5cb252c70a223901b3005816ddd87a0e7e67f32bb44af63cb6dc1482f9bcd577

Sharing

Copy URL Twitter E-mail

General

Target
5cb252c70a223901b3005816ddd87a0e7e67f32bb44af63cb6dc1482f9bcd577
Size 4.6MB
Sample220516-tvtdfaadh9
SHA256 5cb252c70a223901b3005816ddd87a0e7e67f32bb44af63cb6dc1482f9bcd577
MD5 04740989c14ab33a2ff2696db96d0c1f
SHA1 997b7fa513c2c6ecce1247f129da6680e8a4c97b
SHA512 fa1a714626215f057007bc5759b5ba6b0108da6c08f331643322ff05195ffa0929c1be2377e612c06fe427e9c643611eb6805251ef29fe3fbacd18cdcf117a28
SSDEEP 98304:21EqttcTPcM640/AB+b7n7Vg7W3vuPbqwTKCvqeMKXDDLYEfKr9:UsT0MbhB+v7p32PewTKaTzDVfKr9
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 5 IoCs

description	ioc
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE

File Explorer

5cb252c70a223901b3005816ddd87a0e7e67f32bb44af63cb6dc1482f9bcd577

.apk 4.6MB

5cb252c70a223901b3005816ddd87a0e7e67f32bb44af63cb6dc1482f9bcd577

SHA256 5cb252c70a223901b3005816ddd87a0e7e67f32bb44af63cb6dc1482f9bcd577
MD5 04740989c14ab33a2ff2696db96d0c1f
SHA1 997b7fa513c2c6ecce1247f129da6680e8a4c97b
SHA512 fa1a714626215f057007bc5759b5ba6b0108da6c08f331643322ff05195ffa0929c1be2377e612c06fe427e9c643611eb6805251ef29fe3fbacd18cdcf117a28
SSDEEP 98304:21EqttcTPcM640/AB+b7n7Vg7W3vuPbqwTKCvqeMKXDDLYEfKr9:UsT0MbhB+v7p32PewTKaTzDVfKr9
MD5 SHA1 SHA512 SSDEEP

android

wjhtcnrkkar.lubuxqtnmzucraly.xasiafinjzlmxme

fyrzfjzdqqhktez.lubshjjqrpdzm.eolribgu.Areasonhedgehog

fyrzfjzdqqhktez.lubshjjqrpdzm.eolribgu.MainActivity

android.intent.action.MAIN

fyrzfjzdqqhktez.lubshjjqrpdzm.eolribgu.Pbaconrunway

fyrzfjzdqqhktez.lubshjjqrpdzm.eolribgu.Hcannoncapital

fyrzfjzdqqhktez.lubshjjqrpdzm.eolribgu.bot.PermissionsActivity

fyrzfjzdqqhktez.lubshjjqrpdzm.eolribgu.Hclevernext

fyrzfjzdqqhktez.lubshjjqrpdzm.eolribgu.bot.components.locker.LockerActivity

android.intent.action.MAIN

fyrzfjzdqqhktez.lubshjjqrpdzm.eolribgu.Rmatterlong

fyrzfjzdqqhktez.lubshjjqrpdzm.eolribgu.Gprogramleft

fyrzfjzdqqhktez.lubshjjqrpdzm.eolribgu.bot.components.locker.LockerActivity$DummyActivity

fyrzfjzdqqhktez.lubshjjqrpdzm.eolribgu.Ysunnycement

fyrzfjzdqqhktez.lubshjjqrpdzm.eolribgu.Bsolutionsample

fyrzfjzdqqhktez.lubshjjqrpdzm.eolribgu.Bbalconyhammer

fyrzfjzdqqhktez.lubshjjqrpdzm.eolribgu.Galtersure

fyrzfjzdqqhktez.lubshjjqrpdzm.eolribgu.Xbehaveadmit

fyrzfjzdqqhktez.lubshjjqrpdzm.eolribgu.Jmaximumaffair

fyrzfjzdqqhktez.lubshjjqrpdzm.eolribgu.Kswearride

fyrzfjzdqqhktez.lubshjjqrpdzm.eolribgu.bot.components.screencast.ScreencastStartActivity

fyrzfjzdqqhktez.lubshjjqrpdzm.eolribgu.Bmansiondesk

fyrzfjzdqqhktez.lubshjjqrpdzm.eolribgu.Dcheckarmor

fyrzfjzdqqhktez.lubshjjqrpdzm.eolribgu.bot.components.screencast.UnlockActivity

fyrzfjzdqqhktez.lubshjjqrpdzm.eolribgu.Lgruntacross

fyrzfjzdqqhktez.lubshjjqrpdzm.eolribgu.Hangerlittle

fyrzfjzdqqhktez.lubshjjqrpdzm.eolribgu.Qbroompresent

fyrzfjzdqqhktez.lubshjjqrpdzm.eolribgu.Tdifferspread

fyrzfjzdqqhktez.lubshjjqrpdzm.eolribgu.Lhumancandy

fyrzfjzdqqhktez.lubshjjqrpdzm.eolribgu.bot.sms.ComposeSmsActivity

android.intent.action.SEND android.intent.action.SENDTO

fyrzfjzdqqhktez.lubshjjqrpdzm.eolribgu.Kchefbeach

fyrzfjzdqqhktez.lubshjjqrpdzm.eolribgu.Zenergycentury

fyrzfjzdqqhktez.lubshjjqrpdzm.eolribgu.Wsafeload

fyrzfjzdqqhktez.lubshjjqrpdzm.eolribgu.Jteachdoctor

fyrzfjzdqqhktez.lubshjjqrpdzm.eolribgu.core.injects_core.Screen

fyrzfjzdqqhktez.lubshjjqrpdzm.eolribgu.Qskatespend

fyrzfjzdqqhktez.lubshjjqrpdzm.eolribgu.Zvelvetdiary

Android Permissions

5cb252c70a223901b3005816ddd87a0e7e67f32bb44af63cb6dc1482f9bcd577

Permissions

android.permission.READ_SYNC_STATS

android.permission.FOREGROUND_SERVICE

android.permission.WRITE_SYNC_SETTINGS

android.permission.DISABLE_KEYGUARD

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.CAPTURE_VIDEO_OUTPUT

android.permission.WAKE_LOCK

android.permission.RECEIVE_SMS

android.permission.INTERNET

android.permission.WAKE_LOCK

android.permission.ACCESS_NETWORK_STATE

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.SYSTEM_ALERT_WINDOW

android.permission.SEND_SMS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.REORDER_TASKS

android.permission.WRITE_SMS

android.permission.READ_SMS

android.permission.CALL_PHONE

Sharing

General

Malware Config

Signatures

File Explorer

5cb252c70a223901b3005816ddd87a0e7e67f32bb44af63cb6dc1482f9bcd577

fyrzfjzdqqhktez.lubshjjqrpdzm.eolribgu.Areasonhedgehog

fyrzfjzdqqhktez.lubshjjqrpdzm.eolribgu.MainActivity

fyrzfjzdqqhktez.lubshjjqrpdzm.eolribgu.Pbaconrunway

fyrzfjzdqqhktez.lubshjjqrpdzm.eolribgu.Hcannoncapital

fyrzfjzdqqhktez.lubshjjqrpdzm.eolribgu.bot.PermissionsActivity

fyrzfjzdqqhktez.lubshjjqrpdzm.eolribgu.Hclevernext

fyrzfjzdqqhktez.lubshjjqrpdzm.eolribgu.bot.components.locker.LockerActivity

fyrzfjzdqqhktez.lubshjjqrpdzm.eolribgu.Rmatterlong

fyrzfjzdqqhktez.lubshjjqrpdzm.eolribgu.Gprogramleft

fyrzfjzdqqhktez.lubshjjqrpdzm.eolribgu.bot.components.locker.LockerActivity$DummyActivity

fyrzfjzdqqhktez.lubshjjqrpdzm.eolribgu.Ysunnycement

fyrzfjzdqqhktez.lubshjjqrpdzm.eolribgu.Bsolutionsample

fyrzfjzdqqhktez.lubshjjqrpdzm.eolribgu.Bbalconyhammer

fyrzfjzdqqhktez.lubshjjqrpdzm.eolribgu.Galtersure

fyrzfjzdqqhktez.lubshjjqrpdzm.eolribgu.Xbehaveadmit

fyrzfjzdqqhktez.lubshjjqrpdzm.eolribgu.Jmaximumaffair

fyrzfjzdqqhktez.lubshjjqrpdzm.eolribgu.Kswearride

fyrzfjzdqqhktez.lubshjjqrpdzm.eolribgu.bot.components.screencast.ScreencastStartActivity

fyrzfjzdqqhktez.lubshjjqrpdzm.eolribgu.Bmansiondesk

fyrzfjzdqqhktez.lubshjjqrpdzm.eolribgu.Dcheckarmor

fyrzfjzdqqhktez.lubshjjqrpdzm.eolribgu.bot.components.screencast.UnlockActivity

fyrzfjzdqqhktez.lubshjjqrpdzm.eolribgu.Lgruntacross

fyrzfjzdqqhktez.lubshjjqrpdzm.eolribgu.Hangerlittle

fyrzfjzdqqhktez.lubshjjqrpdzm.eolribgu.Qbroompresent

fyrzfjzdqqhktez.lubshjjqrpdzm.eolribgu.Tdifferspread

fyrzfjzdqqhktez.lubshjjqrpdzm.eolribgu.Lhumancandy

fyrzfjzdqqhktez.lubshjjqrpdzm.eolribgu.bot.sms.ComposeSmsActivity

fyrzfjzdqqhktez.lubshjjqrpdzm.eolribgu.Kchefbeach

fyrzfjzdqqhktez.lubshjjqrpdzm.eolribgu.Zenergycentury

fyrzfjzdqqhktez.lubshjjqrpdzm.eolribgu.Wsafeload

fyrzfjzdqqhktez.lubshjjqrpdzm.eolribgu.Jteachdoctor

fyrzfjzdqqhktez.lubshjjqrpdzm.eolribgu.core.injects_core.Screen

fyrzfjzdqqhktez.lubshjjqrpdzm.eolribgu.Qskatespend

fyrzfjzdqqhktez.lubshjjqrpdzm.eolribgu.Zvelvetdiary

fyrzfjzdqqhktez.lubshjjqrpdzm.eolribgu.bot.components.injects.system.InjAccessibilityService

fyrzfjzdqqhktez.lubshjjqrpdzm.eolribgu.bot.components.socks5.Socks5ProxyService

fyrzfjzdqqhktez.lubshjjqrpdzm.eolribgu.bot.components.screencast.ScreencastService

fyrzfjzdqqhktez.lubshjjqrpdzm.eolribgu.core.PeriodicJobService

fyrzfjzdqqhktez.lubshjjqrpdzm.eolribgu.bot.sms.HeadlessSmsSendService

fyrzfjzdqqhktez.lubshjjqrpdzm.eolribgu.core.injects_core.Worker

fyrzfjzdqqhktez.lubshjjqrpdzm.eolribgu.bot.HelperAdmin$MyHomeReceiver

fyrzfjzdqqhktez.lubshjjqrpdzm.eolribgu.bot.receivers.MainReceiver

fyrzfjzdqqhktez.lubshjjqrpdzm.eolribgu.core.PeriodicJobReceiver

fyrzfjzdqqhktez.lubshjjqrpdzm.eolribgu.bot.sms.SmsReceiver

fyrzfjzdqqhktez.lubshjjqrpdzm.eolribgu.bot.sms.MmsReceiver

fyrzfjzdqqhktez.lubshjjqrpdzm.eolribgu.core.injects_core.CHandler

android.support.v4.content.FileProvider

Android Permissions

5cb252c70a223901b3005816ddd87a0e7e67f32bb44af63cb6dc1482f9bcd577