General

  • Target

    164a93b3ac1b0102344d721ff9ca3e6f.bin

  • Size

    1.3MB

  • MD5

    164a93b3ac1b0102344d721ff9ca3e6f

  • SHA1

    965d118cb80ccdbc6e95e530a314cb4b85ae1b42

  • SHA256

    53de1e0963cbc59e78c6143a6f023e2fcefc45a681fadc6d06d400226764d01b

  • SHA512

    7433054c80f082b5ef91120addbad95fa32c23e83d27d3f023ce1437bac8392d9ebdfa1139a076482570fb086385cf68bbc7cb68e2ebe650818abaa5db0225d4

  • SSDEEP

    24576:6scecbYVSnLoIuadpK9fkMmvFd8qCHW1iQzu96p835Bepz11wBhLOg:6s9wnLoILvAZKMJawBhd

Score
10/10

Malware Config

Extracted

Family

daam

C2

http://192.99.251.51:3000

Attributes
  • uri

    /socket.io

Signatures

  • Daam family
  • Requests dangerous framework permissions 15 IoCs

Files

  • 164a93b3ac1b0102344d721ff9ca3e6f.bin
    .apk android

    ir.andromedads.interestcalculator

    net.dscorp.interestcalculator.MainActivity


Android Permissions

164a93b3ac1b0102344d721ff9ca3e6f.bin

Permissions

android.permission.INTERNET

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.GET_ACCOUNTS

android.permission.READ_CALL_LOG

android.permission.WRITE_CALL_LOG

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.CAMERA

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.RECORD_AUDIO

android.permission.READ_PHONE_STATE

android.permission.READ_HISTORY_BOOKMARKS

com.android.callservice.permission.READ_WRITE_BOOKMARK_FOLDERS

com.android.browser.permission.READ_HISTORY_BOOKMARKS

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WAKE_LOCK