983CD93CEEC7451EED08DEA0C83B05E9665E8AE0C433B564EFCC55657EBC2598[.]apk

Sharing

Copy URL Twitter E-mail

General

Target
983CD93CEEC7451EED08DEA0C83B05E9665E8AE0C433B564EFCC55657EBC2598.apk
Size 2.2MB
Sample220602-nh66waffc7
SHA256 983cd93ceec7451eed08dea0c83b05e9665e8ae0c433b564efcc55657ebc2598
MD5 95cfd5efd2526e4166849004b357effe
SHA1 e57518888c1e20a71cfd9e3fb41f04dc6fd066b7
SHA512 d5059df8b04d5b91c2afcddf92f531db82ee7bd65d73273ae6625252605589acd29ffc2b443fe9438e2b9d3ddeb1d63a3c27187f66383e1faf115ad90d0ed032
SSDEEP 49152:iHujnsSVC4tvraZm6dyNJipahpdUvs8W4Vbr+34opM:Q8Np2ZSkarSVWz0
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 10 IoCs

description	ioc
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE

File Explorer

983CD93CEEC7451EED08DEA0C83B05E9665E8AE0C433B564EFCC55657EBC2598.apk

.apk 2.2MB

983CD93CEEC7451EED08DEA0C83B05E9665E8AE0C433B564EFCC55657EBC2598.apk

SHA256 983cd93ceec7451eed08dea0c83b05e9665e8ae0c433b564efcc55657ebc2598
MD5 95cfd5efd2526e4166849004b357effe
SHA1 e57518888c1e20a71cfd9e3fb41f04dc6fd066b7
SHA512 d5059df8b04d5b91c2afcddf92f531db82ee7bd65d73273ae6625252605589acd29ffc2b443fe9438e2b9d3ddeb1d63a3c27187f66383e1faf115ad90d0ed032
SSDEEP 49152:iHujnsSVC4tvraZm6dyNJipahpdUvs8W4Vbr+34opM:Q8Np2ZSkarSVWz0
MD5 SHA1 SHA512 SSDEEP

android

ctsdijqewczjhww.gnsxtstbwrjbrxh.mkypmybqnlsidgxzunmwbekbm

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.Ygroupnorth

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.Xvolumecrazy

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.Hfebruarysiege

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.Rcranewool

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.Ocoffeefrown

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.Mtriminto

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.Uauditcopper

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.Tdiseaseparade

com.google.android.gms.common.api.GoogleApiActivity

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.Jenableorphan

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.Mbookmention

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.hdoyjyhygypgpkfw

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.Ycelerytank

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.bshhpuk

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.Hawakereveal

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.Qwavespatial

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.Qshedshoe

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.Uwildsnow

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.Bboringdemise

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.vfpogdfnnzj

android.intent.action.SEND android.intent.action.SENDTO

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.Fanotherbacon

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.Kpotterymind

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.Dbiologydisplay

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.Doccurexist

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.Wskatefiscal

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.Wtailunfair

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.Jenterradar

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.vvlnukqhfocuyd

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.Ggarmentharvest

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.Gchapterproblem

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.Dfalsewinner

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.rjwcskstdzq

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.Lplungecar

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.yzmcyxtdyycwv

android.intent.action.MAIN

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.Gneglectmelody

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.Ublastathlete

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.Odrillwitness

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.hwtnzzcxddkhzhnr

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.Yleadertide

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.Upelicansalt

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.tzc

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.Icaruse

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.Umathshrimp

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.Nreceivesurface

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.Zsiegeprosper

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.Jcoastapart

Android Permissions

983CD93CEEC7451EED08DEA0C83B05E9665E8AE0C433B564EFCC55657EBC2598.apk

Permissions

android.permission.FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.FOREGROUND_SERVICE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.GET_ACCOUNTS

android.permission.SEND_SMS

android.permission.REQUEST_DELETE_PACKAGES

android.permission.READ_EXTERNAL_STORAGE

android.permission.USE_FULL_SCREEN_INTENT

android.permission.INTERNET

android.permission.READ_SMS

android.permission.CHANGE_NETWORK_STATE

android.permission.CALL_PHONE

android.permission.WAKE_LOCK

android.permission.RECORD_AUDIO

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.RECEIVE_SMS

android.permission.GET_PACKAGE_SIZE

android.permission.READ_CONTACTS

android.permission.WRITE_EXTERNAL_STORAGE

Sharing

General

Malware Config

Signatures

File Explorer

983CD93CEEC7451EED08DEA0C83B05E9665E8AE0C433B564EFCC55657EBC2598.apk

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.Ygroupnorth

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.Xvolumecrazy

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.Hfebruarysiege

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.Rcranewool

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.Ocoffeefrown

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.Mtriminto

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.Uauditcopper

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.Tdiseaseparade

com.google.android.gms.common.api.GoogleApiActivity

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.Jenableorphan

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.Mbookmention

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.hdoyjyhygypgpkfw

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.Ycelerytank

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.bshhpuk

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.Hawakereveal

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.Qwavespatial

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.Qshedshoe

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.Uwildsnow

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.Bboringdemise

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.vfpogdfnnzj

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.Fanotherbacon

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.Kpotterymind

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.Dbiologydisplay

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.Doccurexist

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.Wskatefiscal

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.Wtailunfair

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.Jenterradar

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.vvlnukqhfocuyd

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.Ggarmentharvest

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.Gchapterproblem

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.Dfalsewinner

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.rjwcskstdzq

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.Lplungecar

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.yzmcyxtdyycwv

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.Gneglectmelody

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.Ublastathlete

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.Odrillwitness

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.hwtnzzcxddkhzhnr

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.Yleadertide

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.Upelicansalt

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.tzc

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.Icaruse

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.Umathshrimp

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.Nreceivesurface

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.Zsiegeprosper

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.Jcoastapart

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.hsltmylcdztgyjds

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.xitfwxiwlmtnjsef

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.uhlndp

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.qqirrpvhzjbugf

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.wvqxcpnpbyue

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.nhacjnyehr

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.uzspqdmuv

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.liydqgizef

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.fysardyhyezm

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.zxyaejhtcmgapdy

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.ukthirskizlo

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.yvyazbxlvb

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.eac

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.onibfuritj

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.zmyumhxcxux

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.tniosiruxquvh

hqawwnhetehdmozsbucuzp.bxuuqjmau.upzim.jlgfj

Android Permissions

983CD93CEEC7451EED08DEA0C83B05E9665E8AE0C433B564EFCC55657EBC2598.apk