36FC4B0C5469C8AF65F9EFDC0D99A1B686A6DF9A3E49336177EE73300F62BA5B[.]apk

Sharing

Copy URL Twitter E-mail

General

Target
36FC4B0C5469C8AF65F9EFDC0D99A1B686A6DF9A3E49336177EE73300F62BA5B.apk
Size 1.9MB
Sample220603-g5ea2sfdhl
SHA256 36fc4b0c5469c8af65f9efdc0d99a1b686a6df9a3e49336177ee73300f62ba5b
MD5 c497c6c5efc7e6e104254eacc8b09d44
SHA1 79052f5fbf946a3fc7db0f11bddf95f0591f9492
SHA512 a5127bf8095f2c602220c541ed94ddf508b34b3160de43898e3c52be08eab88ca59846a3567522d47f1d9e92c5d391ccb5081c1b6baa13927915e9ed5b0bb77b
SSDEEP 49152:4mfQn27hGolRYU//4mfQ8bRZsklkIrpXrBqZ5u+Zvz:9fQ27FntfQ8lplkkrBqZhJz
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 10 IoCs

description	ioc
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE

File Explorer

36FC4B0C5469C8AF65F9EFDC0D99A1B686A6DF9A3E49336177EE73300F62BA5B.apk

.apk 1.9MB

36FC4B0C5469C8AF65F9EFDC0D99A1B686A6DF9A3E49336177EE73300F62BA5B.apk

SHA256 36fc4b0c5469c8af65f9efdc0d99a1b686a6df9a3e49336177ee73300f62ba5b
MD5 c497c6c5efc7e6e104254eacc8b09d44
SHA1 79052f5fbf946a3fc7db0f11bddf95f0591f9492
SHA512 a5127bf8095f2c602220c541ed94ddf508b34b3160de43898e3c52be08eab88ca59846a3567522d47f1d9e92c5d391ccb5081c1b6baa13927915e9ed5b0bb77b
SSDEEP 49152:4mfQn27hGolRYU//4mfQ8bRZsklkIrpXrBqZ5u+Zvz:9fQ27FntfQ8lplkkrBqZhJz
MD5 SHA1 SHA512 SSDEEP

