General

  • Target

    ShopeeTH_no.apk

  • Size

    8.6MB

  • MD5

    7f7c9772d61c335caeecf1e5ffc14d4a

  • SHA1

    aebd8e5c2d105d86fb383b6b986e600776cda763

  • SHA256

    d5e2cc1b4c7c0aa843267e0aa833c36f19bec5d1ebd1a3152da30a8265c99b1e

  • SHA512

    c56c40689720561d74bd42f63c0906331e3a8c57ec2270665e064675ebc5a0d6c2052694b4127afe1f2d3acc225a4b8215099b07cd9ebb7935f0f778f392697c

  • SSDEEP

    196608:yMnYGO3X7o026181GpOnf//pix/cX6nvPKs0BnfuHHDu6g:dtO3XkSNaXQnm8g

Score
10/10

Malware Config

Extracted

Family

gigabud

C2

http://bwdt9.cc/x/command?token=

http://8.219.85.91:8888/push-streaming?id=1234

Signatures

  • Gigabud family
  • Requests dangerous framework permissions 9 IoCs

Files

  • ShopeeTH_no.apk
    .apk android arch:arm

    com.optsimoroute.optimoroute

    com.mobilelive.show.activity.SplashActivity


Android Permissions

ShopeeTH_no.apk

Permissions

android.permission.BIND_ACCESSIBILITY_SERVICE

android.permission.REQUEST_DELETE_PACKAGES

android.permission.QUERY_ALL_PACKAGES

android.permission.GET_INSTALLED_APPS

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.FOREGROUND_SERVICE

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.CAMERA

android.permission.RECORD_AUDIO

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.READ_SMS

android.permission.RECEIVE_SMS

android.permission.SEND_SMS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.SYSTEM_OVERLAY_WINDOW

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.READ_EXTERNAL_STORAGE

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.WRITE_SETTINGS

android.permission.ACCESS_NOTIFICATION_POLICY