7435006123[.]zip | Triage™

General

Target
7435006123.zip
Size 5.2MB
Sample220512-jbdhrsbae3
SHA256 97b06e81c5aff31d6742403e2c2eee8375725141cd60468ad204b3b33ae638af
MD5 b0d55e510fb5bcbe0c315ecd5076485f
SHA1 7c71bfb2e3aa2af41b2baf6decb2548cb35e0b4d
SHA512 e7d650ed4fc21c69f498a8bd754f97b2a118218a5983bddc2173999898415443c13eb0b13e439cbbd5be0bfbfa210c530a27dceba06080ded837c402e445a6ce
SSDEEP 98304:8NNBn6kYe6oQO1PVA0WyE9nzCqAOeZSUIkSC4dPPKFCV:OBn6GPVdWy+nGvZStC4xKsV
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 8 IoCs

description	ioc
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to monitor incoming MMS messages.	android.permission.RECEIVE_MMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to send SMS messages.	android.permission.SEND_SMS

File Explorer

7435006123.zip

.zip 5.2MB
739616a8a8b6081d3a28d8aae27aa54f2345529cf804a039ba840286c65b5cdc

.apk 5.4MB

7435006123.zip

SHA256 97b06e81c5aff31d6742403e2c2eee8375725141cd60468ad204b3b33ae638af
MD5 b0d55e510fb5bcbe0c315ecd5076485f
SHA1 7c71bfb2e3aa2af41b2baf6decb2548cb35e0b4d
SHA512 e7d650ed4fc21c69f498a8bd754f97b2a118218a5983bddc2173999898415443c13eb0b13e439cbbd5be0bfbfa210c530a27dceba06080ded837c402e445a6ce
SSDEEP 98304:8NNBn6kYe6oQO1PVA0WyE9nzCqAOeZSUIkSC4dPPKFCV:OBn6GPVdWy+nGvZStC4xKsV
MD5 SHA1 SHA512 SSDEEP

Password

infected

739616a8a8b6081d3a28d8aae27aa54f2345529cf804a039ba840286c65b5cdc

SHA256 739616a8a8b6081d3a28d8aae27aa54f2345529cf804a039ba840286c65b5cdc
MD5 88bd05585cfd9d2dca31db8d259bda3a
SHA1 fd80eb218428687a88af0d2f309c0200de79b3e5
SHA512 e0356ba5b902a411242f55a04dce8fe494cd9c7f093e8d0f7537612fcea8fe383ce09a140e776ced79ebae0966188cccb72e10648a337bf5a8f5e603a478ee25
SSDEEP 98304:dnWud/9Jna4OlI/mzxfX5yre21fN2uNN0DjkacZSoo5chuxSLtPU9:dx/bOO/c5yiiBNCrwF6cZLt89
MD5 SHA1 SHA512 SSDEEP

android

com.tencent.mobileqq

7435006123.zip

739616a8a8b6081d3a28d8aae27aa54f2345529cf804a039ba840286c65b5cdc

com.tencent.mobileqq.p407b2628

com.tencent.mobileqq.pd0a77d7f

com.tencent.mobileqq.p0cb0aae8

com.tencent.mobileqq.p7fe53cb4

com.tencent.mobileqq.peffc8420

com.tencent.mobileqq.p5e7bd65e

com.tencent.mobileqq.pcdefb005

com.tencent.mobileqq.pff03a26d

com.tencent.mobileqq.pc2630c03

com.tencent.mobileqq.p0b42ebee

com.tencent.mobileqq.p49060a87

com.tencent.mobileqq.p5e3a14da

com.tencent.mobileqq.pda2d9c90

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

7435006123.zip

739616a8a8b6081d3a28d8aae27aa54f2345529cf804a039ba840286c65b5cdc

com.tencent.mobileqq.p407b2628

com.tencent.mobileqq.pd0a77d7f

com.tencent.mobileqq.p0cb0aae8

com.tencent.mobileqq.p7fe53cb4

com.tencent.mobileqq.peffc8420

com.tencent.mobileqq.p5e7bd65e

com.tencent.mobileqq.pcdefb005

com.tencent.mobileqq.pff03a26d

com.tencent.mobileqq.pc2630c03

com.tencent.mobileqq.p0b42ebee

com.tencent.mobileqq.p49060a87

com.tencent.mobileqq.p5e3a14da

com.tencent.mobileqq.pda2d9c90