android

tjktyditp.ujamibpyhjawrxqczqnlg.bwnibrbmacmgtl

idqhglglkttisr.iqmrkejgwn.qyjafunnoly.Omonitorinnocent

idqhglglkttisr.iqmrkejgwn.qyjafunnoly.Jdealexplain

idqhglglkttisr.iqmrkejgwn.qyjafunnoly.Ebodypretty

idqhglglkttisr.iqmrkejgwn.qyjafunnoly.Pmilklimb

com.google.android.gms.common.api.GoogleApiActivity

idqhglglkttisr.iqmrkejgwn.qyjafunnoly.Rexcusemiddle

idqhglglkttisr.iqmrkejgwn.qyjafunnoly.Apoetmachine

idqhglglkttisr.iqmrkejgwn.qyjafunnoly.Zuniverseobtain

idqhglglkttisr.iqmrkejgwn.qyjafunnoly.vrweqjepjgxrt

idqhglglkttisr.iqmrkejgwn.qyjafunnoly.Wwarmearly

idqhglglkttisr.iqmrkejgwn.qyjafunnoly.obybt

idqhglglkttisr.iqmrkejgwn.qyjafunnoly.Ccasinoerase

idqhglglkttisr.iqmrkejgwn.qyjafunnoly.Ucompanypuppy

idqhglglkttisr.iqmrkejgwn.qyjafunnoly.Jmedaldawn

idqhglglkttisr.iqmrkejgwn.qyjafunnoly.Jseatharsh

idqhglglkttisr.iqmrkejgwn.qyjafunnoly.Lcomfortmean

idqhglglkttisr.iqmrkejgwn.qyjafunnoly.khtbz

android.intent.action.SEND android.intent.action.SENDTO

idqhglglkttisr.iqmrkejgwn.qyjafunnoly.Sbrassmarket

idqhglglkttisr.iqmrkejgwn.qyjafunnoly.Ujumpdesign

idqhglglkttisr.iqmrkejgwn.qyjafunnoly.Wbusinesshold

idqhglglkttisr.iqmrkejgwn.qyjafunnoly.Osolarfaith

idqhglglkttisr.iqmrkejgwn.qyjafunnoly.Wbarrelvivid

idqhglglkttisr.iqmrkejgwn.qyjafunnoly.Cjewelfield

idqhglglkttisr.iqmrkejgwn.qyjafunnoly.Kenemypill

idqhglglkttisr.iqmrkejgwn.qyjafunnoly.dohvpserfg

idqhglglkttisr.iqmrkejgwn.qyjafunnoly.Wwelcomenetwork

idqhglglkttisr.iqmrkejgwn.qyjafunnoly.Signoreedge

idqhglglkttisr.iqmrkejgwn.qyjafunnoly.Ospeedsilent

idqhglglkttisr.iqmrkejgwn.qyjafunnoly.ghsmuf

idqhglglkttisr.iqmrkejgwn.qyjafunnoly.Acablelater

idqhglglkttisr.iqmrkejgwn.qyjafunnoly.yxvrdqmwd

android.intent.action.MAIN

idqhglglkttisr.iqmrkejgwn.qyjafunnoly.Rmixrapid

idqhglglkttisr.iqmrkejgwn.qyjafunnoly.Ybrassemerge

idqhglglkttisr.iqmrkejgwn.qyjafunnoly.tjzianrumkcoqzaq

idqhglglkttisr.iqmrkejgwn.qyjafunnoly.Fexplainfoster

idqhglglkttisr.iqmrkejgwn.qyjafunnoly.pbfkaplpsrw

idqhglglkttisr.iqmrkejgwn.qyjafunnoly.Wcorrectcolumn

idqhglglkttisr.iqmrkejgwn.qyjafunnoly.Jdiaryspoil

idqhglglkttisr.iqmrkejgwn.qyjafunnoly.Zpeoplemonkey

idqhglglkttisr.iqmrkejgwn.qyjafunnoly.Nromancedecember

idqhglglkttisr.iqmrkejgwn.qyjafunnoly.Nkidneyramp

idqhglglkttisr.iqmrkejgwn.qyjafunnoly.Gboosttoy

idqhglglkttisr.iqmrkejgwn.qyjafunnoly.Nmeasureonly

Android Permissions

36FC4B0C5469C8AF65F9EFDC0D99A1B686A6DF9A3E49336177EE73300F62BA5B.apk

Permissions

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.SEND_SMS

android.permission.BLUETOOTH

android.permission.READ_SMS

android.permission.DISABLE_KEYGUARD

android.permission.REQUEST_DELETE_PACKAGES

android.permission.BROADCAST_STICKY

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.RECEIVE_SMS

android.permission.ACCESS_NETWORK_STATE

android.permission.CALL_PHONE

android.permission.READ_EXTERNAL_STORAGE

android.permission.WAKE_LOCK

android.permission.GET_ACCOUNTS

android.permission.FOREGROUND_SERVICE

android.permission.INTERNET

android.permission.RECORD_AUDIO

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.READ_CONTACTS

android.permission.USE_FULL_SCREEN_INTENT

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

Sharing

General

Malware Config

