0b72c22517fdefd4cf0466d8d4c634ca73b7667d378be688efe131af4ac3aed8_unpacked[.]zip

General

Target
0b72c22517fdefd4cf0466d8d4c634ca73b7667d378be688efe131af4ac3aed8_unpacked.zip
Size 7.2MB
Sample230201-jd4sqsec2s
SHA256 0b72c22517fdefd4cf0466d8d4c634ca73b7667d378be688efe131af4ac3aed8
MD5 ec9f857999b4fc3dd007fdb786b7a8d1
SHA1 3fa48a36d22d848ad111b246ca94fa58088dbb7a
SHA512 51d9965e08fa3f5cd8850df3f2dd8503c47ce9f3668b2ae90d3560cc16acd0d4d1b3bbed651d957bc41ea7595a527a00b9c600b3726faa6095af380019e3d1e0
SSDEEP 98304:vDdInEpAOdLl2DfGjOmP34z09nmw3xAZMV8JiDQeZgUGdh0fr33dmh++0oEHi6Pz:5gE7tf3u09nmiOZmDid9h+CFZMXmwfXR
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 8 IoCs

description	ioc
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE

File Explorer

0b72c22517fdefd4cf0466d8d4c634ca73b7667d378be688efe131af4ac3aed8_unpacked.zip

.apk 7.2MB

0b72c22517fdefd4cf0466d8d4c634ca73b7667d378be688efe131af4ac3aed8_unpacked.zip

SHA256 0b72c22517fdefd4cf0466d8d4c634ca73b7667d378be688efe131af4ac3aed8
MD5 ec9f857999b4fc3dd007fdb786b7a8d1
SHA1 3fa48a36d22d848ad111b246ca94fa58088dbb7a
SHA512 51d9965e08fa3f5cd8850df3f2dd8503c47ce9f3668b2ae90d3560cc16acd0d4d1b3bbed651d957bc41ea7595a527a00b9c600b3726faa6095af380019e3d1e0
SSDEEP 98304:vDdInEpAOdLl2DfGjOmP34z09nmw3xAZMV8JiDQeZgUGdh0fr33dmh++0oEHi6Pz:5gE7tf3u09nmiOZmDid9h+CFZMXmwfXR
MD5 SHA1 SHA512 SSDEEP

android

com.rduzmauwns.jieliysagr

Android Permissions

0b72c22517fdefd4cf0466d8d4c634ca73b7667d378be688efe131af4ac3aed8_unpacked.zip

Permissions

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.BIND_ACCESSIBILITY_SERVICE

android.permission.FOREGROUND_SERVICE

android.permission.WAKE_LOCK

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.GET_TASKS

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.permission.BROADCAST_SMS

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.WRITE_SMS

android.permission.PACKAGE_USAGE_STATS

android.permission.CALL_PHONE

android.permission.SEND_SMS

android.permission.RECORD_AUDIO

android.permission.READ_CONTACTS

android.permission.READ_PHONE_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WAKE_LOCK

