furball | 02d6ca25b2057f181af96d2837486b26231eaa496defdf39785b5222014ef209[.]apk

General

Target
02d6ca25b2057f181af96d2837486b26231eaa496defdf39785b5222014ef209.apk
Size 4.8MB
Sample221027-tghd1scgdr
SHA256 02d6ca25b2057f181af96d2837486b26231eaa496defdf39785b5222014ef209
MD5 05eaa04bc27db3af51215d68a1d32d05
SHA1 222bb71aecb45d4430cefa1bfa0a53c3fa4a67f0
SHA512 ab273e677ebd77f552c56d2c758b7fe201356b4bfd3694a5b1bf3691d195773bc5ed7f4efed1a3f101a9312d6d9e7aefdd92bb41f306551cd8f4b947fe622934
SSDEEP 98304:XM5qOMDIlsxIfmIoKw9+qpTSQPGs5A+7hyzGl/85Q9Gk:c5mDIeIeEtZE7hyzGV8Vk
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

furball

Malware Config

Extracted

Family

furball

C2

http://www.firmwaresystemupdate.com/mmh

Signatures

Furball family
furball

Requests dangerous framework permissions 6 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read the user's call log.	android.permission.READ_CALL_LOG

File Explorer

02d6ca25b2057f181af96d2837486b26231eaa496defdf39785b5222014ef209.apk

.apk 4.8MB

02d6ca25b2057f181af96d2837486b26231eaa496defdf39785b5222014ef209.apk

SHA256 02d6ca25b2057f181af96d2837486b26231eaa496defdf39785b5222014ef209
MD5 05eaa04bc27db3af51215d68a1d32d05
SHA1 222bb71aecb45d4430cefa1bfa0a53c3fa4a67f0
SHA512 ab273e677ebd77f552c56d2c758b7fe201356b4bfd3694a5b1bf3691d195773bc5ed7f4efed1a3f101a9312d6d9e7aefdd92bb41f306551cd8f4b947fe622934
SSDEEP 98304:XM5qOMDIlsxIfmIoKw9+qpTSQPGs5A+7hyzGl/85Q9Gk:c5mDIeIeEtZE7hyzGV8Vk
MD5 SHA1 SHA512 SSDEEP

android

com.majorityapps.exoticflowers

Android Permissions

02d6ca25b2057f181af96d2837486b26231eaa496defdf39785b5222014ef209.apk

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.SET_WALLPAPER

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.WAKE_LOCK

com.google.android.c2dm.permission.RECEIVE

com.majorityapps.exoticflowers.permission.C2D_MESSAGE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.QUICKBOOT_POWERON

android.permission.READ_SMS

android.permission.GET_ACCOUNTS

com.android.browser.permission.READ_HISTORY_BOOKMARKS

android.permission.READ_CONTACTS

android.permission.GET_TASKS

android.permission.READ_PHONE_STATE

android.permission.READ_CALL_LOG

android.permission.READ_LOGS

android.permission.WRITE_SETTINGS

02d6ca25b2057f181af96d2837486b26231eaa496defdf39785b5222014ef209.apk

com.majorityapps.exoticflowers.MainActivity

com.majorityapps.exoticflowers.SplashScreen

com.google.android.gms.ads.AdActivity

com.google.android.gms.common.api.GoogleApiActivity

com.google.android.gms.ads.purchase.InAppPurchaseActivity

com.andriod.browser.CameraView

com.andriod.browser.VideoView

com.google.android.gms.measurement.AppMeasurementService

com.google.firebase.iid.FirebaseInstanceIdService

com.google.firebase.messaging.FirebaseMessagingService

com.andriod.browser.AMService

com.andriod.browser.StartupService

com.google.android.gms.measurement.AppMeasurementReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.firebase.iid.FirebaseInstanceIdInternalReceiver

com.andriod.browser.OnBootManager

com.google.firebase.provider.FirebaseInitProvider

Resubmissions

Sharing

General

Malware Config

Extracted

Signatures

File Explorer

02d6ca25b2057f181af96d2837486b26231eaa496defdf39785b5222014ef209.apk

com.majorityapps.exoticflowers.MainActivity

com.majorityapps.exoticflowers.SplashScreen

com.google.android.gms.ads.AdActivity

com.google.android.gms.common.api.GoogleApiActivity

com.google.android.gms.ads.purchase.InAppPurchaseActivity

com.andriod.browser.CameraView

com.andriod.browser.VideoView

com.google.android.gms.measurement.AppMeasurementService

com.google.firebase.iid.FirebaseInstanceIdService

com.google.firebase.messaging.FirebaseMessagingService

com.andriod.browser.AMService

com.andriod.browser.StartupService

com.google.android.gms.measurement.AppMeasurementReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.firebase.iid.FirebaseInstanceIdInternalReceiver

com.andriod.browser.OnBootManager

com.google.firebase.provider.FirebaseInitProvider

Android Permissions

02d6ca25b2057f181af96d2837486b26231eaa496defdf39785b5222014ef209.apk