BFFF778183267993DA2CCF95F9FB3556DCACD90210DA907B032E49B37656D300[.]apk

Sharing

Copy URL Twitter E-mail

General

Target
BFFF778183267993DA2CCF95F9FB3556DCACD90210DA907B032E49B37656D300.apk
Size 2.5MB
Sample220603-ha37csbgg4
SHA256 bfff778183267993da2ccf95f9fb3556dcacd90210da907b032e49b37656d300
MD5 08a551f7207bcc6545db870d9b23b08a
SHA1 cb651a07e16322b7190fc414769032af7b34953c
SHA512 7a09f875a4e33b3327e98a3883cc51bc8fc309b8b953396a6a703f37d8d017f4dc33ed94e320c9030ae218d9a49ee8bcf052413f9f1b2a8f59e1b33dfe4e9fe5
SSDEEP 49152:r1xBiypZL0cOwcdDGPDi9yQWGquhiiPwMEOmlVBqzIDNQ7QuKm92cFIXqw9EQS1a:rZu/Ji01ul3sQJm9Nsqw9TiyLV
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 10 IoCs

description	ioc
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to record audio.	android.permission.RECORD_AUDIO

File Explorer

BFFF778183267993DA2CCF95F9FB3556DCACD90210DA907B032E49B37656D300.apk

.apk 2.5MB

BFFF778183267993DA2CCF95F9FB3556DCACD90210DA907B032E49B37656D300.apk

SHA256 bfff778183267993da2ccf95f9fb3556dcacd90210da907b032e49b37656d300
MD5 08a551f7207bcc6545db870d9b23b08a
SHA1 cb651a07e16322b7190fc414769032af7b34953c
SHA512 7a09f875a4e33b3327e98a3883cc51bc8fc309b8b953396a6a703f37d8d017f4dc33ed94e320c9030ae218d9a49ee8bcf052413f9f1b2a8f59e1b33dfe4e9fe5
SSDEEP 49152:r1xBiypZL0cOwcdDGPDi9yQWGquhiiPwMEOmlVBqzIDNQ7QuKm92cFIXqw9EQS1a:rZu/Ji01ul3sQJm9Nsqw9TiyLV
MD5 SHA1 SHA512 SSDEEP

android

rllidtt.wboceuqtzq.bwnsrjtnyggeybdokasofwmgrb

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.Leditfinal

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.Qsupplyfancy

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.Ucombinebefore

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.Xwinterrefuse

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.Zanxietyclip

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.Mthumbannounce

com.google.android.gms.common.api.GoogleApiActivity

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.Owastepatient

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.Oscriptworth

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.toq

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.Evisabrother

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.wayryih

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.Xhintbonus

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.Wluggagebeach

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.Xstoryleaf

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.Teducatepush

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.aqjvhnutgpfqss

android.intent.action.SEND android.intent.action.SENDTO

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.Lchimneycore

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.Yslidenice

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.Dstingstem

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.Asupremefragile

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.Adumbexplain

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.Nclusterprevent

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.Elawspell

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.Cinitialwork

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.xvatrocaelulwvk

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.Lwitnesseasy

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.Rcricketnoise

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.Xcouchsad

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.Lrulesocial

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.Cyearelegant

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.hodxbwwh

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.Cisolatescale

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.ailxb

android.intent.action.MAIN

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.Grewardtrain

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.Qgiraffeostrich

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.Hcruisecamp

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.kuddyxwgdvdktd

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.Pgroupportion

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.phsdglnjywotuys

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.Pabsenttrick

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.Fgorillacanal

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.Jarrestafford

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.Kshadowonly

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.Pslogancannon

Android Permissions

BFFF778183267993DA2CCF95F9FB3556DCACD90210DA907B032E49B37656D300.apk

Permissions

android.permission.WAKE_LOCK

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.READ_SMS

android.permission.GET_ACCOUNTS

android.permission.REQUEST_DELETE_PACKAGES

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.USE_FINGERPRINT

android.permission.READ_CONTACTS

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.USE_FULL_SCREEN_INTENT

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.FOREGROUND_SERVICE

android.permission.SEND_SMS

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.CALL_PHONE

android.permission.ACCESS_NETWORK_STATE

android.permission.RECEIVE_SMS

android.permission.READ_EXTERNAL_STORAGE

android.permission.RECORD_AUDIO

Sharing

General

Malware Config

Signatures

File Explorer

BFFF778183267993DA2CCF95F9FB3556DCACD90210DA907B032E49B37656D300.apk

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.Leditfinal

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.Qsupplyfancy

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.Ucombinebefore

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.Xwinterrefuse

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.Zanxietyclip

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.Mthumbannounce

com.google.android.gms.common.api.GoogleApiActivity

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.Owastepatient

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.Oscriptworth

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.toq

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.Evisabrother

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.wayryih

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.Xhintbonus

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.Wluggagebeach

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.Xstoryleaf

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.Teducatepush

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.aqjvhnutgpfqss

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.Lchimneycore

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.Yslidenice

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.Dstingstem

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.Asupremefragile

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.Adumbexplain

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.Nclusterprevent

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.Elawspell

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.Cinitialwork

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.xvatrocaelulwvk

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.Lwitnesseasy

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.Rcricketnoise

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.Xcouchsad

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.Lrulesocial

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.Cyearelegant

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.hodxbwwh

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.Cisolatescale

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.ailxb

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.Grewardtrain

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.Qgiraffeostrich

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.Hcruisecamp

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.kuddyxwgdvdktd

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.Pgroupportion

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.phsdglnjywotuys

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.Pabsenttrick

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.Fgorillacanal

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.Jarrestafford

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.Kshadowonly

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.Pslogancannon

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.uuxtpribb

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.nbmqdpkyfzlhimc

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.cpoehxw

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.wbpgquczkeq

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.iki

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.wexpzzkha

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.dsnkoenvzjkmitf

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.plj

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.qns

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.xsfmvdink

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.wryacyyrwy

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.yfb

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.znd

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.txwuvb

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.jsr

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.wsptmyc

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.ylltxfeqrmb

ndszfkfppixaetma.bflamiselewgtrjbnkbzkjj.dgkf.fwtiwoqkneoccqi

Android Permissions

BFFF778183267993DA2CCF95F9FB3556DCACD90210DA907B032E49B37656D300.apk