Resubmissions

27-10-2022 16:01

221027-tgqemacff8 10

21-10-2022 10:53

221021-myzlasgda4 7

General

  • Target

    039fc34ace1012eff687f864369540b9085b167f0d66023f3b94f280a7fdf8b7.apk

  • Size

    1.3MB

  • MD5

    34be434996b9bc19112f875f0a3711d2

  • SHA1

    ad451e4fc750c83a58fe8f7234f1766ad315a565

  • SHA256

    039fc34ace1012eff687f864369540b9085b167f0d66023f3b94f280a7fdf8b7

  • SHA512

    28d6385703c1591853de9bdf7724594ba0187aeb40accf150b877a2785e915c7dd7ef8720f9cc8f0e33793b6c2b6d88845f3f7fb818e8575cf9daf259723dfd2

  • SSDEEP

    24576:RknbtoZcY5eJDj+6DiASSjctlRSEuw/pzIx27hCzGLQLfFK1RnHrmVXyQZ:RknbtoZcY5eFJibtrSEucp97hCzGLQbX

Score
10/10

Malware Config

Extracted

Family

furball

C2

http://www.firmwaresystemupdate.com/mmh

Signatures

  • Furball family
  • Requests dangerous framework permissions 6 IoCs

Files

  • 039fc34ace1012eff687f864369540b9085b167f0d66023f3b94f280a7fdf8b7.apk
    .apk android

    com.apps.amaq

    com.apps.amaq.SplashActivity


Android Permissions

039fc34ace1012eff687f864369540b9085b167f0d66023f3b94f280a7fdf8b7.apk

Permissions

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_WIFI_STATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.GET_TASKS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.VIBRATE

android.permission.WAKE_LOCK

android.permission.GET_ACCOUNTS

android.permission.QUICKBOOT_POWERON

android.permission.READ_SMS

com.android.browser.permission.READ_HISTORY_BOOKMARKS

android.permission.READ_CONTACTS

android.permission.READ_PHONE_STATE

android.permission.READ_CALL_LOG

android.permission.READ_LOGS

android.permission.WRITE_SETTINGS