e8962cfcd9e1533c59fddbe2f8126415989ce6646e2152306701187891eeccb4

Sharing

Copy URL Twitter E-mail

General

Target
e8962cfcd9e1533c59fddbe2f8126415989ce6646e2152306701187891eeccb4
Size 3.2MB
Sample220521-njgbvaghen
SHA256 e8962cfcd9e1533c59fddbe2f8126415989ce6646e2152306701187891eeccb4
MD5 404c1d266952d74b2942687a067ac8e1
SHA1 5179f3543962ca704a622e6770a2d35ef9447e5e
SHA512 ce707448ea2538ac3e53c6cdf8d6929f7f415c61b8e4767c94ae5601ea817e4269efd842eb85400a2001621f6a9e621aa83082967dff781a0844eee4784979e2
SSDEEP 98304:IWt9PnqXGYO1rDj4KJxvxoICcnV5RzyQ/L3/dIzxqpzaH7C:H9PWGYIfj4cv+ICa7R/T3VINqpzaH+
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 10 IoCs

description	ioc
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE

File Explorer

e8962cfcd9e1533c59fddbe2f8126415989ce6646e2152306701187891eeccb4

.apk 3.2MB

e8962cfcd9e1533c59fddbe2f8126415989ce6646e2152306701187891eeccb4

SHA256 e8962cfcd9e1533c59fddbe2f8126415989ce6646e2152306701187891eeccb4
MD5 404c1d266952d74b2942687a067ac8e1
SHA1 5179f3543962ca704a622e6770a2d35ef9447e5e
SHA512 ce707448ea2538ac3e53c6cdf8d6929f7f415c61b8e4767c94ae5601ea817e4269efd842eb85400a2001621f6a9e621aa83082967dff781a0844eee4784979e2
SSDEEP 98304:IWt9PnqXGYO1rDj4KJxvxoICcnV5RzyQ/L3/dIzxqpzaH7C:H9PWGYIfj4cv+ICa7R/T3VINqpzaH+
MD5 SHA1 SHA512 SSDEEP

android

zcsbslkgerdndszjs.dcbpdsaprqqmwem.nnqhqoleyzwjkxexrwmcaq

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.Owindowflee

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.Fkickcool

com.google.android.gms.common.api.GoogleApiActivity

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.Ltiltnut

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.Ylonelysmooth

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.Activity.MainActivity

android.intent.action.MAIN

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.Tvenuevirtual

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.Bbonusimage

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.Aentrylock

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.SendSms

android.intent.action.SEND android.intent.action.SENDTO

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.Ksimpleinstall

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.Xphysicalmonster

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.Bblossomannual

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.Wstemplug

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.Wmeatsilver

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.Hpatientlend

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.Dlyricstoddler

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.Igiraffepulp

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.Activity.ActivityPermissions

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.Asquirrelinch

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.Wroutelock

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.API.Screenshot.ActivityScreenshot

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.Ufibersuggest

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.Activity.ActivityInjection

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.Cgiftdecrease

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.Activity.ActivityGetNumber

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.Ebloodinvest

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.Activity.ActivityAlert1

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.Qvariousrookie

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.Gtoppanel

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.Activity.ActivityGetSMS

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.Fbabyfitness

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.Activity.ActivityAlert2

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.Jfavoriteplace

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.Activity.ActivityStartUSSD

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.Zawarecruel

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.Activity.ActivityPushInjection

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.Tenvelopevillage

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.Activity.ActivityOpenURL

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.Adesertpuppy

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.Bscorpionupon

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.Mdespairkick

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.Bcavestock

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.Yorganfault

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.Gmissblouse

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.Ewristhello

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.Swidthoffice

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.Yvividpurity

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.Mtokentattoo

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.Oassaultarena

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.Uchimneypretty

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.Xregionbasket

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.Kofficespot

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.Sfinduseless

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.Qfoxtragic

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.Atalkscale

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.Oindoorfaith

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.Ldivorceedit

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.Nboringnature

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.Uabandonwild

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.Ocliffpattern

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.Rfinishamong

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.Gpanthermaze

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.Hrigidinside

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.Activity.ActivityScreenLocker

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.Pguardonce

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.Frenderobserve

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.Activity.ActivityAccessibility

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.Ymemberfrost

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.Hlimitbracket

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.Activity.ActivityPlayProtect

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.Hboypiano

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.Ainnocentdraw

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.Hcrunchenter

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.Rinspireclip

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.Rcoralbutter

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.Gcandybalance

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.Ysniffdigital

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.Xpartydash

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.Activity.LookScreen

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.Pteachschool

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.Qlanguagelevel

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.Xfetchelegant

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.Cpolewrist

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.Sloantwo

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.Rtumblegood

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.Xwatercotton

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.Srepeatenrich

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.Tpictureeyebrow

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.Twiseoctober

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.Atradezero

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.Qbecometired

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.Otransferpyramid

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.Igalaxydisease

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.ServiceHeadlessSmsSend

android.intent.action.RESPOND_VIA_MESSAGE

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.ServiceInjections

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.ServiceGeolocationNetwork

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.ServiceCommands

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.StartWhileGlobal

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.ServiceGeolocationGPS

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.ServiceDeleteSMS

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.ServiceModuleNotification

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.ServiceToast

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.ServicePlayProtectToast

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.ServiceAccessibility

android.accessibilityservice.AccessibilityService

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.StartWhileRequest

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.API.Screenshot.ServiceScreenshot

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.API.Screenshot.ServiceSendRequestImageVNC

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.API.Sound.ServiceStreamSound

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.ServiceRAT

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.ServiceFindFiles

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.ServiceCryptFiles

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.API.Sound.ServiceRecordSound

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.API.Spam.ServiceSpamSMS

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.API.Spam.ServiceSenderSpamSMS

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.socks.ServiceForwardingTunel

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.ServiceLookScreen

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.ServicePedometer

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.LogSrv

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.Alarm.EndlessService

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.Alarm.JobSchedulerService

gxfjwgxlzk.oxerqiucwddacdmggrzffjx.gwftocyept.ServiceNL

android.service.notification.NotificationListenerService

Android Permissions

e8962cfcd9e1533c59fddbe2f8126415989ce6646e2152306701187891eeccb4

Permissions

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_SMS

android.permission.FOREGROUND_SERVICE

android.permission.REQUEST_DELETE_PACKAGES

android.permission.READ_SMS

android.permission.GET_TASKS

android.permission.ACCESS_FINE_LOCATION

android.permission.SEND_SMS

android.permission.VIBRATE

android.permission.RECORD_AUDIO

android.permission.SYSTEM_ALERT_WINDOW

android.permission.PACKAGE_USAGE_STATS

android.permission.READ_CONTACTS

android.permission.BLUETOOTH

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.RECEIVE_SMS

android.permission.READ_PHONE_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.WAKE_LOCK

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.CALL_PHONE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.INTERNET