.intent.action.RESPOND_VIA_MESSAGE

gkhgik.ixczzlbgc.assaesucdglfawalzttz.ServiceInjections

gkhgik.ixczzlbgc.assaesucdglfawalzttz.ServiceGeolocationNetwork

gkhgik.ixczzlbgc.assaesucdglfawalzttz.ServiceCommands

gkhgik.ixczzlbgc.assaesucdglfawalzttz.StartWhileGlobal

gkhgik.ixczzlbgc.assaesucdglfawalzttz.ServiceGeolocationGPS

gkhgik.ixczzlbgc.assaesucdglfawalzttz.ServiceDeleteSMS

gkhgik.ixczzlbgc.assaesucdglfawalzttz.ServiceModuleNotification

gkhgik.ixczzlbgc.assaesucdglfawalzttz.ServiceToast

gkhgik.ixczzlbgc.assaesucdglfawalzttz.ServicePlayProtectToast

gkhgik.ixczzlbgc.assaesucdglfawalzttz.ServiceAccessibility

android.accessibilityservice.AccessibilityService

gkhgik.ixczzlbgc.assaesucdglfawalzttz.StartWhileRequest

gkhgik.ixczzlbgc.assaesucdglfawalzttz.API.Screenshot.ServiceScreenshot

gkhgik.ixczzlbgc.assaesucdglfawalzttz.API.Screenshot.ServiceSendRequestImageVNC

gkhgik.ixczzlbgc.assaesucdglfawalzttz.API.Sound.ServiceStreamSound

gkhgik.ixczzlbgc.assaesucdglfawalzttz.ServiceRAT

gkhgik.ixczzlbgc.assaesucdglfawalzttz.ServiceFindFiles

gkhgik.ixczzlbgc.assaesucdglfawalzttz.ServiceCryptFiles

gkhgik.ixczzlbgc.assaesucdglfawalzttz.API.Sound.ServiceRecordSound

gkhgik.ixczzlbgc.assaesucdglfawalzttz.API.Spam.ServiceSpamSMS

gkhgik.ixczzlbgc.assaesucdglfawalzttz.API.Spam.ServiceSenderSpamSMS

gkhgik.ixczzlbgc.assaesucdglfawalzttz.socks.ServiceForwardingTunel

gkhgik.ixczzlbgc.assaesucdglfawalzttz.ServiceLookScreen

gkhgik.ixczzlbgc.assaesucdglfawalzttz.ServicePedometer

gkhgik.ixczzlbgc.assaesucdglfawalzttz.LogSrv

gkhgik.ixczzlbgc.assaesucdglfawalzttz.Alarm.EndlessService

gkhgik.ixczzlbgc.assaesucdglfawalzttz.Alarm.JobSchedulerService

gkhgik.ixczzlbgc.assaesucdglfawalzttz.ServiceNL

android.service.notification.NotificationListenerService

Android Permissions

f6a98a77f03cfafd50b66b8777083a6250fd52478918aea85356d39e0be3057f

Permissions

android.permission.WRITE_SMS

android.permission.REQUEST_DELETE_PACKAGES

android.permission.RECEIVE_SMS

android.permission.WAKE_LOCK

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.RECORD_AUDIO

android.permission.PACKAGE_USAGE_STATS

android.permission.READ_SMS

android.permission.SET_WALLPAPER_HINTS

android.permission.ACCESS_NETWORK_STATE

android.permission.NFC

android.permission.FOREGROUND_SERVICE

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.ACCESS_FINE_LOCATION

android.permission.INTERNET

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.SEND_SMS

android.permission.READ_PHONE_STATE

android.permission.GET_TASKS

android.permission.CHANGE_NETWORK_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.READ_CONTACTS

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.CALL_PHONE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.USE_FINGERPRINT