japanpost[.]apk | Triage™

General

Target
japanpost.apk
Size 504KB
Sample220615-nryk4ahbd7
SHA256 0611d4dc55c17f4b8ba2568a478ece83912f5381ac58f5655a90cfdd484f8533
MD5 6e9c9eb59fbcad7c35ff342030a6a70a
SHA1 61ee41580991b7ca35f578d3784b188090155a9d
SHA512 f639dedff272ca6b9f0a13de95e41f981e7814fd27b02338c09e5bc7d07f8bb73de1a2fc5a120e8a5895e14bbdd87ccf2a4677bf80f69779d2cc87c791f1c8e7
SSDEEP 12288:NSQqcaXAdqjUDP3j5STXX1CEAFkAoLKLuUcukzXoFObO7/qQV:5qcaXAdqelSTgEkboqj87RQV
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 9 IoCs

description	ioc
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS

File Explorer

japanpost.apk

.apk 504KB

japanpost.apk

SHA256 0611d4dc55c17f4b8ba2568a478ece83912f5381ac58f5655a90cfdd484f8533
MD5 6e9c9eb59fbcad7c35ff342030a6a70a
SHA1 61ee41580991b7ca35f578d3784b188090155a9d
SHA512 f639dedff272ca6b9f0a13de95e41f981e7814fd27b02338c09e5bc7d07f8bb73de1a2fc5a120e8a5895e14bbdd87ccf2a4677bf80f69779d2cc87c791f1c8e7
SSDEEP 12288:NSQqcaXAdqjUDP3j5STXX1CEAFkAoLKLuUcukzXoFObO7/qQV:5qcaXAdqelSTgEkboqj87RQV
MD5 SHA1 SHA512 SSDEEP

android arch:arm

deeonq.lvbeki.cn.rhi

Android Permissions

japanpost.apk

Permissions

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.CALL_PHONE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.RECEIVE_BOOT_COMPLETED

gqkyolh.oqhhjex.kynzxez

baaw.rhsn.lvnbasqk

wwfky.igyhyxi.sgfsm

android.permission.WAKE_LOCK

android.permission.INTERNET

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.permission.WRITE_SMS

android.permission.SEND_SMS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_CONTACTS

android.permission.READ_PHONE_STATE

android.permission.GET_ACCOUNTS

japanpost.apk

gi8a3m1.HuActivity

gi8a3m1.Ir

gi8a3m1.Vq

gi8a3m1.He

Sharing

General

Malware Config

Signatures

File Explorer

japanpost.apk

gi8a3m1.HuActivity

gi8a3m1.Ir

gi8a3m1.Vq

gi8a3m1.He

Android Permissions

japanpost.apk