F4B2370E793CBC37ADD4081E1804C81CEB1EE9318D696BF32C7295585C8D86D5[.]apk

Sharing

Copy URL Twitter E-mail

General

Target
F4B2370E793CBC37ADD4081E1804C81CEB1EE9318D696BF32C7295585C8D86D5.apk
Size 1.8MB
Sample220603-g8mrlaffcq
SHA256 f4b2370e793cbc37add4081e1804c81ceb1ee9318d696bf32c7295585c8d86d5
MD5 e80a143554654a797bc631ba92e96f0a
SHA1 655f83f51c484cf281a065232b1e9bbe121a727e
SHA512 5366fe997a515c4ef4cec730e040a81d5e4b3d053b72e6dd41f3ce208098a62128f03a253d70bb6a26ff1383fff58b2856d0d2d3dab8d01d7ef7e52e1c79510e
SSDEEP 24576:EX2BhQa7rQg3s+6fwteIoB3SH1DpPZ/Eeh3V1+UfCScIcYVjKHrlbB2TZzimSpxn:EXIqaTJaIo2DjDEbI9jKmTZmARG
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 10 IoCs

description	ioc
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE

File Explorer

F4B2370E793CBC37ADD4081E1804C81CEB1EE9318D696BF32C7295585C8D86D5.apk

.apk 1.8MB

F4B2370E793CBC37ADD4081E1804C81CEB1EE9318D696BF32C7295585C8D86D5.apk

SHA256 f4b2370e793cbc37add4081e1804c81ceb1ee9318d696bf32c7295585c8d86d5
MD5 e80a143554654a797bc631ba92e96f0a
SHA1 655f83f51c484cf281a065232b1e9bbe121a727e
SHA512 5366fe997a515c4ef4cec730e040a81d5e4b3d053b72e6dd41f3ce208098a62128f03a253d70bb6a26ff1383fff58b2856d0d2d3dab8d01d7ef7e52e1c79510e
SSDEEP 24576:EX2BhQa7rQg3s+6fwteIoB3SH1DpPZ/Eeh3V1+UfCScIcYVjKHrlbB2TZzimSpxn:EXIqaTJaIo2DjDEbI9jKmTZmARG
MD5 SHA1 SHA512 SSDEEP

android

xewyn.skpyszdykrgb.xnjjybdlhiedliaowwxayseikp

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.Sbundlemuch

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.Wsweetbadge

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.Jsecretlabor

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.Zstillconcert

com.google.android.gms.common.api.GoogleApiActivity

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.Zoldwrite

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.Zarresthole

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.cmnutgrtygxvjvn

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.Bangryinside

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.decfqrlxpnqmw

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.Yagentecho

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.Merosionfall

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.Cstillcluster

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.Dreliefduty

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.frwadnevmgrz

android.intent.action.SEND android.intent.action.SENDTO

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.Alaptopinfant

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.Smanualexact

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.Cbeforevessel

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.Electurevolume

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.Rclogpottery

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.Lroadribbon

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.Qtacklebasic

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.Ocuriousexhibit

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.Lhairtrigger

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.Ypondmotion

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.wbqvvsm

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.Benoughtackle

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.Arulebrave

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.Qeaglechief

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.Mostrichokay

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.Ljunkmotion

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.Mactormass

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.riyztjkqngkufdp

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.Qlonelyoccur

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.kihshnofqnqtw

android.intent.action.MAIN

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.Qcoreexhibit

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.Sfetchattitude

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.Xpeopledegree

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.Qwindowmesh

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.srgsbpg

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.Yemptypicnic

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.Jpipevibrant

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.epimxrm

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.Blockblossom

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.Tcubepatrol

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.Cthumbreopen

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.Ddocumentactor

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.Bslowrandom

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.Aclubhen

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.Nreformodor

Android Permissions

F4B2370E793CBC37ADD4081E1804C81CEB1EE9318D696BF32C7295585C8D86D5.apk

Permissions

android.permission.ACCESS_NETWORK_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.READ_CONTACTS

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.REQUEST_COMPANION_USE_DATA_IN_BACKGROUND

android.permission.RECEIVE_SMS

android.permission.REQUEST_COMPANION_USE_DATA_IN_BACKGROUND

android.permission.FOREGROUND_SERVICE

android.permission.REQUEST_DELETE_PACKAGES

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.WAKE_LOCK

android.permission.RECORD_AUDIO

android.permission.INTERNET

android.permission.GET_ACCOUNTS

android.permission.TRANSMIT_IR

android.permission.USE_FULL_SCREEN_INTENT

android.permission.READ_PHONE_STATE

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.CALL_PHONE

Sharing

General

Malware Config

Signatures

File Explorer

F4B2370E793CBC37ADD4081E1804C81CEB1EE9318D696BF32C7295585C8D86D5.apk

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.Sbundlemuch

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.Wsweetbadge

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.Jsecretlabor

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.Zstillconcert

com.google.android.gms.common.api.GoogleApiActivity

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.Zoldwrite

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.Zarresthole

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.cmnutgrtygxvjvn

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.Bangryinside

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.decfqrlxpnqmw

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.Yagentecho

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.Merosionfall

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.Cstillcluster

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.Dreliefduty

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.frwadnevmgrz

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.Alaptopinfant

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.Smanualexact

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.Cbeforevessel

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.Electurevolume

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.Rclogpottery

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.Lroadribbon

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.Qtacklebasic

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.Ocuriousexhibit

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.Lhairtrigger

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.Ypondmotion

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.wbqvvsm

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.Benoughtackle

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.Arulebrave

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.Qeaglechief

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.Mostrichokay

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.Ljunkmotion

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.Mactormass

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.riyztjkqngkufdp

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.Qlonelyoccur

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.kihshnofqnqtw

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.Qcoreexhibit

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.Sfetchattitude

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.Xpeopledegree

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.Qwindowmesh

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.srgsbpg

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.Yemptypicnic

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.Jpipevibrant

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.epimxrm

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.Blockblossom

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.Tcubepatrol

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.Cthumbreopen

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.Ddocumentactor

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.Bslowrandom

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.Aclubhen

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.Nreformodor

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.qpikksnttlhk

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.yexfhbiaytnjkgg

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.rnbsukdrpjq

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.uoqqy

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.peohmpmayaaxi

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.eqzijd

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.abzaptbfxc

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.uonimrfmj

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.slhd

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.ftgpdursxfhvb

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.gudlojrokajiapbg

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.ekfqgsakf

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.zynmpvpc

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.eeevvr

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.iylnr

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.iahsaklaxcicx

nwt.cfskjokwcyqhmtygzbr.zfpdntkynbodai.kbst

Android Permissions

F4B2370E793CBC37ADD4081E1804C81CEB1EE9318D696BF32C7295585C8D86D5.apk