Resubmissions

03-05-2023 10:32

230503-mk88ksgb6t 10

20-02-2023 10:28

230220-mhntvsaa7t 10

20-02-2023 08:04

230220-jyb88ahf3x 10

General

  • Target

    PosteID.apk

  • Size

    1.7MB

  • MD5

    a7a4dcc0ea24c8f161a5cb785974f4cb

  • SHA1

    4dd56ed32b32356c62927b0ad1058c60bc63177b

  • SHA256

    03933fedda0104be2fdfc26a8f205657989b7e12a5446b2e754562a4abccd956

  • SHA512

    6ec73e6a1a2b3ea013add66b48c79e60e29f4c1bbc32adfc92c311c57c0f0124bb45a8329fd69e473fc0fa47555df99b34a95cbac6bf506038aaaeb66b348ff9

  • SSDEEP

    49152:EdWaZSz14fSMZ5z6+N+nAcmjdvWqj/R4Gv:C5Zyl0t6+knXm4q94Gv

Score
10/10

Malware Config

Signatures

  • Hydra family
  • Hydra payload 1 IoCs
  • Requests dangerous framework permissions 9 IoCs

Files

  • PosteID.apk
    .apk android

    com.sdktools.android

    com.sdktools.android.MainActivity


Android Permissions

PosteID.apk

Permissions

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.WAKE_LOCK

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.REORDER_TASKS

android.permission.WRITE_SMS

android.permission.READ_SMS

android.permission.RECEIVE_SMS

android.permission.SEND_SMS

android.permission.CALL_PHONE

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.READ_PHONE_STATE

android.permission.READ_PHONE_NUMBERS

android.permission.READ_CONTACTS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.REQUEST_DELETE_PACKAGES

android.permission.QUERY_ALL_PACKAGES

android.permission.WRITE_SETTINGS

android.permission.CAPTURE_VIDEO_OUTPUT

android.permission.DISABLE_KEYGUARD

android.permission.FOREGROUND_SERVICE

android.permission.READ_EXTERNAL_STORAGE