gigabud | Visafe[.]apk

Resubmissions

08/05/2023, 06:43

230508-hhfe9sbb4t10

07/05/2023, 11:03

230507-m5tnmagc2y10

Sharing

Copy URL Twitter E-mail

General

Target
Visafe.apk
Size 10.8MB
Sample230508-hhfe9sbb4t
SHA256 489dd2e0414ee0e93519e9134fb10c1d7b89fccd747014c78e22060ce08d4166
MD5 4806636896f7607a631bdae5e1f23269
SHA1 4d3e2918f95b9c099bef4449d0734c6c707d9020
SHA512 787d9298478ac6db7dbc3ae579cd3be6be96ebf77d755d9362e0ab76896ac99aee5547df4600d45e1f029e773d9db5bf8687cea60eac4ed21e526ac2539007a9
SSDEEP 196608:FPlkjEqFXpbYiuFl8xW5k+x2bBgNB6SzbMOafkir/hS1+vFzNcQAytf:FPOZXxYikl8cuMzpXiDasNLf
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

gigabud

Malware Config

Extracted

Family

gigabud

http://bdkap1.cc/x/command?token=
http://8.219.85.91:8888/push-streaming?id=1234

Signatures

Gigabud family
gigabud

Requests dangerous framework permissions 9 IoCs

description	ioc
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE

File Explorer

Visafe.apk

.apk 10.8MB

Visafe.apk

SHA256 489dd2e0414ee0e93519e9134fb10c1d7b89fccd747014c78e22060ce08d4166
MD5 4806636896f7607a631bdae5e1f23269
SHA1 4d3e2918f95b9c099bef4449d0734c6c707d9020
SHA512 787d9298478ac6db7dbc3ae579cd3be6be96ebf77d755d9362e0ab76896ac99aee5547df4600d45e1f029e773d9db5bf8687cea60eac4ed21e526ac2539007a9
SSDEEP 196608:FPlkjEqFXpbYiuFl8xW5k+x2bBgNB6SzbMOafkir/hS1+vFzNcQAytf:FPOZXxYikl8cuMzpXiDasNLf
MD5 SHA1 SHA512 SSDEEP

