General

  • Target

    49afc704ffaa3eeab0d1c6e39fb11b0c3bb2ec765c2391388f6733291101a4eb

  • Size

    6.4MB

  • MD5

    1d451a63490ec2b918ebfe0fc8b8b650

  • SHA1

    9a5c915ee5f9c411632658d855fe1426b709fe36

  • SHA256

    49afc704ffaa3eeab0d1c6e39fb11b0c3bb2ec765c2391388f6733291101a4eb

  • SHA512

    9c69ba1cf67a484f81a90b9fae7ee50343aeb3f636a93ff1add1304396d667b72c1b4f9c1aaf0e5cd5b67da4fcbaa98e89726e8410afabdf98dc00c6ed2090fb

  • SSDEEP

    98304:HGwamLGjeQzjnvUknOsoE+wV1gJ5G4qEdpc8Gcwta4QdGrtsArEGzQRafrYmz:HGwmnjvUkOc+upEb5G0GxsArEGcOz

Score
10/10

Malware Config

Extracted

Family

gigabud

C2

http://adcf6.cc/x/command?token=

http://8.219.85.91:8888/push-streaming?id=1234

Signatures

  • Gigabud family
  • Requests dangerous framework permissions 9 IoCs

Files

  • 49afc704ffaa3eeab0d1c6e39fb11b0c3bb2ec765c2391388f6733291101a4eb
    .apk android arch:arm

    com.greentech.quran

    com.mobilelive.showCommunity.activity.SplashActivity


Android Permissions

49afc704ffaa3eeab0d1c6e39fb11b0c3bb2ec765c2391388f6733291101a4eb

Permissions

android.permission.BIND_ACCESSIBILITY_SERVICE

android.permission.REQUEST_DELETE_PACKAGES

android.permission.QUERY_ALL_PACKAGES

android.permission.GET_INSTALLED_APPS

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_FRAME_BUFFER

android.permission.INTERNET

android.permission.FOREGROUND_SERVICE

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.CAMERA

android.permission.RECORD_AUDIO

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.READ_SMS

android.permission.RECEIVE_SMS

android.permission.SEND_SMS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.SYSTEM_OVERLAY_WINDOW

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.READ_EXTERNAL_STORAGE

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.WRITE_SETTINGS

android.permission.ACCESS_NOTIFICATION_POLICY