Overview

overview

10

Static

static

10

Resubmissions

22/02/2023, 18:58

230222-xmxmnsda2910

22/02/2023, 18:58

230222-xmgapaeh2s10

22/02/2023, 18:51

230222-xhqzbsch8810

21/02/2023, 09:58

230221-lzkcbsed3410

21/02/2023, 09:55

230221-lxwycaed2710

Sharing

Copy URL Twitter E-mail

General

  • Target
    a611d499b9528df337068120ad26aed967fad6c3fd1af7fd3f7473698760c612
  • Size 10.4MB
  • Sample230222-xmxmnsda29
  • SHA256 a611d499b9528df337068120ad26aed967fad6c3fd1af7fd3f7473698760c612
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
gigabud

Malware Config

Extracted

Family

  • gigabud

C2

  • http://adcf6.cc/x/command?token=

  • http://8.219.85.91:8888/push-streaming?id=1234

Signatures

  • Gigabud family
    gigabud
  • Requests dangerous framework permissions 9 IoCs

File Explorer

  • a611d499b9528df337068120ad26aed967fad6c3fd1af7fd3f7473698760c612
    .apk 10.4MB

a611d499b9528df337068120ad26aed967fad6c3fd1af7fd3f7473698760c612

  • SHA256 a611d499b9528df337068120ad26aed967fad6c3fd1af7fd3f7473698760c612
  • MD5 SHA1 SHA512 SSDEEP
androidarch:arm
ru.yandex.taxi

Android Permissions

a611d499b9528df337068120ad26aed967fad6c3fd1af7fd3f7473698760c612

Permissions

android.permission.REQUEST_DELETE_PACKAGES

android.permission.QUERY_ALL_PACKAGES

android.permission.GET_INSTALLED_APPS

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_FRAME_BUFFER

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.INTERNET

android.permission.FOREGROUND_SERVICE

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.CAMERA

android.permission.RECORD_AUDIO

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.READ_SMS

android.permission.RECEIVE_SMS

android.permission.SEND_SMS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.SYSTEM_OVERLAY_WINDOW

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.READ_EXTERNAL_STORAGE

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.WRITE_SETTINGS

android.permission.ACCESS_NOTIFICATION_POLICY