Signatures

File Explorer

36FC4B0C5469C8AF65F9EFDC0D99A1B686A6DF9A3E49336177EE73300F62BA5B.apk

idqhglglkttisr.iqmrkejgwn.qyjafunnoly.Omonitorinnocent

idqhglglkttisr.iqmrkejgwn.qyjafunnoly.Jdealexplain

idqhglglkttisr.iqmrkejgwn.qyjafunnoly.Ebodypretty

idqhglglkttisr.iqmrkejgwn.qyjafunnoly.Pmilklimb

com.google.android.gms.common.api.GoogleApiActivity

idqhglglkttisr.iqmrkejgwn.qyjafunnoly.Rexcusemiddle

idqhglglkttisr.iqmrkejgwn.qyjafunnoly.Apoetmachine

idqhglglkttisr.iqmrkejgwn.qyjafunnoly.Zuniverseobtain

idqhglglkttisr.iqmrkejgwn.qyjafunnoly.vrweqjepjgxrt

idqhglglkttisr.iqmrkejgwn.qyjafunnoly.Wwarmearly

idqhglglkttisr.iqmrkejgwn.qyjafunnoly.obybt

idqhglglkttisr.iqmrkejgwn.qyjafunnoly.Ccasinoerase

idqhglglkttisr.iqmrkejgwn.qyjafunnoly.Ucompanypuppy

idqhglglkttisr.iqmrkejgwn.qyjafunnoly.Jmedaldawn

idqhglglkttisr.iqmrkejgwn.qyjafunnoly.Jseatharsh

idqhglglkttisr.iqmrkejgwn.qyjafunnoly.Lcomfortmean

idqhglglkttisr.iqmrkejgwn.qyjafunnoly.khtbz

idqhglglkttisr.iqmrkejgwn.qyjafunnoly.Sbrassmarket

idqhglglkttisr.iqmrkejgwn.qyjafunnoly.Ujumpdesign

idqhglglkttisr.iqmrkejgwn.qyjafunnoly.Wbusinesshold

idqhglglkttisr.iqmrkejgwn.qyjafunnoly.Osolarfaith

idqhglglkttisr.iqmrkejgwn.qyjafunnoly.Wbarrelvivid

idqhglglkttisr.iqmrkejgwn.qyjafunnoly.Cjewelfield

idqhglglkttisr.iqmrkejgwn.qyjafunnoly.Kenemypill

idqhglglkttisr.iqmrkejgwn.qyjafunnoly.dohvpserfg

idqhglglkttisr.iqmrkejgwn.qyjafunnoly.Wwelcomenetwork

idqhglglkttisr.iqmrkejgwn.qyjafunnoly.Signoreedge

idqhglglkttisr.iqmrkejgwn.qyjafunnoly.Ospeedsilent

idqhglglkttisr.iqmrkejgwn.qyjafunnoly.ghsmuf

idqhglglkttisr.iqmrkejgwn.qyjafunnoly.Acablelater

idqhglglkttisr.iqmrkejgwn.qyjafunnoly.yxvrdqmwd

idqhglglkttisr.iqmrkejgwn.qyjafunnoly.Rmixrapid

idqhglglkttisr.iqmrkejgwn.qyjafunnoly.Ybrassemerge

idqhglglkttisr.iqmrkejgwn.qyjafunnoly.tjzianrumkcoqzaq

idqhglglkttisr.iqmrkejgwn.qyjafunnoly.Fexplainfoster

idqhglglkttisr.iqmrkejgwn.qyjafunnoly.pbfkaplpsrw

idqhglglkttisr.iqmrkejgwn.qyjafunnoly.Wcorrectcolumn

idqhglglkttisr.iqmrkejgwn.qyjafunnoly.Jdiaryspoil

idqhglglkttisr.iqmrkejgwn.qyjafunnoly.Zpeoplemonkey

idqhglglkttisr.iqmrkejgwn.qyjafunnoly.Nromancedecember

idqhglglkttisr.iqmrkejgwn.qyjafunnoly.Nkidneyramp

idqhglglkttisr.iqmrkejgwn.qyjafunnoly.Gboosttoy

idqhglglkttisr.iqmrkejgwn.qyjafunnoly.Nmeasureonly

idqhglglkttisr.iqmrkejgwn.qyjafunnoly.ivhivmy

idqhglglkttisr.iqmrkejgwn.qyjafunnoly.ewxpdcka

idqhglglkttisr.iqmrkejgwn.qyjafunnoly.brvysvhzuhgunxox

idqhglglkttisr.iqmrkejgwn.qyjafunnoly.ympopctduoihet

idqhglglkttisr.iqmrkejgwn.qyjafunnoly.hthqkiyxy

idqhglglkttisr.iqmrkejgwn.qyjafunnoly.xiqkikdcnuqfzkwz

idqhglglkttisr.iqmrkejgwn.qyjafunnoly.qqiazpirbfhr

idqhglglkttisr.iqmrkejgwn.qyjafunnoly.dhnkvrunzgqme

idqhglglkttisr.iqmrkejgwn.qyjafunnoly.smlnpcsfxnlowk

idqhglglkttisr.iqmrkejgwn.qyjafunnoly.evlxb

idqhglglkttisr.iqmrkejgwn.qyjafunnoly.afqbscq

idqhglglkttisr.iqmrkejgwn.qyjafunnoly.bvichtto

idqhglglkttisr.iqmrkejgwn.qyjafunnoly.unwb

idqhglglkttisr.iqmrkejgwn.qyjafunnoly.wldavdxx

idqhglglkttisr.iqmrkejgwn.qyjafunnoly.vzghwzxim

idqhglglkttisr.iqmrkejgwn.qyjafunnoly.ygwhxuyjm

idqhglglkttisr.iqmrkejgwn.qyjafunnoly.uzgunr

Android Permissions

36FC4B0C5469C8AF65F9EFDC0D99A1B686A6DF9A3E49336177EE73300F62BA5B.apk