bb8cafdd13a9d6d162b9abcd6d89e56c[.]bin

General

Target

bb8cafdd13a9d6d162b9abcd6d89e56c.bin
Size

1.7MB
MD5

98f9fba9f1c2582e39e58188fc8674b0
SHA1

e2cde868e0e6db0565e8a0a07cd5c4dc63ab2243
SHA256

73d6c9d5f9c97232bd1f40c83e2d0aaf701dbff3f67aae33523b9cd51be6d9aa
SHA512

67ea2a94d26cdf7beb1f67c0bf3120dd33163a3acb49ee98df52c230307018861c69e38250993adb5b4b13899f8d60add88b7f8eda7402fc131f81cdeba1e1d1
SSDEEP

49152:qTWjs3WMpIWTUqXU39VsOcuTVJXtp1Eq1q:KQfsEVrl1q

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 8 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to receive WAP push messages.	android.permission.RECEIVE_WAP_PUSH
Allows an application to send SMS messages.	android.permission.SEND_SMS

Files

bb8cafdd13a9d6d162b9abcd6d89e56c.bin
.zip

Password: infected
8059600b1e542b12832d080cf0b4b0a73738369d1be981604471e67d1c78aaaa.apk
.apk android arch:arm

com.ydbl.kudou

.MainActivity

Activities

.MainActivity

android.intent.action.MAIN

com.google.zxing.client.android.CaptureActivity

com.google.zxing.client.android.SCAN

.NoticeActivity

com.ydbl.kudou.notice

.ShareListActivity

com.ydbl.kudou.sharelist

Permissions

android.permission.INTERNET
android.permission.INSTALL_PACKAGES
android.permission.ACTION_VIEW
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.RESTART_PACKAGES
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.READ_PHONE_STATE
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_NETWORK_STATE
android.permission.READ_PHONE_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.RECEIVE_SMS
android.permission.RECEIVE_WAP_PUSH
android.permission.WRITE_APN_SETTINGS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.WAKE_LOCK
android.permission.WRITE_APN_SETTINGS
android.permission.CHANGE_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.SET_WALLPAPER
android.permission.SEND_SMS

Receivers

com.android.service.PlugService

com.android.service.PlugService

com.android.service.PlugBootRecv

android.intent.action.BOOT_COMPLETED

com.android.service.PlugSmsRecevier

android.provider.Telephony.SMS_RECEIVED

myreceiver.MyReceiver

com.ydbl.action.push
com.ydbl.action.pushinit

myreceiver.InstallReceiver

android.intent.action.PACKAGE_ADDED

myreceiver.SilenceReceiver

com.ydbl.action.silenceinstall

Services

myreceiver.DownloadService

com.ydbl.action.download

Sharing

General

Malware Config

Signatures

Files

Password: infected

com.ydbl.kudou

.MainActivity

Activities

.MainActivity

com.google.zxing.client.android.CaptureActivity

.NoticeActivity

.ShareListActivity

Permissions

Receivers

com.android.service.PlugService

com.android.service.PlugBootRecv

com.android.service.PlugSmsRecevier

myreceiver.MyReceiver

myreceiver.InstallReceiver

myreceiver.SilenceReceiver

Services

myreceiver.DownloadService