a427bd8c697a0776f06974ab1927a2c31acb30b9159066f4bc1dacbdce51253a[.]bin

General

Target
a427bd8c697a0776f06974ab1927a2c31acb30b9159066f4bc1dacbdce51253a.bin
Size 541KB
Sample230720-1a2mmsag36
SHA256 a427bd8c697a0776f06974ab1927a2c31acb30b9159066f4bc1dacbdce51253a
MD5 4fb1980fa9d8c1d3ed144bd020122143
SHA1 bc0b7eda34203b83f4050e81d1131e542a130c5d
SHA512 1fd9818247f7821b15a516ff199607dd55bfef07910c925eabe6dd63e395903ba00b21d2034921ccb24d1a8c562f58592b3ebd1918880c09f8d0d5f3ea5f6b22
SSDEEP 12288:bggw22T5MSVf+xsXfrCPACF3jYitbQUdQgDC4ssIq2FUCZFn/:Ut2cZVfVXfHCF3jYitFQgDC5JfFZn/
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 7 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE

File Explorer

a427bd8c697a0776f06974ab1927a2c31acb30b9159066f4bc1dacbdce51253a.bin

.apk 541KB

a427bd8c697a0776f06974ab1927a2c31acb30b9159066f4bc1dacbdce51253a.bin

SHA256 a427bd8c697a0776f06974ab1927a2c31acb30b9159066f4bc1dacbdce51253a
MD5 4fb1980fa9d8c1d3ed144bd020122143
SHA1 bc0b7eda34203b83f4050e81d1131e542a130c5d
SHA512 1fd9818247f7821b15a516ff199607dd55bfef07910c925eabe6dd63e395903ba00b21d2034921ccb24d1a8c562f58592b3ebd1918880c09f8d0d5f3ea5f6b22
SSDEEP 12288:bggw22T5MSVf+xsXfrCPACF3jYitbQUdQgDC4ssIq2FUCZFn/:Ut2cZVfVXfHCF3jYitFQgDC5JfFZn/
MD5 SHA1 SHA512 SSDEEP

android arch:arm64 arch:arm arch:x86 arch:x64

com.rivercontainnih

Android Permissions

a427bd8c697a0776f06974ab1927a2c31acb30b9159066f4bc1dacbdce51253a.bin

Permissions

android.permission.GET_PACKAGE_SIZE

android.permission.CLEAR_APP_CACHE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.ADD_VOICEMAIL

android.permission.USE_FINGERPRINT

android.permission.INSTALL_SHORTCUT

android.permission.BATTERY_STATS

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.INTERNET

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.Manifest.permission.READ_PHONE_STATE

android.permission.SEND_SMS

android.permission.WAKE_LOCK

android.permission.READ_PHONE_STATE

android.permission.CALL_PHONE

android.permission.USES_POLICY_FORCE_LOCK

android.permission.VIBRATE

android.permission.REQUEST_COMPANION_RUN_IN_BACKGROUND

android.permission.REQUEST_COMPANION_USE_DATA_IN_BACKGROUND

android.permission.REQUEST_DELETE_PACKAGES

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_SETTINGS

android.permission.REORDER_TASKS

Sharing

General

Malware Config

Signatures

File Explorer

a427bd8c697a0776f06974ab1927a2c31acb30b9159066f4bc1dacbdce51253a.bin

com.rivercontainnih.p065o

com.rivercontainnih.p057w

com.rivercontainnih.p027p

com.rivercontainnih.p099p

com.rivercontainnih.p036g

com.rivercontainnih.p052h

com.rivercontainnih.p059d

com.rivercontainnih.p030r

com.rivercontainnih.p054y

com.rivercontainnih.p041e

com.rivercontainnih.p090k

com.rivercontainnih.gojhthecxlswmpb

com.rivercontainnih.ltaeqytsai

com.rivercontainnih.uqtagphowygoydc

com.rivercontainnih.gmcyjhsvyyud

com.rivercontainnih.spiybzxpypxcwau

com.rivercontainnih.pwfnearljkdpyrm

com.rivercontainnih.p073q

com.rivercontainnih.p081b

com.rivercontainnih.p041b

com.rivercontainnih.LogSrv

com.rivercontainnih.p092b

com.rivercontainnih.p043q

com.rivercontainnih.p089t

com.rivercontainnih.p098d

com.rivercontainnih.p018a

com.rivercontainnih.p011d

com.rivercontainnih.p051n

com.rivercontainnih.ecklnklgti

com.rivercontainnih.plghjajexh

com.rivercontainnih.zrehnlfakvvi

com.rivercontainnih.vssbqxtrddn

com.rivercontainnih.p092g

com.rivercontainnih.p045l

com.rivercontainnih.p097b

com.rivercontainnih.p097j

com.rivercontainnih.p084q

com.rivercontainnih.p011n

com.rivercontainnih.p046m

com.rivercontainnih.p015s

com.rivercontainnih.p057h

com.rivercontainnih.hkpqotdcfh

com.rivercontainnih.xbghwellmtzproh

com.rivercontainnih.jubtkczbcmkykbi

com.rivercontainnih.dbijgxabktphk

Android Permissions

a427bd8c697a0776f06974ab1927a2c31acb30b9159066f4bc1dacbdce51253a.bin