b7b6ae08971e111291e2dffe48667c42

General

Target
b7b6ae08971e111291e2dffe48667c42
Size 3.7MB
Sample220627-lzkyvsacdn
SHA256 7711f2515fa68fcb75459a90b9d0102569435cdfbaacb35b23828ab17d6a0987
MD5 b7b6ae08971e111291e2dffe48667c42
SHA1 ffd2c09b20809ba853bfa0776ae59447ea82d4b7
SHA512 0414838b61f594a12cbab985439ab97194b75117562e2a091c0cbab6c029930a36a2b9b0a3781c4972abf6c39f5d4f6aada2588280eedbc7b3d506a566eee7ae
SSDEEP 49152:m9Ss93Y1WHU7hd54MpuvgFm5zHYwqxkpoD7Kq+pj5w4x2I/xemQcOqDIPJjb/PZp:m9S63Y1thdhIrw40CzDAxb5USh
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 10 IoCs

description	ioc
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE

File Explorer

b7b6ae08971e111291e2dffe48667c42

.apk 3.7MB

b7b6ae08971e111291e2dffe48667c42

SHA256 7711f2515fa68fcb75459a90b9d0102569435cdfbaacb35b23828ab17d6a0987
MD5 b7b6ae08971e111291e2dffe48667c42
SHA1 ffd2c09b20809ba853bfa0776ae59447ea82d4b7
SHA512 0414838b61f594a12cbab985439ab97194b75117562e2a091c0cbab6c029930a36a2b9b0a3781c4972abf6c39f5d4f6aada2588280eedbc7b3d506a566eee7ae
SSDEEP 49152:m9Ss93Y1WHU7hd54MpuvgFm5zHYwqxkpoD7Kq+pj5w4x2I/xemQcOqDIPJjb/PZp:m9S63Y1thdhIrw40CzDAxb5USh
MD5 SHA1 SHA512 SSDEEP

