bb0edd9d25bf7deb57c30dee728a76249517893f6c891eb0bace0b2e4b5db6d2

Sharing

Copy URL Twitter E-mail

General

Target
bb0edd9d25bf7deb57c30dee728a76249517893f6c891eb0bace0b2e4b5db6d2
Size 1.9MB
Sample220521-d9h81shae4
SHA256 bb0edd9d25bf7deb57c30dee728a76249517893f6c891eb0bace0b2e4b5db6d2
MD5 4bd9cd9b9ea6243dbe839881a5756340
SHA1 5d291d5a979549fb459dfd3395a3d0499b35c610
SHA512 d05dd18ef504a7226d1e9057f389c020d37008308897fd4abc599cd26a8a46a1da2f82c51663a9cc3bbc9c23edcd8d78a6c09c29aa8849ad77dd624dc568f6d8
SSDEEP 49152:Llmh0VYIATBYgb20cvRsmtYcujxPbZdu4lx25yiw3U8s5OYk:oh0TATmgb20isJlPbZM4lggiUU8szk
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 10 IoCs

description	ioc
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS

File Explorer

bb0edd9d25bf7deb57c30dee728a76249517893f6c891eb0bace0b2e4b5db6d2

.apk 1.9MB

bb0edd9d25bf7deb57c30dee728a76249517893f6c891eb0bace0b2e4b5db6d2

SHA256 bb0edd9d25bf7deb57c30dee728a76249517893f6c891eb0bace0b2e4b5db6d2
MD5 4bd9cd9b9ea6243dbe839881a5756340
SHA1 5d291d5a979549fb459dfd3395a3d0499b35c610
SHA512 d05dd18ef504a7226d1e9057f389c020d37008308897fd4abc599cd26a8a46a1da2f82c51663a9cc3bbc9c23edcd8d78a6c09c29aa8849ad77dd624dc568f6d8
SSDEEP 49152:Llmh0VYIATBYgb20cvRsmtYcujxPbZdu4lx25yiw3U8s5OYk:oh0TATmgb20isJlPbZM4lggiUU8szk
MD5 SHA1 SHA512 SSDEEP

android

snnjhmlxigbehruxga.ttzy.siwxxnntbcfydtzsbak

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.Oloadlawsuit

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.Preunionbrief

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.Uchestvital

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.Fproblemtilt

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.Fskirtcarbon

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.Mskiartist

com.google.android.gms.common.api.GoogleApiActivity

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.Daccountsting

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.Hretirearound

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.Pmimicexplain

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.srlupxoujpenv

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.Edieselivory

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.dhwuk

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.Oairneither

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.Eappearcitizen

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.Ovacanthead

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.Oheighttrend

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.Mgardenminimum

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.Ydevicefalse

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.eowieuvwbmwprut

android.intent.action.SEND android.intent.action.SENDTO

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.Cplacepath

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.Mherosummer

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.Pnoticeswift

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.Nfebruaryheart

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.Ablouseone

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.Xeducatefestival

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.Ptopplescale

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.Rbetraylemon

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.gcx

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.Mlabelwear

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.Eviciousone

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.Mturkeyclock

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.hhpuxogfhuh

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.Lgallerymimic

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.wltt

android.intent.action.MAIN

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.Ufliprent

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.Ccouchdolphin

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.ekbrilrae

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.Fcanusage

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.hosohtdzbnagybfw

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.Dsufferwool

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.Bobeyapart

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.Qnestimitate

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.Pmooncreek

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.Uwaveliar

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.Omushroomfruit

Android Permissions

bb0edd9d25bf7deb57c30dee728a76249517893f6c891eb0bace0b2e4b5db6d2

Permissions

android.permission.CALL_PHONE

android.permission.READ_EXTERNAL_STORAGE

android.permission.READ_CONTACTS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.READ_SMS

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.ACCESS_NETWORK_STATE

android.permission.RECORD_AUDIO

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.RECEIVE_SMS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.REORDER_TASKS

android.permission.SEND_SMS

android.permission.FOREGROUND_SERVICE

android.permission.WAKE_LOCK

android.permission.REQUEST_DELETE_PACKAGES

android.permission.GET_ACCOUNTS

android.permission.EXPAND_STATUS_BAR

android.permission.USE_FULL_SCREEN_INTENT

android.permission.SET_WALLPAPER

Sharing

General

Malware Config

Signatures

File Explorer

bb0edd9d25bf7deb57c30dee728a76249517893f6c891eb0bace0b2e4b5db6d2

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.Oloadlawsuit

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.Preunionbrief

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.Uchestvital

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.Fproblemtilt

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.Fskirtcarbon

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.Mskiartist

com.google.android.gms.common.api.GoogleApiActivity

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.Daccountsting

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.Hretirearound

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.Pmimicexplain

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.srlupxoujpenv

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.Edieselivory

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.dhwuk

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.Oairneither

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.Eappearcitizen

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.Ovacanthead

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.Oheighttrend

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.Mgardenminimum

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.Ydevicefalse

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.eowieuvwbmwprut

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.Cplacepath

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.Mherosummer

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.Pnoticeswift

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.Nfebruaryheart

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.Ablouseone

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.Xeducatefestival

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.Ptopplescale

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.Rbetraylemon

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.gcx

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.Mlabelwear

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.Eviciousone

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.Mturkeyclock

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.hhpuxogfhuh

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.Lgallerymimic

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.wltt

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.Ufliprent

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.Ccouchdolphin

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.ekbrilrae

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.Fcanusage

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.hosohtdzbnagybfw

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.Dsufferwool

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.Bobeyapart

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.Qnestimitate

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.Pmooncreek

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.Uwaveliar

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.Omushroomfruit

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.njtousjvsrom

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.klvy

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.mlugkcfetuk

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.fhrkslbkekufznq

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.utiiaoigljqu

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.ooiyq

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.jfcomeztvtsqpx

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.apnuvcp

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.aexva

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.abqjo

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.fjl

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.edyl

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.bnesfsnxgrvvuj

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.vmqwchuwqvxo

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.fdotdjkcwle

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.exvvf

fryo.fizzbbskonhjlgjnqnlpiawi.opxnmgpmexjrmrqhstkiqxownkj.ptcgzhgpac

Android Permissions

bb0edd9d25bf7deb57c30dee728a76249517893f6c891eb0bace0b2e4b5db6d2