General

  • Target

    3d6755c53eae23e002399240eaec791efb62601f8fb1f9c14b29171952646597

  • Size

    11.5MB

  • MD5

    e6f71b2be12c2446dcd602aaa4967be2

  • SHA1

    9e4f1c2f8ba62aeb63e8039cb3969b98fc00ec1d

  • SHA256

    3d6755c53eae23e002399240eaec791efb62601f8fb1f9c14b29171952646597

  • SHA512

    cb31df8679b8b0ed5f5bc6688f24e7c47cd795d1f7f92f9aa6da77969c55e0eded424c3d1f2df0c14e1f2305750685a3e634635d20e778b032cda47a55d19d1e

  • SSDEEP

    196608:fosjAM8PYkvUbdVzJfGFkGfkyu4gVEY0X1YR4Q4lbDOQ6efHRDsa70GxNr44W4:bAM8PY2UJlpqMDxE3Fa4Q4lXz6eRMc48

Score
10/10

Malware Config

Extracted

Family

gigabud

C2

http://adcf6.cc/x/command?token=

http://8.219.85.91:8888/push-streaming?id=1234

Signatures

  • Gigabud family
  • Requests dangerous framework permissions 9 IoCs

Files

  • 3d6755c53eae23e002399240eaec791efb62601f8fb1f9c14b29171952646597
    .apk android arch:arm

    com.simplemobiletools.calendar.pro

    com.mobilelive.show.activity.SplashActivity


  • ThaiLife-Add-On.apk
    .apk android arch:arm

    com.tailife.addon


Android Permissions

3d6755c53eae23e002399240eaec791efb62601f8fb1f9c14b29171952646597

Permissions

android.permission.REQUEST_DELETE_PACKAGES

android.permission.QUERY_ALL_PACKAGES

android.permission.GET_INSTALLED_APPS

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_FRAME_BUFFER

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.INTERNET

android.permission.FOREGROUND_SERVICE

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.CAMERA

android.permission.RECORD_AUDIO

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.READ_SMS

android.permission.RECEIVE_SMS

android.permission.SEND_SMS

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.READ_EXTERNAL_STORAGE

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.WRITE_SETTINGS

android.permission.ACCESS_NOTIFICATION_POLICY