19F0F083EE2665DBD3875409CA1CF655C1E9B8B848F99414C792C51DC0EB9706[.]apk

Sharing

Copy URL Twitter E-mail

General

Target
19F0F083EE2665DBD3875409CA1CF655C1E9B8B848F99414C792C51DC0EB9706.apk
Size 1.9MB
Sample220603-g8ar2abfb2
SHA256 19f0f083ee2665dbd3875409ca1cf655c1e9b8b848f99414c792c51dc0eb9706
MD5 7b5b4d38e103c1ad103717be1383f639
SHA1 777800a91615f79b0fffd6039f4d7a58ada94bd8
SHA512 fdfc3192e9cf68170b35df78bd2f0308579458de7f149472b1762d07ce682ed88a832d196800585a9911ac8ec3a600cd06bed6789cd30e7304c864411d10ba73
SSDEEP 49152:jfQhlfQbwI9PHrXW56Hy2Vfpvgj2LNFzRcv0tmc:jfQjfQbHRLGyycRvzCssc
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 10 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE

File Explorer

19F0F083EE2665DBD3875409CA1CF655C1E9B8B848F99414C792C51DC0EB9706.apk

.apk 1.9MB

19F0F083EE2665DBD3875409CA1CF655C1E9B8B848F99414C792C51DC0EB9706.apk

SHA256 19f0f083ee2665dbd3875409ca1cf655c1e9b8b848f99414c792c51dc0eb9706
MD5 7b5b4d38e103c1ad103717be1383f639
SHA1 777800a91615f79b0fffd6039f4d7a58ada94bd8
SHA512 fdfc3192e9cf68170b35df78bd2f0308579458de7f149472b1762d07ce682ed88a832d196800585a9911ac8ec3a600cd06bed6789cd30e7304c864411d10ba73
SSDEEP 49152:jfQhlfQbwI9PHrXW56Hy2Vfpvgj2LNFzRcv0tmc:jfQjfQbHRLGyycRvzCssc
MD5 SHA1 SHA512 SSDEEP

