General

  • Target

    861414557bdf1533694744501029396afa6d6bf010174262f7b47f1ce6cd9871.bin

  • Size

    1.9MB

  • MD5

    96a03aa8b96d83b6a5ca370a58bf47d2

  • SHA1

    78808fa9f2db692605e7086372279213787bf3af

  • SHA256

    861414557bdf1533694744501029396afa6d6bf010174262f7b47f1ce6cd9871

  • SHA512

    39dafe254a410c6947cc99b960c00d62d24ef3aeccbba082ce8115218d9ad9da4fe1a265853d2b1edffc81567a796dde9a9bf15ff4a3d20f3d09004bdba05e54

  • SSDEEP

    49152:xHa520B/igJ7dm4BOEhLdDpkMmlf3PtoXi7WB4ofqqfRkYN3Tu4ahHIJZJgv:MMU/9J7ZBVleMmpfiSb8RkYpSrIJZM

Score
7/10

Malware Config

Signatures

  • Requests dangerous framework permissions 24 IoCs

Files

  • 861414557bdf1533694744501029396afa6d6bf010174262f7b47f1ce6cd9871.bin
    .apk android arch:x86 arch:arm64 arch:x64 arch:arm

    com.agewaites

    com.agewaites.p088s


  • Gilroy-Bold.ttf
  • RQxTHE.json
  • audience.json
  • audience_IR.json
  • audience_RU.json
  • bug_arrow.png
  • common_config.json
  • dt-mraid-video-controller.js
    .js
  • dt-omsdk-mraid-video-tracker.js
    .js
  • features_config.json
  • fyb_iframe_endcard_tmpl.html
    .html
  • fyb_static_endcard_tmpl.html
    .js
  • help.txt
  • ia_js_load_monitor.txt
    .html .js
  • ia_mraid_bridge.txt
    .html .js
  • ike_readme2
  • ir_config.json
  • lut.png
  • map.png
  • nopie_openvpn.arm64-v8a
    .elf linux
  • nopie_openvpn.armeabi-v7a
    .elf linux arm
  • omid-session-client-v1.js
    .js
  • open_readme
  • p2p.json
  • pie_openvpn.arm64-v8a
    .elf linux
  • pie_openvpn.armeabi-v7a
    .elf linux arm
  • privacy.txt
  • ru_config.json
  • server_IR
  • server_RU
  • splash_background_ydt.svg
  • splash_fasta.png
  • splash_market_carrier.webp
  • splash_market_tpl_courier.webp
  • splash_oto.png
  • splash_rida.webp
  • splash_taksimax.png
  • splash_temtem.png
  • splash_turla.webp
  • vpaid_html_template.html
    .html .js
  • webview_error.html
    .html
  • ydt_logo.png
  • ydt_logo_alt.png
  • youtube_sans_light.xml
    .xml

Android Permissions

861414557bdf1533694744501029396afa6d6bf010174262f7b47f1ce6cd9871.bin

Permissions

android.permission.READ_EXTERNAL_STORAGE

android.permission.GET_CLIPS

android.permission.RECEIVE_LAUNCH_BROADCASTS

android.permission.EXPAND_STATUS_BAR

android.permission.WRITE_CLIPS

android.permission.DISABLE_KEYGUARD

android.permission.VIBRATE

com.sonymobile.home.permission.PROVIDER_INSERT_BADGE

android.permission.INTERNET

android.permission.REQUEST_COMPANION_RUN_IN_BACKGROUND

android.permission.GET_ACCOUNTS

android.permission.USE_FINGERPRINT

android.permission.REQUEST_DELETE_PACKAGES

android.permission.MANAGE_EXTERNAL_STORAGE

com.anddoes.launcher.permission.UPDATE_COUNT

android.permission.QUICKBOOT_POWERON

android.permission.READ_PHONE_STATE

android.permission.ADD_VOICEMAIL

com.sonyericsson.home.permission.BROADCAST_BADGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.RECORD_AUDIO

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.CLEAR_APP_CACHE

android.permission.WAKE_LOCK

android.permission.READ_SMS

android.permission.WRITE_CONTACTS

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.ACCESS_WIFI_STATE

android.permission.READ_CONTACTS

android.permission.ACTION_MANAGE_OVERLAY_PERMISSION

android.permission.USES_POLICY_FORCE_LOCK

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.EXPAND_STATUS_BAR

android.permission.RECEIVE_SMS

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.READ_CLIPS

android.permission.WRITE_SETTINGS

android.permission.INTERNET

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.REORDER_TASKS

android.permission.ACCESS_NETWORK_STATE

android.permission.FOREGROUND_SERVICE

android.permission.INSTALL_SHORTCUT

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.REQUEST_DELETE_PACKAGES

android.permission.READ_PHONE_STATE

android.permission.GET_PACKAGE_SIZE

android.Manifest.permission.READ_PHONE_STATE