Overview

overview

10

Static

static

10

7c62.apk

android-9-x86

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    7c62

  • Size

    10.4MB

  • MD5

    7c627a135e9c24fd9d1546ea39f6570d

  • SHA1

    b4d97e8b0f541b981d72d5893759bb1337b5ffb5

  • SHA256

    5c23f5d3e75d0fd28aa30a84bfae5d35f0b13d351b3eb1aa086efed7fc2cd60a

  • SHA512

    d06003acb1d4b83fb7dbbb50e6440db1c9d37e926e580fae905d06756bc57d254294182fb4193e62126a03d1659efb402a2845fff2b38993a4cd4fa5aba57412

  • SSDEEP

    196608:JUJUL5wo+H8/ZMwG7+qhvm67DWTUxeF1AO751JsLnaxSvnecPbA5EU70Gx+3liH2:qJY5wr+ZMwG7+qhvm6PWTUxKu65IOxSP

Score
10/10
gigabud

Malware Config

Extracted

Family

gigabud

C2

http://adcf6.cc/x/command?token=

http://8.219.85.91:8888/push-streaming?id=1234

Signatures

  • Gigabud family
    gigabud
  • Requests dangerous framework permissions 9 IoCs

Files

  • 7c62
    .apk android arch:arm

    ru.yandex.taxi

    com.mobilelive.showCommunity.activity.SplashActivity


Android Permissions

7c62

Permissions

android.permission.REQUEST_DELETE_PACKAGES

android.permission.QUERY_ALL_PACKAGES

android.permission.GET_INSTALLED_APPS

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_FRAME_BUFFER

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.INTERNET

android.permission.FOREGROUND_SERVICE

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.CAMERA

android.permission.RECORD_AUDIO

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.READ_SMS

android.permission.RECEIVE_SMS

android.permission.SEND_SMS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.SYSTEM_OVERLAY_WINDOW

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.READ_EXTERNAL_STORAGE

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.WRITE_SETTINGS

android.permission.ACCESS_NOTIFICATION_POLICY