1726CDD1BC9511216D1162B49000DD830CA863138F26FD27AA68C13E16AD7E73[.]apk

Sharing

Copy URL Twitter E-mail

General

Target
1726CDD1BC9511216D1162B49000DD830CA863138F26FD27AA68C13E16AD7E73.apk
Size 1.4MB
Sample220603-ga5vhsdhal
SHA256 1726cdd1bc9511216d1162b49000dd830ca863138f26fd27aa68c13e16ad7e73
MD5 01512eeb021bad8b527f4becc26b6139
SHA1 83b45cb212fec30505e34a6485ca0154113dfcaf
SHA512 638f73751bfe582663dacfe933098b97b34e74545cf812ae6b0d468d2965995bffb1b09f1c65e0636a5e1bec090be373d82c3590045aab229ea02eab4a4442f2
SSDEEP 24576:eoQn6UoI4dccQWhdCUWVCs2ZXn3UIEY5/kbJD3G/Nj4pcaw6QBuw92g4rTYqYFyr:XQJOdccQWhGVo1AJbqKpkNgULKl
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 10 IoCs

description	ioc
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE

File Explorer

1726CDD1BC9511216D1162B49000DD830CA863138F26FD27AA68C13E16AD7E73.apk

.apk 1.4MB

1726CDD1BC9511216D1162B49000DD830CA863138F26FD27AA68C13E16AD7E73.apk

SHA256 1726cdd1bc9511216d1162b49000dd830ca863138f26fd27aa68c13e16ad7e73
MD5 01512eeb021bad8b527f4becc26b6139
SHA1 83b45cb212fec30505e34a6485ca0154113dfcaf
SHA512 638f73751bfe582663dacfe933098b97b34e74545cf812ae6b0d468d2965995bffb1b09f1c65e0636a5e1bec090be373d82c3590045aab229ea02eab4a4442f2
SSDEEP 24576:eoQn6UoI4dccQWhdCUWVCs2ZXn3UIEY5/kbJD3G/Nj4pcaw6QBuw92g4rTYqYFyr:XQJOdccQWhGVo1AJbqKpkNgULKl
MD5 SHA1 SHA512 SSDEEP

android

hkflsxtoqzybtnk.bekcgmgokixinuo.jamqjxyajdubklkpatutw

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.Scabinlunch

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.Ocancelmaple

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.Zenforcewinner

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.Hfewgun

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.Ndecembershiver

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.Hequipswift

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.Ctheytalent

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.Qscrapwasp

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.Zsuperafford

com.google.android.gms.common.api.GoogleApiActivity

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.Xviciousnotable

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.Nroadboil

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.Ncactusstate

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.Xlawndisorder

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.rlalphxegdobgii

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.Npurityweb

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.bmnvp

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.Msilverbring

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.Rroastmansion

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.Fsimpleallow

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.Fpasstattoo

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.Bexhibitice

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.fhiyro

android.intent.action.SEND android.intent.action.SENDTO

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.Senemysuffer

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.Ninheritdiary

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.Jvisaworry

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.Xouterlamp

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.Qshipsoldier

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.Oshadowdrip

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.Mpitchclerk

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.Dcivilleft

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.fgruly

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.Ititlehood

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.Zwillcrater

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.Rliquidshift

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.Sawkwardskirt

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.Zagreehunt

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.Xappearhat

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.Ctokensick

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.astotqpvulp

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.Xfoxhire

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.mygigcaltbheqm

android.intent.action.MAIN

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.Rpetchase

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.Kbirdshield

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.Cwideclump

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.Fraccoonburger

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.khdnxglpkqlgjjxa

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.Cdefenseorchard

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.kmbk

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.Ffashionhelmet

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.Xpaperclap

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.Jmaskembrace

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.Ckeepgalaxy

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.Nspringsiege

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.Rcigargiant

Android Permissions

1726CDD1BC9511216D1162B49000DD830CA863138F26FD27AA68C13E16AD7E73.apk

Permissions

android.permission.INTERNET

android.permission.RECEIVE_SMS

android.permission.READ_CONTACTS

android.permission.INSTALL_SHORTCUT

android.permission.WAKE_LOCK

android.permission.RECORD_AUDIO

android.permission.FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.READ_PHONE_STATE

android.permission.READ_SMS

android.permission.VIBRATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.BLUETOOTH_ADMIN

android.permission.REQUEST_DELETE_PACKAGES

android.permission.CALL_PHONE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.SEND_SMS

android.permission.GET_ACCOUNTS

android.permission.FOREGROUND_SERVICE

android.permission.USE_FULL_SCREEN_INTENT

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.READ_EXTERNAL_STORAGE

Sharing

General

Malware Config

Signatures

File Explorer

1726CDD1BC9511216D1162B49000DD830CA863138F26FD27AA68C13E16AD7E73.apk

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.Scabinlunch

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.Ocancelmaple

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.Zenforcewinner

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.Hfewgun

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.Ndecembershiver

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.Hequipswift

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.Ctheytalent

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.Qscrapwasp

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.Zsuperafford

com.google.android.gms.common.api.GoogleApiActivity

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.Xviciousnotable

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.Nroadboil

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.Ncactusstate

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.Xlawndisorder

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.rlalphxegdobgii

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.Npurityweb

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.bmnvp

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.Msilverbring

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.Rroastmansion

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.Fsimpleallow

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.Fpasstattoo

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.Bexhibitice

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.fhiyro

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.Senemysuffer

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.Ninheritdiary

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.Jvisaworry

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.Xouterlamp

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.Qshipsoldier

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.Oshadowdrip

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.Mpitchclerk

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.Dcivilleft

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.fgruly

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.Ititlehood

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.Zwillcrater

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.Rliquidshift

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.Sawkwardskirt

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.Zagreehunt

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.Xappearhat

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.Ctokensick

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.astotqpvulp

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.Xfoxhire

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.mygigcaltbheqm

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.Rpetchase

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.Kbirdshield

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.Cwideclump

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.Fraccoonburger

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.khdnxglpkqlgjjxa

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.Cdefenseorchard

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.kmbk

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.Ffashionhelmet

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.Xpaperclap

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.Jmaskembrace

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.Ckeepgalaxy

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.Nspringsiege

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.Rcigargiant

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.vncborykgv

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.jxtna

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.pyaqqttk

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.nswfygrr

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.knmzljbqrqnkwb

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.bzyktetumlqkmwi

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.zbvnqcdc

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.zfsteq

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.wgxoydx

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.njhltmufzs

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.qphxsivzvbxcso

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.ubrawjod

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.pnlpuklxwf

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.duujkrsss

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.fqyfuipjwavneut

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.xxczfbtefpmue

zyprizcwhroxzrounow.elzydpzyeockooslxohogush.yjqoclrdzfjuilshazng.lnniurgavvypbld

Android Permissions

1726CDD1BC9511216D1162B49000DD830CA863138F26FD27AA68C13E16AD7E73.apk