1e354556d19a1693dcfa71503f0ce9d6c64eb3a178c787bf3700734cdca0ec10

Sharing

Copy URL Twitter E-mail

General

Target
1e354556d19a1693dcfa71503f0ce9d6c64eb3a178c787bf3700734cdca0ec10
Size 1.4MB
Sample220508-krss3agdgn
SHA256 1e354556d19a1693dcfa71503f0ce9d6c64eb3a178c787bf3700734cdca0ec10
MD5 e0d9fac23bd437acf627034167ca9ae5
SHA1 b12bff0466b9a49bfde4dc893b23ee01867b9b9a
SHA512 f0a8b7b6fca7408704715cc735c7612ba866f89b62f5660c73ff1816fb52674ee3380a91117ed11fde8f2b328acc51b0182734c2dd60de58c0004190d48d1ee1
SSDEEP 24576:SKap8o9tKzSs0xJ+LG4n3DbY8mIH9OFJTWz8jEpAmIH/D8XXKrUCVSyCKUe2Tbcs:QmRKELVnTbYYH9OFJT4p8H/9rlSv+sbv
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 10 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS

File Explorer

1e354556d19a1693dcfa71503f0ce9d6c64eb3a178c787bf3700734cdca0ec10

.apk 1.4MB

1e354556d19a1693dcfa71503f0ce9d6c64eb3a178c787bf3700734cdca0ec10

SHA256 1e354556d19a1693dcfa71503f0ce9d6c64eb3a178c787bf3700734cdca0ec10
MD5 e0d9fac23bd437acf627034167ca9ae5
SHA1 b12bff0466b9a49bfde4dc893b23ee01867b9b9a
SHA512 f0a8b7b6fca7408704715cc735c7612ba866f89b62f5660c73ff1816fb52674ee3380a91117ed11fde8f2b328acc51b0182734c2dd60de58c0004190d48d1ee1
SSDEEP 24576:SKap8o9tKzSs0xJ+LG4n3DbY8mIH9OFJTWz8jEpAmIH/D8XXKrUCVSyCKUe2Tbcs:QmRKELVnTbYYH9OFJT4p8H/9rlSv+sbv
MD5 SHA1 SHA512 SSDEEP

android

pkcoyusjaos.mlkpjczeyppt.pqtthnquh

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.Stastesilver

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.Jkitcat

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.Sbicyclehedgehog

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.Bauditmarch

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.Oshadowcrunch

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.Lrainwelcome

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.Hcabinparent

com.google.android.gms.common.api.GoogleApiActivity

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.Jcabincanoe

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.Phelpdelay

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.bjallqv

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.Qgardenphysical

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.Cdieselactor

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.rbzmuztfixn

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.Nsausagekidney

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.Cfruitsleep

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.Wsilverdecade

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.Eburstword

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.Shumorcoast

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.Oflowerempty

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.Ccabbageworth

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.bwc

android.intent.action.SEND android.intent.action.SENDTO

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.Frampcoral

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.Ninvestglance

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.Fstandembody

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.Ocitizenhumble

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.Pabandontrue

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.Ncanalstrategy

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.Aexcludeblade

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.Jgruntecho

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.Yfemalemore

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.wjcsxwknfiujg

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.Sbrandpyramid

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.Puselessenact

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.Pfuelfrown

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.Doliveyellow

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.Mslabfirm

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.qswv

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.Ylawngate

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.Ndeerlike

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.hijefcgajyeqvh

android.intent.action.MAIN

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.Mfebruarysince

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.Apreparebeef

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.zycll

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.Malertsnow

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.Dpledgeleopard

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.ntcfecf

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.Glevelmusic

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.Osurfaceroad

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.Bteachdescribe

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.Qbulletbuffalo

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.Qaugustbulb

Android Permissions

1e354556d19a1693dcfa71503f0ce9d6c64eb3a178c787bf3700734cdca0ec10

Permissions

android.permission.REQUEST_COMPANION_RUN_IN_BACKGROUND

android.permission.USE_FULL_SCREEN_INTENT

android.permission.FOREGROUND_SERVICE

android.permission.READ_PHONE_STATE

android.permission.SEND_SMS

android.permission.RECEIVE_SMS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.RECORD_AUDIO

android.permission.GET_ACCOUNTS

android.permission.CALL_PHONE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.FOREGROUND_SERVICE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.INTERNET

android.permission.READ_SMS

android.permission.READ_EXTERNAL_STORAGE

android.permission.WAKE_LOCK

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_CONTACTS

Sharing

General

Malware Config

Signatures

File Explorer

1e354556d19a1693dcfa71503f0ce9d6c64eb3a178c787bf3700734cdca0ec10

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.Stastesilver

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.Jkitcat

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.Sbicyclehedgehog

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.Bauditmarch

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.Oshadowcrunch

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.Lrainwelcome

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.Hcabinparent

com.google.android.gms.common.api.GoogleApiActivity

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.Jcabincanoe

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.Phelpdelay

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.bjallqv

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.Qgardenphysical

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.Cdieselactor

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.rbzmuztfixn

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.Nsausagekidney

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.Cfruitsleep

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.Wsilverdecade

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.Eburstword

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.Shumorcoast

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.Oflowerempty

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.Ccabbageworth

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.bwc

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.Frampcoral

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.Ninvestglance

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.Fstandembody

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.Ocitizenhumble

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.Pabandontrue

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.Ncanalstrategy

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.Aexcludeblade

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.Jgruntecho

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.Yfemalemore

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.wjcsxwknfiujg

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.Sbrandpyramid

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.Puselessenact

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.Pfuelfrown

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.Doliveyellow

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.Mslabfirm

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.qswv

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.Ylawngate

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.Ndeerlike

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.hijefcgajyeqvh

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.Mfebruarysince

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.Apreparebeef

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.zycll

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.Malertsnow

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.Dpledgeleopard

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.ntcfecf

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.Glevelmusic

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.Osurfaceroad

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.Bteachdescribe

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.Qbulletbuffalo

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.Qaugustbulb

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.zux

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.ffc

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.skagerdkotmnehks

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.zpknprvtpkqbe

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.fwbqjsopzvhyxys

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.dgzpudktngvzrnvk

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.rcjoewcpvjuiibyh

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.xicmjjnjcko

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.qzhjfstag

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.wxcjaylxsipbc

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.plkq

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.wub

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.eqblofgxzflbgle

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.ssd

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.omgt

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.pcu

ykxyhiwrezjgskqgpppustlbr.fjfndub.bbqlsjql.ecx

Android Permissions

1e354556d19a1693dcfa71503f0ce9d6c64eb3a178c787bf3700734cdca0ec10