cbab14a23224ad639abdb5db45b78f54

Sharing

Copy URL

Twitter E-mail

General

Target

cbab14a23224ad639abdb5db45b78f54
Size

3.4MB
MD5

cbab14a23224ad639abdb5db45b78f54
SHA1

61864f7834bd2ff95c6443488b88a19a11bfb492
SHA256

0067bf7f8b5857c2d73939b1e2944cd7bc987dde658870628def95262fabf643
SHA512

418d4c6a79b6985409ec1db47f91d2f8b2073ca56ae4ef1d1503c6d589f02e848b3ee73f6825f68c5fe740635be371f4e009617d7e00b6f1095daf3bddb513ed
SSDEEP

98304:YlTJtGgP2fE5z9RXQpndJQynGryL5oPXGoH:Y5Jtv2OhknZGryLs2+

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 6 IoCs

description	ioc
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read the user's call log.	android.permission.READ_CALL_LOG

Files

cbab14a23224ad639abdb5db45b78f54
.zip
download/Pardakht.apk
.apk android

com.pixo.rat

.main

Activities

.main

android.intent.action.MAIN

Permissions

com.pixo.rat.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
android.permission.INTERNET
android.permission.WRITE_SETTINGS
android.permission.WAKE_LOCK
android.permission.FOREGROUND_SERVICE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.ACCESS_NETWORK_STATE
android.permission.INTERNET
android.permission.READ_SMS
android.permission.SEND_SMS
android.permission.VIBRATE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.WAKE_LOCK
android.permission.FOREGROUND_SERVICE
android.permission.ACCESS_NETWORK_STATE
com.google.android.c2dm.permission.RECEIVE
com.google.android.gms.permission.AD_ID
com.pixo.rat.permission.C2D_MESSAGE
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
android.permission.RECEIVE_SMS
android.permission.READ_CONTACTS
android.permission.CALL_PHONE
android.permission.READ_CALL_LOG
android.permission.REQUEST_DELETE_PACKAGES
android.permission.DELETE_PACKAGES
android.permission.ACCESS_NOTIFICATION_POLICY
android.permission.ACCESS_WIFI_STATE

Receivers

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE
com.google.android.c2dm.intent.REGISTRATION

.firebasemessaging$firebasemessaging_BR

android.intent.action.BOOT_COMPLETED
android.provider.Telephony.SMS_RECEIVED

.starter$starter_BR

android.intent.action.BOOT_COMPLETED

Services

com.google.firebase.iid.FirebaseInstanceIdService

com.google.firebase.INSTANCE_ID_EVENT

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

anywheresoftware.b4a.objects.FirebaseNotificationsService

com.google.firebase.MESSAGING_EVENT
lmain.bal
download/css/all.min.css
download/css/bootstrap.min.css
download/css/style.css
download/download.php
.html .js
download/fonts/eot/IRANSansWeb(FaNum.html
.html
download/fonts/ttf/IRANSansWeb(FaNum.html
.html
download/fonts/woff/IRANSansWeb(FaNum.html
.html
download/fonts/woff2/IRANSansWeb(FaNum.html
.html
download/img/1.jpg
.jpg
download/img/baamf4cf.png
.png
download/img/bg-03.jpg
download/img/favicon.html
.html
download/img/hamrahbaam-logo.png
.png
download/js/bootstrap.min.html
.html
download/js/jquery.min.html
.html
download/js/parallax.min.html
.html
download/js/script.html
.html
download/webfonts/fa-brands-400.html
.html
download/webfonts/fa-brands-400.ttf
download/webfonts/fa-brands-400d41d.html
.html
download/webfonts/fa-brands-401.html
download/webfonts/fa-brands-402.html
.html
download/webfonts/fa-brands-403.html
.html
download/webfonts/fa-regular-400.html
.html
download/webfonts/fa-regular-400.ttf
download/webfonts/fa-regular-400d41d.html
.html
download/webfonts/fa-regular-401.html
download/webfonts/fa-regular-402.html
.html
download/webfonts/fa-regular-403.html
.html
download/webfonts/fa-solid-900.html
.html
download/webfonts/fa-solid-900.ttf
download/webfonts/fa-solid-900d41d.html
.html
download/webfonts/fa-solid-901.html
download/webfonts/fa-solid-902.html
.html
download/webfonts/fa-solid-903.html
.html

Sharing

General

Malware Config

Signatures

Files

com.pixo.rat

.main

Activities

.main

Permissions

Receivers

com.google.firebase.iid.FirebaseInstanceIdReceiver

.firebasemessaging$firebasemessaging_BR

.starter$starter_BR

Services

com.google.firebase.iid.FirebaseInstanceIdService

com.google.firebase.messaging.FirebaseMessagingService

anywheresoftware.b4a.objects.FirebaseNotificationsService