General

  • Target

    5f2b9f9234e3139f856c980712e70f00cd4aa3ea70bd6e12c72237319f007b66.bin

  • Size

    1.1MB

  • MD5

    9233dfe10b25b2cf7de1755e7daf4636

  • SHA1

    59cb243ced9777f2dfb7ddebbb65b6b0a866fa1c

  • SHA256

    5f2b9f9234e3139f856c980712e70f00cd4aa3ea70bd6e12c72237319f007b66

  • SHA512

    ceee550f5ae4ef19033dd77c60d139fef4bf7ea1702465c876965934b901de7dc754b27a0584c490aec805d8b561925fbba0446dfb20f0bc48aaa54c9ac2900f

  • SSDEEP

    24576:FPXv+v5WKkh9Tx/jz9ndqs26sXEaHFQjctgT2hOIgZNU/kDA6:FPXmvmhhxrz9dqL7NFQo3lWUcDJ

Score
7/10

Malware Config

Signatures

  • Requests dangerous framework permissions 8 IoCs

Files

  • 5f2b9f9234e3139f856c980712e70f00cd4aa3ea70bd6e12c72237319f007b66.bin
    .apk android

    com.cushion.hamster

    com.pvq.pfknnhvid.qjffdcngvlfu


  • DialogAnimation.xml
  • FAB-blue.svg
    .xml
  • FAB.svg
  • FAB2.svg
    .xml
  • I18N_sys_emoji.json
  • Rjn.json
  • ScreenAnimation.xml
  • accordion-chevron.svg
  • addnewbtn.png
  • albumart.jpg
    .jpg
  • alert_icon.svg
  • annotation-xml.js
    .js
  • apple.svg
    .xml
  • arrow-back.svg
  • arrow.svg
    .xml
  • bear.svg
    .xml
  • bird.svg
    .xml
  • boom.svg
    .xml
  • callout.svg
    .xml
  • callout_11_shadow.svg
    .xml
  • callout_7_overlay.svg
    .xml
  • callout_8_overlay.svg
    .xml
  • callout_cloud.svg
    .xml
  • callout_dest_bubble.svg
    .xml
  • callout_shape_2.svg
    .xml
  • callout_shape_4.svg
    .xml
  • callout_shape_5.svg
    .xml
  • callout_shape_6.svg
    .xml
  • caret-comment.svg
    .xml
  • caution_icon.svg
  • chain_1.png
  • chain_2.png
  • checkmark_icon.svg
  • chevron-down.svg
  • chevron-next.svg
    .xml
  • chevron-prev.svg
    .xml
  • circle.svg
    .xml
  • close-blue.svg
  • close-white.svg
  • close.svg
  • cloth_1.png
  • cloth_1_b.png
  • cloth_2.png
  • cloth_2_b.png
  • cloud.svg
    .xml
  • cloud_down.svg
    .xml
  • comment-response.svg
    .xml
  • comments.svg
  • common_feed_anim_follow_people.json
  • copybtn.png
  • crab.svg
    .xml
  • crashlytics-build.properties
  • crown.svg
    .xml
  • crystal.svg
    .xml
  • crystal2.svg
    .xml
  • deletebtn.png
  • diamond_1.png
  • diamond_2.png
  • dn.gif
    .gif
  • drawing-comment-selected.svg
    .xml
  • drawing-comment.svg
    .xml
  • end-of-content.png
  • end-of-document-checkmark.svg
  • equalizerbtn.png
  • exitbtn.png
  • features_config.json
  • feed_guide_hand_swip_lottie.json
  • feed_live_volume_icon_lottie_s1.json
  • feed_long_press_lottie.json
  • feedback-fab.svg
    .xml
  • file.gif
    .gif
  • fix-content-icon.svg
  • folder.gif
    .gif
  • gobackbtn.png
  • goforwardbtn.png
  • gold_1.png
  • gold_2.png
  • i_message_1.svg
    .xml
  • i_message_2.svg
    .xml
  • i_message_3.svg
    .xml
  • i_message_4.svg
    .xml
  • icon.png
  • icon_home_like_new.json
  • im_upvote_repost_guide.json
  • iron_1.png
  • iron_2.png
  • java_sandbox.policy
  • jumpbackward_button.png
  • jumpforward_button.png
  • libBIBUtils.so
    .elf linux arm
  • libcrashlytics-handler.so
    .elf linux arm
  • libcrashlytics-trampoline.so
    .elf linux arm
  • libcrashlytics.so
    .elf linux arm
  • libopencv_info.so
    .elf linux arm
  • little_audio_wave_anim.json
  • log4j-rce-patch-1.12.xml
    .xml
  • log4j-rce-patch-1.7.xml
    .xml
  • message-share-motion-icon.json
  • notsy.bmnetwork
  • pack_icon.png
  • pausebtn.png
  • playback_speed.png
  • playbtn.png
  • power.png
  • secondarybtn.png
  • selbtn.png
  • silence.mp3
  • sleep_timer.png
  • sortnamebtn.png
  • story_slide_guide.json
  • strings.txt
  • up.gif
    .gif
  • upvote_comment_recommended.json
  • upvote_comment_reposted.json
  • valentine_cloud.svg
    .xml
  • valentine_cloud_overlay.svg
    .xml
  • valentine_red_heart.svg
    .xml
  • zip.gif
    .gif
  • zipbtn.png
  • zoombtn.png

Android Permissions

5f2b9f9234e3139f856c980712e70f00cd4aa3ea70bd6e12c72237319f007b66.bin

Permissions

android.permission.RECEIVE_LAUNCH_BROADCASTS

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.RECEIVE_SMS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_CONTACTS

android.permission.BLUETOOTH

android.permission.CALL_PHONE

android.permission.QUICKBOOT_POWERON

com.google.android.gms.permission.ACTIVITY_RECOGNITION

android.permission.QUERY_ALL_PACKAGES

android.permission.REQUEST_DELETE_PACKAGES

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.ACTION_MANAGE_OVERLAY_PERMISSION

android.permission.READ_PHONE_STATE

android.permission.GET_PACKAGE_SIZE

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.DISABLE_KEYGUARD

android.permission.SYSTEM_ALERT_WINDOW

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.WAKE_LOCK

android.permission.READ_EXTERNAL_STORAGE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.GET_TASKS

android.permission.RECEIVE_BOOT_COMPLETED