b3b6a47aa1b1d8d21ba3e1f7db1210dc5ff90cff89739fd1002889b87a07e157[.]bin | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
b3b6a47aa1b1d8d21ba3e1f7db1210dc5ff90cff89739fd1002889b87a07e157.bin
Size 2.0MB
Sample230719-x5k2laag55
SHA256 b3b6a47aa1b1d8d21ba3e1f7db1210dc5ff90cff89739fd1002889b87a07e157
MD5 bc9b93848ac3d38f68f99a91c2428343
SHA1 796ceaa60c838d7a97e70c822bfce8f77b192963
SHA512 d80e3858d0a6e938a68f658983980c512934f788b3829ba728d3072d7913b0719abcb49ced57653c9491c4fe39ba1826dddcdb272e7fe81dbcb12e19703fc204
SSDEEP 24576:5cYsudeQ3Njm5MYUsmDkHnN4yoLNu7Oab2Rpb65gwROQKgb3u3TcPk/MxsXGGeFg:5cYsudeL8smD6oBuJnKgjS4k/gOtqg+M
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 8 IoCs

description	ioc
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an app to access location in the background.	android.permission.ACCESS_BACKGROUND_LOCATION
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE

File Explorer

b3b6a47aa1b1d8d21ba3e1f7db1210dc5ff90cff89739fd1002889b87a07e157.bin

SHA256 b3b6a47aa1b1d8d21ba3e1f7db1210dc5ff90cff89739fd1002889b87a07e157
MD5 bc9b93848ac3d38f68f99a91c2428343
SHA1 796ceaa60c838d7a97e70c822bfce8f77b192963
SHA512 d80e3858d0a6e938a68f658983980c512934f788b3829ba728d3072d7913b0719abcb49ced57653c9491c4fe39ba1826dddcdb272e7fe81dbcb12e19703fc204
SSDEEP 24576:5cYsudeQ3Njm5MYUsmDkHnN4yoLNu7Oab2Rpb65gwROQKgb3u3TcPk/MxsXGGeFg:5cYsudeL8smD6oBuJnKgjS4k/gOtqg+M
MD5 SHA1 SHA512 SSDEEP

android arch:arm64 arch:x64 arch:arm arch:x86

com.therenewxl

Android Permissions

b3b6a47aa1b1d8d21ba3e1f7db1210dc5ff90cff89739fd1002889b87a07e157.bin

Permissions

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.CLEAR_APP_CACHE

com.anddoes.launcher.permission.UPDATE_COUNT

android.permission.WRITE_SETTINGS

android.permission.ACCESS_WIFI_STATE

android.permission.WAKE_LOCK

android.permission.USES_POLICY_FORCE_LOCK

android.permission.REORDER_TASKS

com.sonymobile.home.permission.PROVIDER_INSERT_BADGE

android.permission.VIBRATE

android.permission.SEND_SMS

android.permission.ACCESS_BACKGROUND_LOCATION

android.permission.READ_PHONE_STATE

android.permission.INSTALL_SHORTCUT

android.permission.ACCESS_NETWORK_STATE

android.permission.GET_PACKAGE_SIZE

com.sonyericsson.home.permission.BROADCAST_BADGE

android.permission.FOREGROUND_SERVICE

android.permission.READ_EXTERNAL_STORAGE

android.permission.RECORD_AUDIO

android.permission.READ_SMS

android.permission.REQUEST_COMPANION_USE_DATA_IN_BACKGROUND

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.INTERNET

android.permission.BATTERY_STATS

android.permission.RECEIVE_SMS

android.permission.REQUEST_DELETE_PACKAGES

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.CALL_PHONE

android.permission.MANAGE_EXTERNAL_STORAGE

android.Manifest.permission.READ_PHONE_STATE

android.permission.REQUEST_COMPANION_RUN_IN_BACKGROUND

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.MODIFY_AUDIO_SETTINGS