android

yqfwioqdjljxalaapguc.qljdkiclfjilgp.gexgcplameudhktfykrzc

yefpbldfw.qafyr.zfph.Fchatgaze

yefpbldfw.qafyr.zfph.Sspatialjazz

yefpbldfw.qafyr.zfph.Yinvitewill

yefpbldfw.qafyr.zfph.Arivalable

yefpbldfw.qafyr.zfph.Gpeacelecture

com.google.android.gms.common.api.GoogleApiActivity

yefpbldfw.qafyr.zfph.Ceternallift

yefpbldfw.qafyr.zfph.Rgooselemon

yefpbldfw.qafyr.zfph.Xmathtwelve

yefpbldfw.qafyr.zfph.Xratherbuffalo

yefpbldfw.qafyr.zfph.zeduczybbdwym

yefpbldfw.qafyr.zfph.Lmiracleversion

yefpbldfw.qafyr.zfph.qgeuuohb

yefpbldfw.qafyr.zfph.Cblastnice

yefpbldfw.qafyr.zfph.Fgesturewidth

yefpbldfw.qafyr.zfph.Upermitstay

yefpbldfw.qafyr.zfph.Lguitarcasual

yefpbldfw.qafyr.zfph.Oroyalsalon

yefpbldfw.qafyr.zfph.Ffloorchaos

yefpbldfw.qafyr.zfph.Gsaladpride

yefpbldfw.qafyr.zfph.ghvvromgkuyxtol

android.intent.action.SEND android.intent.action.SENDTO

yefpbldfw.qafyr.zfph.Rflightriot

yefpbldfw.qafyr.zfph.Wvisacode

yefpbldfw.qafyr.zfph.Wsisteradvice

yefpbldfw.qafyr.zfph.Ochoicecurve

yefpbldfw.qafyr.zfph.Joffseed

yefpbldfw.qafyr.zfph.Zevilspring

yefpbldfw.qafyr.zfph.Aadultgrunt

yefpbldfw.qafyr.zfph.Kexhibitmobile

yefpbldfw.qafyr.zfph.Cslotmovie

yefpbldfw.qafyr.zfph.Dpreferupgrade

yefpbldfw.qafyr.zfph.bdjxlet

yefpbldfw.qafyr.zfph.Bmilliondrip

yefpbldfw.qafyr.zfph.Zshellamount

yefpbldfw.qafyr.zfph.Atouristspider

yefpbldfw.qafyr.zfph.hrotxwwmezqx

yefpbldfw.qafyr.zfph.Xcitizenthat

yefpbldfw.qafyr.zfph.ykrf

android.intent.action.MAIN

yefpbldfw.qafyr.zfph.Ngooseglance

yefpbldfw.qafyr.zfph.Rhenbirth

yefpbldfw.qafyr.zfph.Mprocessfat

yefpbldfw.qafyr.zfph.Copenrain

yefpbldfw.qafyr.zfph.xgfxstcjybkkasy

yefpbldfw.qafyr.zfph.Ftrayonly

yefpbldfw.qafyr.zfph.Rpredictslow

yefpbldfw.qafyr.zfph.kxjgo

yefpbldfw.qafyr.zfph.Wlikepowder

yefpbldfw.qafyr.zfph.Qvehicleagain

yefpbldfw.qafyr.zfph.Xprizeillness

yefpbldfw.qafyr.zfph.Ucliffafford

yefpbldfw.qafyr.zfph.Fresourceexpect

yefpbldfw.qafyr.zfph.Nadaptswing

yefpbldfw.qafyr.zfph.Upolecatch

Android Permissions

19F0F083EE2665DBD3875409CA1CF655C1E9B8B848F99414C792C51DC0EB9706.apk

Permissions

android.permission.READ_PHONE_STATE

android.permission.RECORD_AUDIO

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.READ_CONTACTS

android.permission.FOREGROUND_SERVICE

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.RECEIVE_SMS

android.permission.SET_WALLPAPER

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.REQUEST_DELETE_PACKAGES

android.permission.USE_FULL_SCREEN_INTENT

android.permission.SEND_SMS

android.permission.REQUEST_DELETE_PACKAGES

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.GET_ACCOUNTS

android.permission.READ_SMS

android.permission.SET_ALARM

android.permission.READ_EXTERNAL_STORAGE

android.permission.CALL_PHONE

android.permission.WAKE_LOCK

Sharing

General

Malware Config

Signatures

File Explorer

19F0F083EE2665DBD3875409CA1CF655C1E9B8B848F99414C792C51DC0EB9706.apk

yefpbldfw.qafyr.zfph.Fchatgaze

yefpbldfw.qafyr.zfph.Sspatialjazz

yefpbldfw.qafyr.zfph.Yinvitewill

yefpbldfw.qafyr.zfph.Arivalable

yefpbldfw.qafyr.zfph.Gpeacelecture

com.google.android.gms.common.api.GoogleApiActivity

yefpbldfw.qafyr.zfph.Ceternallift

yefpbldfw.qafyr.zfph.Rgooselemon

yefpbldfw.qafyr.zfph.Xmathtwelve

yefpbldfw.qafyr.zfph.Xratherbuffalo

yefpbldfw.qafyr.zfph.zeduczybbdwym

yefpbldfw.qafyr.zfph.Lmiracleversion

yefpbldfw.qafyr.zfph.qgeuuohb

yefpbldfw.qafyr.zfph.Cblastnice

yefpbldfw.qafyr.zfph.Fgesturewidth

yefpbldfw.qafyr.zfph.Upermitstay

yefpbldfw.qafyr.zfph.Lguitarcasual

yefpbldfw.qafyr.zfph.Oroyalsalon

yefpbldfw.qafyr.zfph.Ffloorchaos

yefpbldfw.qafyr.zfph.Gsaladpride

yefpbldfw.qafyr.zfph.ghvvromgkuyxtol

yefpbldfw.qafyr.zfph.Rflightriot

yefpbldfw.qafyr.zfph.Wvisacode

yefpbldfw.qafyr.zfph.Wsisteradvice

yefpbldfw.qafyr.zfph.Ochoicecurve

yefpbldfw.qafyr.zfph.Joffseed

yefpbldfw.qafyr.zfph.Zevilspring

yefpbldfw.qafyr.zfph.Aadultgrunt

yefpbldfw.qafyr.zfph.Kexhibitmobile

yefpbldfw.qafyr.zfph.Cslotmovie

yefpbldfw.qafyr.zfph.Dpreferupgrade

yefpbldfw.qafyr.zfph.bdjxlet

yefpbldfw.qafyr.zfph.Bmilliondrip

yefpbldfw.qafyr.zfph.Zshellamount

yefpbldfw.qafyr.zfph.Atouristspider

yefpbldfw.qafyr.zfph.hrotxwwmezqx

yefpbldfw.qafyr.zfph.Xcitizenthat

yefpbldfw.qafyr.zfph.ykrf

yefpbldfw.qafyr.zfph.Ngooseglance

yefpbldfw.qafyr.zfph.Rhenbirth

yefpbldfw.qafyr.zfph.Mprocessfat

yefpbldfw.qafyr.zfph.Copenrain

yefpbldfw.qafyr.zfph.xgfxstcjybkkasy

yefpbldfw.qafyr.zfph.Ftrayonly

yefpbldfw.qafyr.zfph.Rpredictslow

yefpbldfw.qafyr.zfph.kxjgo

yefpbldfw.qafyr.zfph.Wlikepowder

yefpbldfw.qafyr.zfph.Qvehicleagain

yefpbldfw.qafyr.zfph.Xprizeillness

yefpbldfw.qafyr.zfph.Ucliffafford

yefpbldfw.qafyr.zfph.Fresourceexpect

yefpbldfw.qafyr.zfph.Nadaptswing

yefpbldfw.qafyr.zfph.Upolecatch

yefpbldfw.qafyr.zfph.ynuioegnnulaf

yefpbldfw.qafyr.zfph.nskaivvpx

yefpbldfw.qafyr.zfph.xwrkgppq

yefpbldfw.qafyr.zfph.hgb

yefpbldfw.qafyr.zfph.zxhmuajxsfu

yefpbldfw.qafyr.zfph.jqeogygx

yefpbldfw.qafyr.zfph.tphpcbvmwvtvlqm

yefpbldfw.qafyr.zfph.cntuwxbxnqakpu

yefpbldfw.qafyr.zfph.aeshsavvyhn

yefpbldfw.qafyr.zfph.amvdgioa

yefpbldfw.qafyr.zfph.czkucxvuvk

yefpbldfw.qafyr.zfph.ajdrdao

yefpbldfw.qafyr.zfph.fitomslhnavxuat

yefpbldfw.qafyr.zfph.eqbjaxvil

yefpbldfw.qafyr.zfph.oicfzg

yefpbldfw.qafyr.zfph.zwi

yefpbldfw.qafyr.zfph.jmgtadmwzgvlz

Android Permissions

19F0F083EE2665DBD3875409CA1CF655C1E9B8B848F99414C792C51DC0EB9706.apk