android

com.rsksbgdkgcae.fvogspmykjv

com.google.android.gms.common.api.GoogleApiActivity

com.rsksbgdkgcae.fvogspmykjv.cybzqahjxy.EWMoatRwKAEg

android.intent.action.MAIN

com.rsksbgdkgcae.fvogspmykjv.vmlkqcs

com.rsksbgdkgcae.fvogspmykjv.wiNGmRSPUF

android.intent.action.SENDTO android.intent.action.SEND

com.rsksbgdkgcae.fvogspmykjv.kxfmbob

com.rsksbgdkgcae.fvogspmykjv.jydrosb

com.rsksbgdkgcae.fvogspmykjv.cybzqahjxy.zFKmLuwiBLyR

com.rsksbgdkgcae.fvogspmykjv.ofwkxsmeh.subtbpqwvf.WQnhiZpoSGe

com.rsksbgdkgcae.fvogspmykjv.cybzqahjxy.LqavEfShKp

com.rsksbgdkgcae.fvogspmykjv.cybzqahjxy.EApiOuwYiqd

com.rsksbgdkgcae.fvogspmykjv.cybzqahjxy.WYkYDW

com.rsksbgdkgcae.fvogspmykjv.cybzqahjxy.Lukdfa

com.rsksbgdkgcae.fvogspmykjv.cybzqahjxy.idBDEtW

com.rsksbgdkgcae.fvogspmykjv.cybzqahjxy.scxovrnYVSr

com.rsksbgdkgcae.fvogspmykjv.cybzqahjxy.YQHmvwcmgVqt

com.rsksbgdkgcae.fvogspmykjv.bmbtpgrz

com.rsksbgdkgcae.fvogspmykjv.cybzqahjxy.ghzPKXOGrDJ

com.rsksbgdkgcae.fvogspmykjv.sfdjgs

com.rsksbgdkgcae.fvogspmykjv.mhvmnwdt

com.rsksbgdkgcae.fvogspmykjv.cybzqahjxy.WboDthMt

com.rsksbgdkgcae.fvogspmykjv.cybzqahjxy.WtcyJd

com.rsksbgdkgcae.fvogspmykjv.cybzqahjxy.ibpdibRB

com.rsksbgdkgcae.fvogspmykjv.kgkimzevr

com.rsksbgdkgcae.fvogspmykjv.cybzqahjxy.vQZJINI

com.rsksbgdkgcae.fvogspmykjv.ksudpv

com.rsksbgdkgcae.fvogspmykjv.hxvXFL

android.intent.action.RESPOND_VIA_MESSAGE

com.rsksbgdkgcae.fvogspmykjv.nNMnGmiT

com.rsksbgdkgcae.fvogspmykjv.YTZLZMPC

com.rsksbgdkgcae.fvogspmykjv.yLDVMjVUtvma

com.rsksbgdkgcae.fvogspmykjv.BrnAvtHuxQ

com.rsksbgdkgcae.fvogspmykjv.SMICMHXZQMew

com.rsksbgdkgcae.fvogspmykjv.daQLbBZCsC

com.rsksbgdkgcae.fvogspmykjv.nZEemx

com.rsksbgdkgcae.fvogspmykjv.TcWZgo

com.rsksbgdkgcae.fvogspmykjv.mZuEVXbclYBa

com.rsksbgdkgcae.fvogspmykjv.BGKfGjcF

android.accessibilityservice.AccessibilityService

com.rsksbgdkgcae.fvogspmykjv.djnYtyu

com.rsksbgdkgcae.fvogspmykjv.ofwkxsmeh.subtbpqwvf.RdKVlJ

com.rsksbgdkgcae.fvogspmykjv.ofwkxsmeh.subtbpqwvf.eRTAOCWhBw

com.rsksbgdkgcae.fvogspmykjv.ofwkxsmeh.isxbujormga.DPRsfm

com.rsksbgdkgcae.fvogspmykjv.dnTDgWfG

com.rsksbgdkgcae.fvogspmykjv.ZSwLcB

com.rsksbgdkgcae.fvogspmykjv.rFDOmgDiJ

com.rsksbgdkgcae.fvogspmykjv.ofwkxsmeh.isxbujormga.RDnTxw

com.rsksbgdkgcae.fvogspmykjv.ofwkxsmeh.fdatdvgdtshw.yNnPiZNzTiZc

com.rsksbgdkgcae.fvogspmykjv.ofwkxsmeh.fdatdvgdtshw.AiBMamRtcLWF

com.rsksbgdkgcae.fvogspmykjv.abwdxa

com.rsksbgdkgcae.fvogspmykjv.bxjymqcs.bjQKdKgRgMoG

com.rsksbgdkgcae.fvogspmykjv.vmqavcx

com.rsksbgdkgcae.fvogspmykjv.wdDMwHThiOX

com.rsksbgdkgcae.fvogspmykjv.rvuBkCTzn

com.rsksbgdkgcae.fvogspmykjv.tcShDEQ

com.rsksbgdkgcae.fvogspmykjv.hpgdge.GfUKqhB

com.rsksbgdkgcae.fvogspmykjv.hpgdge.PTMxnLVa

com.rsksbgdkgcae.fvogspmykjv.KWAtvfiQT

android.service.notification.NotificationListenerService

Android Permissions

b7b6ae08971e111291e2dffe48667c42

Permissions

android.permission.WRITE_SMS

android.permission.ACCESS_FINE_LOCATION

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_SMS

android.permission.REQUEST_DELETE_PACKAGES

android.permission.FOREGROUND_SERVICE

android.permission.RECORD_AUDIO

android.permission.INTERNET

android.permission.RECEIVE_SMS