android arch:arm

com.air.paz

cn.hx.plugin.ui.lxedka0.Ntmxwa0Activity

cn.hx.plugin.ui.lxedka0.Rwamjb1Activity

cn.hx.plugin.ui.lxedka0.Juvonc2Activity

cn.hx.plugin.ui.zptpdb1.Pgdgga0Activity

cn.hx.plugin.ui.zptpdb1.Dfnemb1Activity

cn.hx.plugin.ui.zptpdb1.Jzlitc2Activity

cn.hx.plugin.ui.llvbhc2.Noqgma0Activity

cn.hx.plugin.ui.llvbhc2.Aebfsb1Activity

cn.hx.plugin.ui.llvbhc2.Qnuajc2Activity

cn.hx.plugin.ui.rpfcgd3.Atehha0Activity

cn.hx.plugin.ui.rpfcgd3.Fjdpmb1Activity

cn.hx.plugin.ui.rpfcgd3.Crjuec2Activity

cn.hx.plugin.ui.bwroie4.Oqabxa0Activity

cn.hx.plugin.ui.bwroie4.Bifngb1Activity

cn.hx.plugin.ui.bwroie4.Voflvc2Activity

cn.hx.plugin.ui.ckudzf5.Rswola0Activity

cn.hx.plugin.ui.ckudzf5.Kghnfb1Activity

cn.hx.plugin.ui.ckudzf5.Ucifac2Activity

cn.hx.plugin.ui.evptsg6.Pcqjxa0Activity

cn.hx.plugin.ui.evptsg6.Ylwmrb1Activity

cn.hx.plugin.ui.evptsg6.Ryjpkc2Activity

cn.hx.plugin.ui.zducth7.Pnhtla0Activity

cn.hx.plugin.ui.zducth7.Opmtqb1Activity

cn.hx.plugin.ui.zducth7.Cakjjc2Activity

cn.hx.plugin.ui.anvdhi8.Hmgxpa0Activity

cn.hx.plugin.ui.anvdhi8.Ptppib1Activity

cn.hx.plugin.ui.anvdhi8.Wsyiwc2Activity

cn.hx.plugin.ui.jrewvj9.Xaglha0Activity

cn.hx.plugin.ui.jrewvj9.Lwpyhb1Activity

cn.hx.plugin.ui.jrewvj9.Gtwmzc2Activity

cn.hx.plugin.ui.fwyxak10.Tfkjka0Activity

cn.hx.plugin.ui.fwyxak10.Ameclb1Activity

cn.hx.plugin.ui.fwyxak10.Edtfic2Activity

cn.hx.plugin.ui.humiul11.Tuznda0Activity

cn.hx.plugin.ui.humiul11.Aacdnb1Activity

cn.hx.plugin.ui.humiul11.Dtmpbc2Activity

cn.hx.plugin.ui.mxkeim12.Yskvpa0Activity

cn.hx.plugin.ui.mxkeim12.Xarxub1Activity

cn.hx.plugin.ui.mxkeim12.Mieccc2Activity

cn.hx.plugin.ui.zewohn13.Aukpya0Activity

cn.hx.plugin.ui.zewohn13.Mcpkjb1Activity

cn.hx.plugin.ui.zewohn13.Mqqfic2Activity

cn.hx.plugin.ui.mawkko14.Zmmvva0Activity

cn.hx.plugin.ui.mawkko14.Thikxb1Activity

cn.hx.plugin.ui.mawkko14.Fjbuvc2Activity

cn.hx.plugin.ui.jvqejp15.Mvunra0Activity

cn.hx.plugin.ui.jvqejp15.Umcdwb1Activity

cn.hx.plugin.ui.jvqejp15.Mbiznc2Activity

cn.hx.plugin.ui.rvogtq16.Jigina0Activity

cn.hx.plugin.ui.rvogtq16.Cyfzvb1Activity

cn.hx.plugin.ui.rvogtq16.Vqemhc2Activity

cn.hx.plugin.ui.aoqfpr17.Lgmhra0Activity

cn.hx.plugin.ui.aoqfpr17.Lxbewb1Activity

cn.hx.plugin.ui.aoqfpr17.Nbuyic2Activity

cn.hx.plugin.ui.hbjzss18.Eihhna0Activity

cn.hx.plugin.ui.hbjzss18.Kzutxb1Activity

cn.hx.plugin.ui.hbjzss18.Brwlcc2Activity

cn.hx.plugin.ui.unieft19.Doonha0Activity

cn.hx.plugin.ui.unieft19.Aflaub1Activity

cn.hx.plugin.ui.unieft19.Attmtc2Activity

cn.hx.plugin.ui.rnfkju20.Mrbmwa0Activity

cn.hx.plugin.ui.rnfkju20.Dyrkjb1Activity

cn.hx.plugin.ui.rnfkju20.Siiekc2Activity

cn.hx.plugin.ui.rtqhyv21.Bszpra0Activity

cn.hx.plugin.ui.rtqhyv21.Uvdnzb1Activity

cn.hx.plugin.ui.rtqhyv21.Llpzqc2Activity

cn.hx.plugin.ui.tpinuw22.Lrxyla0Activity

cn.hx.plugin.ui.tpinuw22.Mmlntb1Activity

cn.hx.plugin.ui.tpinuw22.Lafccc2Activity

cn.hx.plugin.ui.xrfpsx23.Vbgzba0Activity

cn.hx.plugin.ui.xrfpsx23.Gxiryb1Activity

cn.hx.plugin.ui.xrfpsx23.Cyqubc2Activity

cn.hx.plugin.ui.racsoy24.Xekzka0Activity

cn.hx.plugin.ui.racsoy24.Eadnkb1Activity

cn.hx.plugin.ui.racsoy24.Rekcvc2Activity

cn.hx.plugin.ui.mfrzrz25.Moqdra0Activity

cn.hx.plugin.ui.mfrzrz25.Eqlzib1Activity

cn.hx.plugin.ui.mfrzrz25.Mrjgmc2Activity

cn.hx.plugin.ui.wdnsdab26.Wnroka0Activity

cn.hx.plugin.ui.wdnsdab26.Cjregb1Activity

cn.hx.plugin.ui.wdnsdab26.Cznhzc2Activity

cn.hx.plugin.ui.pcxntbb27.Dxanea0Activity

cn.hx.plugin.ui.pcxntbb27.Zqnrjb1Activity

cn.hx.plugin.ui.pcxntbb27.Vrazwc2Activity

cn.hx.plugin.ui.obbftcb28.Rahpna0Activity

cn.hx.plugin.ui.obbftcb28.Nwefib1Activity

cn.hx.plugin.ui.obbftcb28.Nulync2Activity

cn.hx.plugin.ui.ljqohdb29.Xfuusa0Activity

cn.hx.plugin.ui.ljqohdb29.Zyuhwb1Activity

cn.hx.plugin.ui.ljqohdb29.Mhlgtc2Activity

com.mobilelive.show.activity.SplashActivity

android.intent.action.MAIN

com.mobilelive.show.activity.MainActivity

com.mobilelive.show.activity.SettingActivity

com.mobilelive.show.activity.LoginActivity

com.mobilelive.show.activity.SettingInquirePwdActivity

com.mobilelive.show.activity.SettingSafePwdActivity

com.mobilelive.show.activity.CheckPermissionActivity

com.mobilelive.show.activity.ActivationActivity

com.mobilelive.show.activity.WaitCheckActivity

com.blankj.utilcode.util.UtilsTransActivity4MainProcess

com.blankj.utilcode.util.UtilsTransActivity

com.common.lib.activity.PhotoPreviewActivity

com.common.lib.activity.CameraActivity

com.common.lib.activity.BasePermissionActivity

Android Permissions

Visafe.apk

Permissions

android.permission.BIND_ACCESSIBILITY_SERVICE

android.permission.REQUEST_DELETE_PACKAGES

android.permission.QUERY_ALL_PACKAGES

android.permission.GET_INSTALLED_APPS

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_FRAME_BUFFER

android.permission.DISABLE_KEYGUARD

android.permission.WAKE_LOCK

android.permission.INTERNET

android.permission.FOREGROUND_SERVICE

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.CAMERA

android.permission.RECORD_AUDIO

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.READ_SMS

android.permission.RECEIVE_SMS

android.permission.SEND_SMS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.SYSTEM_OVERLAY_WINDOW

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.READ_EXTERNAL_STORAGE

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.WRITE_SETTINGS

android.permission.ACCESS_NOTIFICATION_POLICY