android.permission.DISABLE_KEYGUARD

0b72c22517fdefd4cf0466d8d4c634ca73b7667d378be688efe131af4ac3aed8_unpacked.zip

com.rduzmauwns.jieliysagr.aJtzcrQbcpuSYfz

com.rduzmauwns.jieliysagr.Activitys.yhcRYoIwgnvubIT

com.rduzmauwns.jieliysagr.znZoKdwDNzBoiel

com.rduzmauwns.jieliysagr.Activitys.YhdsdbMnCTAdnoy

com.rduzmauwns.jieliysagr.Activitys.tvesAwiPRepVBgP

com.rduzmauwns.jieliysagr.Activitys.IcobpNxqqyzbioj

com.rduzmauwns.jieliysagr.Activitys.fPjwqFrfSelDzKA

com.rduzmauwns.jieliysagr.Activitys.TZwvnvyxicyQJai

com.rduzmauwns.jieliysagr.Activitys.SlZaxwoawGUJcGo

com.rduzmauwns.jieliysagr.Activitys.mhrinwrzgoFBohs

com.rduzmauwns.jieliysagr.Activitys.nvaNEkyFBbmEFtR

com.rduzmauwns.jieliysagr.Activitys.CGjWqhnuIvyhhLZ

com.rduzmauwns.jieliysagr.Activitys.luhOahrDwiZBRnR

com.rduzmauwns.jieliysagr.Activitys.RukzWvrrvLnWmmI

com.rduzmauwns.jieliysagr.Activitys.YMKZTaiAbRBPnYf

net.godfather.thegodfather.UqxRirmdeFXNHiY

com.google.android.gms.common.api.GoogleApiActivity

com.rduzmauwns.jieliysagr.Services.pirtMhqaatNQmgN

com.rduzmauwns.jieliysagr.vCdmvEHqFNkYwsB

com.rduzmauwns.jieliysagr.Services.WyFuvvNkowNULeb

com.rduzmauwns.jieliysagr.Services.jNiurzHRPHzlfog

com.rduzmauwns.jieliysagr.Services.oOtKGjRwtXrmkBi

net.godfather.thegodfather.InputService

com.rduzmauwns.jieliysagr.Services.oeboasvgBsGbtaz

com.rduzmauwns.jieliysagr.Services.twiYVbbysorooCS

com.rduzmauwns.jieliysagr.Network.AncaBmVeUwlaeoH

net.godfather.thegodfather.MainService

com.rduzmauwns.jieliysagr.Services.zoOtpqHZomxvmtq

com.rduzmauwns.jieliysagr.Services.mLOdkrmwrsQoRlu

com.rduzmauwns.jieliysagr.Receivers.tmwsCsbPsRrMQuR

com.rduzmauwns.jieliysagr.Receivers.gGUeKBMytRkcohg

com.rduzmauwns.jieliysagr.Receivers.zabokXslJKMnhsd

com.rduzmauwns.jieliysagr.Receivers.ZNeijpkzazboAyv

com.rduzmauwns.jieliysagr.Receivers.UyPEynbQaBYnvos

com.rduzmauwns.jieliysagr.Receivers.dntwRvykDLjCMia

com.rduzmauwns.jieliysagr.Receivers.oKijgXhIueVuKBo

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

0b72c22517fdefd4cf0466d8d4c634ca73b7667d378be688efe131af4ac3aed8_unpacked.zip

com.rduzmauwns.jieliysagr.aJtzcrQbcpuSYfz

com.rduzmauwns.jieliysagr.Activitys.yhcRYoIwgnvubIT

com.rduzmauwns.jieliysagr.znZoKdwDNzBoiel

com.rduzmauwns.jieliysagr.Activitys.YhdsdbMnCTAdnoy

com.rduzmauwns.jieliysagr.Activitys.tvesAwiPRepVBgP

com.rduzmauwns.jieliysagr.Activitys.IcobpNxqqyzbioj

com.rduzmauwns.jieliysagr.Activitys.fPjwqFrfSelDzKA

com.rduzmauwns.jieliysagr.Activitys.TZwvnvyxicyQJai

com.rduzmauwns.jieliysagr.Activitys.SlZaxwoawGUJcGo

com.rduzmauwns.jieliysagr.Activitys.mhrinwrzgoFBohs

com.rduzmauwns.jieliysagr.Activitys.nvaNEkyFBbmEFtR

com.rduzmauwns.jieliysagr.Activitys.CGjWqhnuIvyhhLZ

com.rduzmauwns.jieliysagr.Activitys.luhOahrDwiZBRnR

com.rduzmauwns.jieliysagr.Activitys.RukzWvrrvLnWmmI

com.rduzmauwns.jieliysagr.Activitys.YMKZTaiAbRBPnYf

net.godfather.thegodfather.UqxRirmdeFXNHiY

com.google.android.gms.common.api.GoogleApiActivity

com.rduzmauwns.jieliysagr.Services.pirtMhqaatNQmgN

com.rduzmauwns.jieliysagr.vCdmvEHqFNkYwsB

com.rduzmauwns.jieliysagr.Services.WyFuvvNkowNULeb

com.rduzmauwns.jieliysagr.Services.jNiurzHRPHzlfog

com.rduzmauwns.jieliysagr.Services.oOtKGjRwtXrmkBi

net.godfather.thegodfather.InputService

com.rduzmauwns.jieliysagr.Services.oeboasvgBsGbtaz

com.rduzmauwns.jieliysagr.Services.twiYVbbysorooCS

com.rduzmauwns.jieliysagr.Network.AncaBmVeUwlaeoH

net.godfather.thegodfather.MainService

com.rduzmauwns.jieliysagr.Services.zoOtpqHZomxvmtq

com.rduzmauwns.jieliysagr.Services.mLOdkrmwrsQoRlu

com.rduzmauwns.jieliysagr.Receivers.tmwsCsbPsRrMQuR

com.rduzmauwns.jieliysagr.Receivers.gGUeKBMytRkcohg

com.rduzmauwns.jieliysagr.Receivers.zabokXslJKMnhsd

com.rduzmauwns.jieliysagr.Receivers.ZNeijpkzazboAyv

com.rduzmauwns.jieliysagr.Receivers.UyPEynbQaBYnvos

com.rduzmauwns.jieliysagr.Receivers.dntwRvykDLjCMia

com.rduzmauwns.jieliysagr.Receivers.oKijgXhIueVuKBo

Android Permissions

0b72c22517fdefd4cf0466d8d4c634ca73b7667d378be688efe131af4ac3aed8_unpacked.zip