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.WAKE_LOCK

android.permission.SEND_SMS

android.permission.PACKAGE_USAGE_STATS

android.permission.CALL_PHONE

android.permission.READ_CONTACTS

android.permission.GET_TASKS

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.SYSTEM_ALERT_WINDOW

Sharing

General

Malware Config

Signatures

File Explorer

b7b6ae08971e111291e2dffe48667c42

com.google.android.gms.common.api.GoogleApiActivity

com.rsksbgdkgcae.fvogspmykjv.cybzqahjxy.EWMoatRwKAEg

com.rsksbgdkgcae.fvogspmykjv.vmlkqcs

com.rsksbgdkgcae.fvogspmykjv.wiNGmRSPUF

com.rsksbgdkgcae.fvogspmykjv.kxfmbob

com.rsksbgdkgcae.fvogspmykjv.jydrosb

com.rsksbgdkgcae.fvogspmykjv.cybzqahjxy.zFKmLuwiBLyR

com.rsksbgdkgcae.fvogspmykjv.ofwkxsmeh.subtbpqwvf.WQnhiZpoSGe

com.rsksbgdkgcae.fvogspmykjv.cybzqahjxy.LqavEfShKp

com.rsksbgdkgcae.fvogspmykjv.cybzqahjxy.EApiOuwYiqd

com.rsksbgdkgcae.fvogspmykjv.cybzqahjxy.WYkYDW

com.rsksbgdkgcae.fvogspmykjv.cybzqahjxy.Lukdfa

com.rsksbgdkgcae.fvogspmykjv.cybzqahjxy.idBDEtW

com.rsksbgdkgcae.fvogspmykjv.cybzqahjxy.scxovrnYVSr

com.rsksbgdkgcae.fvogspmykjv.cybzqahjxy.YQHmvwcmgVqt

com.rsksbgdkgcae.fvogspmykjv.bmbtpgrz

com.rsksbgdkgcae.fvogspmykjv.cybzqahjxy.ghzPKXOGrDJ

com.rsksbgdkgcae.fvogspmykjv.sfdjgs

com.rsksbgdkgcae.fvogspmykjv.mhvmnwdt

com.rsksbgdkgcae.fvogspmykjv.cybzqahjxy.WboDthMt

com.rsksbgdkgcae.fvogspmykjv.cybzqahjxy.WtcyJd

com.rsksbgdkgcae.fvogspmykjv.cybzqahjxy.ibpdibRB

com.rsksbgdkgcae.fvogspmykjv.kgkimzevr

com.rsksbgdkgcae.fvogspmykjv.cybzqahjxy.vQZJINI

com.rsksbgdkgcae.fvogspmykjv.ksudpv

com.rsksbgdkgcae.fvogspmykjv.hxvXFL

com.rsksbgdkgcae.fvogspmykjv.nNMnGmiT

com.rsksbgdkgcae.fvogspmykjv.YTZLZMPC

com.rsksbgdkgcae.fvogspmykjv.yLDVMjVUtvma

com.rsksbgdkgcae.fvogspmykjv.BrnAvtHuxQ

com.rsksbgdkgcae.fvogspmykjv.SMICMHXZQMew

com.rsksbgdkgcae.fvogspmykjv.daQLbBZCsC

com.rsksbgdkgcae.fvogspmykjv.nZEemx

com.rsksbgdkgcae.fvogspmykjv.TcWZgo

com.rsksbgdkgcae.fvogspmykjv.mZuEVXbclYBa

com.rsksbgdkgcae.fvogspmykjv.BGKfGjcF

com.rsksbgdkgcae.fvogspmykjv.djnYtyu

com.rsksbgdkgcae.fvogspmykjv.ofwkxsmeh.subtbpqwvf.RdKVlJ

com.rsksbgdkgcae.fvogspmykjv.ofwkxsmeh.subtbpqwvf.eRTAOCWhBw

com.rsksbgdkgcae.fvogspmykjv.ofwkxsmeh.isxbujormga.DPRsfm

com.rsksbgdkgcae.fvogspmykjv.dnTDgWfG

com.rsksbgdkgcae.fvogspmykjv.ZSwLcB

com.rsksbgdkgcae.fvogspmykjv.rFDOmgDiJ

com.rsksbgdkgcae.fvogspmykjv.ofwkxsmeh.isxbujormga.RDnTxw

com.rsksbgdkgcae.fvogspmykjv.ofwkxsmeh.fdatdvgdtshw.yNnPiZNzTiZc

com.rsksbgdkgcae.fvogspmykjv.ofwkxsmeh.fdatdvgdtshw.AiBMamRtcLWF

com.rsksbgdkgcae.fvogspmykjv.abwdxa

com.rsksbgdkgcae.fvogspmykjv.bxjymqcs.bjQKdKgRgMoG

com.rsksbgdkgcae.fvogspmykjv.vmqavcx

com.rsksbgdkgcae.fvogspmykjv.wdDMwHThiOX

com.rsksbgdkgcae.fvogspmykjv.rvuBkCTzn

com.rsksbgdkgcae.fvogspmykjv.tcShDEQ

com.rsksbgdkgcae.fvogspmykjv.hpgdge.GfUKqhB

com.rsksbgdkgcae.fvogspmykjv.hpgdge.PTMxnLVa

com.rsksbgdkgcae.fvogspmykjv.KWAtvfiQT

com.rsksbgdkgcae.fvogspmykjv.cprohcrem.vYyVGkRBb

com.rsksbgdkgcae.fvogspmykjv.cprohcrem.EvnlkIhyaduh

com.rsksbgdkgcae.fvogspmykjv.cprohcrem.FPuDjHRiBpaB

com.rsksbgdkgcae.fvogspmykjv.cprohcrem.dgcyDxUly

Android Permissions

b7b6ae08971e111291e2dffe48667c42