32b556f98d0d2bc0f14aab12585edb263296dabca5d5a1f5752031b0412338df

Sharing

Copy URL Twitter E-mail

General

Target
32b556f98d0d2bc0f14aab12585edb263296dabca5d5a1f5752031b0412338df
Size 3.2MB
Sample220521-nld99shaam
SHA256 32b556f98d0d2bc0f14aab12585edb263296dabca5d5a1f5752031b0412338df
MD5 a5b27f03e3a6caac2a2b9b95644a12c3
SHA1 2a71db680bbc3201d9b6fe010d46a51e4486e80a
SHA512 d87bd13489fb4961c8ba41a053665f5abfd5434d149a5b60bbcf101f4469b14e13d7351ebc36fe0545d549a633e223124c47c3f878b02c97c29900bbb6e984e3
SSDEEP 49152:8u+iViWMJOyxpvA5B0bjay1JaKSgd5AEX+kdJzTasOHho/jYRkrInZvV:8u9VkJbxp7bfXb2Eda7HicRPN
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 10 IoCs

description	ioc
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read SMS messages.	android.permission.READ_SMS

File Explorer

32b556f98d0d2bc0f14aab12585edb263296dabca5d5a1f5752031b0412338df

.apk 3.2MB

32b556f98d0d2bc0f14aab12585edb263296dabca5d5a1f5752031b0412338df

SHA256 32b556f98d0d2bc0f14aab12585edb263296dabca5d5a1f5752031b0412338df
MD5 a5b27f03e3a6caac2a2b9b95644a12c3
SHA1 2a71db680bbc3201d9b6fe010d46a51e4486e80a
SHA512 d87bd13489fb4961c8ba41a053665f5abfd5434d149a5b60bbcf101f4469b14e13d7351ebc36fe0545d549a633e223124c47c3f878b02c97c29900bbb6e984e3
SSDEEP 49152:8u+iViWMJOyxpvA5B0bjay1JaKSgd5AEX+kdJzTasOHho/jYRkrInZvV:8u9VkJbxp7bfXb2Eda7HicRPN
MD5 SHA1 SHA512 SSDEEP

android

eqzthjrbymohme.tximzugaw.rpsljgcyppsbasaszepboedp

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.Ypurchasenarrow

com.google.android.gms.common.api.GoogleApiActivity

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.Finjectbattle

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.Activity.MainActivity

android.intent.action.MAIN

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.Foverapprove

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.Fcraterspray

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.Tarmyfamily

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.SendSms

android.intent.action.SEND android.intent.action.SENDTO

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.Froutebehave

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.Nzooafraid

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.Stwinlove

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.Cdecidetop

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.Otunabudget

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.Activity.ActivityPermissions

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.Ienrollmountain

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.API.Screenshot.ActivityScreenshot

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.Edangertunnel

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.Fauctiondune

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.Activity.ActivityInjection

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.Ieyepen

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.Activity.ActivityGetNumber

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.Hadaptcabbage

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.Activity.ActivityAlert1

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.Mfaultcoral

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.Dabstractmust

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.Activity.ActivityGetSMS

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.Roxygenpermit

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.Xparklawn

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.Activity.ActivityAlert2

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.Bmixcover

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.Abrokenball

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.Activity.ActivityStartUSSD

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.Ufoxurban

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.Activity.ActivityPushInjection

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.Zwolfright

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.Fvisahundred

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.Activity.ActivityOpenURL

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.Zdumbmountain

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.Ppuppysand

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.Fbarelyjar

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.Icontrolstate

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.Bknockcousin

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.Qeitherswallow

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.Hdadprofit

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.Ytoddlerdune

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.Igeneralretire

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.Utenelse

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.Gpostlife

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.Hamateurdry

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.Rordinaryborder

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.Mdrysister

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.Leyebrowchoice

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.Hincludesustain

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.Pexistplace

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.Ftortoisethere

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.Msisterelectric

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.Qaprilnote

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.Gmelodydice

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.Wweaselstay

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.Pcapitalwool

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.Ncouchpig

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.Activity.ActivityScreenLocker

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.Emaskhunt

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.Wspaceaway

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.Rwearrecycle

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.Activity.ActivityAccessibility

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.Otypehave

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.Istartdice

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.Activity.ActivityPlayProtect

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.Wbabyfinal

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.Nmotherdoll

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.Bdonornoodle

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.Qportionglobe

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.Ielectricevoke

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.Oladyoccur

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.Activity.LookScreen

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.Gbuffalotrend

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.Tsetupglance

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.Mdramaraccoon

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.Nkneeunder

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.Gchiefcigar

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.Uluckyfocus

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.Jhybridtongue

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.Stomorrowbag

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.Zswimfeed

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.ServiceHeadlessSmsSend

android.intent.action.RESPOND_VIA_MESSAGE

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.ServiceInjections

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.ServiceGeolocationNetwork

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.ServiceCommands

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.StartWhileGlobal

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.ServiceGeolocationGPS

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.ServiceDeleteSMS

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.ServiceModuleNotification

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.ServiceToast

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.ServicePlayProtectToast

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.ServiceAccessibility

android.accessibilityservice.AccessibilityService

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.StartWhileRequest

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.API.Screenshot.ServiceScreenshot

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.API.Screenshot.ServiceSendRequestImageVNC

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.API.Sound.ServiceStreamSound

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.ServiceRAT

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.ServiceFindFiles

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.ServiceCryptFiles

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.API.Sound.ServiceRecordSound

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.API.Spam.ServiceSpamSMS

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.API.Spam.ServiceSenderSpamSMS

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.socks.ServiceForwardingTunel

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.ServiceLookScreen

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.ServicePedometer

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.LogSrv

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.Alarm.EndlessService

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.Alarm.JobSchedulerService

kpduns.ghlib.kokpnfjslubbitazwwzurmouxed.ServiceNL

android.service.notification.NotificationListenerService

Android Permissions

32b556f98d0d2bc0f14aab12585edb263296dabca5d5a1f5752031b0412338df

Permissions

android.permission.ACCESS_FINE_LOCATION

android.permission.CALL_PHONE

android.permission.CHANGE_WIFI_MULTICAST_STATE

android.permission.REQUEST_DELETE_PACKAGES

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.RECORD_AUDIO

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.SEND_SMS

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.READ_CONTACTS

android.permission.CHANGE_WIFI_MULTICAST_STATE

android.permission.GET_TASKS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.FOREGROUND_SERVICE

android.permission.GET_PACKAGE_SIZE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.INTERNET

android.permission.WAKE_LOCK

android.permission.RECEIVE_SMS

android.permission.PACKAGE_USAGE_STATS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_PHONE_STATE

android.permission.WRITE_SMS

android.permission.READ_SMS