Overview

overview

10

Static

static

10

ahmyth.apk

android-10-x64

7

f08.ps1

android-10-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    ahmyth.apk

  • Size

    47.8MB

  • MD5

    3c41131926d300cde06df1cbeb5bbefc

  • SHA1

    c0ebcc9a10459497f5e74ac5097c8bd364d93430

  • SHA256

    aa06b4f63fb8037e1f57a063f6a6b5fbe4615247458433c578644628e54a4216

  • SHA512

    db4ceb490c8bb0c65ba5cf1d01547fd7fc79e175f27924f3556d0646903bf9e87743f37591e42b3ae572c7569ba1180d122cd60dfeff18428368e870485985cd

  • SSDEEP

    786432:HRYSnEs+jq6+E+Lc5Jt7s+eOVfY2o6I2yvpykhHsrqMvyqri6p7TOob66gil2mnF:9Esf6+E+wy+eSfYVHvNhHsrqOTT/b66N

Score
10/10
ahrat

Malware Config

Extracted

Family

ahrat

C2

http://80876dd5.shop:22222

Signatures

  • Ahrat family
    ahrat
  • Requests dangerous framework permissions 4 IoCs

Files

  • ahmyth.apk
    .apk android arch:arm64 arch:arm arch:x86 arch:x64

    com.tsoft.app.iscreenrecorder

    com.tsoft.irecorder.activity.SplashActivity


  • SF-UI-Display-Thin.otf
  • f01.ttf
  • f02.ttf
  • f03.ttf
  • f04.ttf
  • f05.ttf
  • f06.ttf
  • f07.ttf
  • f08.ttf
    .ps1
  • f09.ttf
  • f10.ttf
  • f11.ttf
  • f12.ttf
  • f13.ttf
  • loading_new.json
  • rate-app.json

Android Permissions

ahmyth.apk

Permissions

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.RECORD_AUDIO

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.VIBRATE

android.permission.ACCESS_WIFI_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.CAMERA

android.permission.WAKE_LOCK

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE