8f451105c469b786a2ca2aa96b6cdb17e1e92736c8e58f2cd81141b51de8a0a4[.]bin

General

Target
8f451105c469b786a2ca2aa96b6cdb17e1e92736c8e58f2cd81141b51de8a0a4.bin
Size 541KB
Sample230720-1a3jyaag37
SHA256 8f451105c469b786a2ca2aa96b6cdb17e1e92736c8e58f2cd81141b51de8a0a4
MD5 f3347b4068d600b303059ef505e5f131
SHA1 d9d7cd5af91aa86269806ff1099a90ee13e29b6c
SHA512 28472502d22a97416e41e20f474e8fb12b84d9f31768377662b8b46df6e13dac468b4f0bf585479ff8779f461a401c94b806379c14f5a735faa7a1789a543215
SSDEEP 12288:6hcRTq5AA8a4XTOubtyM8hWUFBZWw7tk3p48FjOVxnr:UAmSTHtyPhWUFBZWw7Up48FYnr
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 7 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE

File Explorer

8f451105c469b786a2ca2aa96b6cdb17e1e92736c8e58f2cd81141b51de8a0a4.bin

.apk 541KB

8f451105c469b786a2ca2aa96b6cdb17e1e92736c8e58f2cd81141b51de8a0a4.bin

SHA256 8f451105c469b786a2ca2aa96b6cdb17e1e92736c8e58f2cd81141b51de8a0a4
MD5 f3347b4068d600b303059ef505e5f131
SHA1 d9d7cd5af91aa86269806ff1099a90ee13e29b6c
SHA512 28472502d22a97416e41e20f474e8fb12b84d9f31768377662b8b46df6e13dac468b4f0bf585479ff8779f461a401c94b806379c14f5a735faa7a1789a543215
SSDEEP 12288:6hcRTq5AA8a4XTOubtyM8hWUFBZWw7tk3p48FjOVxnr:UAmSTHtyPhWUFBZWw7Up48FYnr
MD5 SHA1 SHA512 SSDEEP

android arch:arm64 arch:arm arch:x86 arch:x64

com.citytell99

Android Permissions

8f451105c469b786a2ca2aa96b6cdb17e1e92736c8e58f2cd81141b51de8a0a4.bin

Permissions

android.permission.ADD_VOICEMAIL

android.permission.USE_FINGERPRINT

android.permission.BATTERY_STATS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.INTERNET

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.Manifest.permission.READ_PHONE_STATE

android.permission.SEND_SMS

android.permission.WAKE_LOCK

android.permission.READ_PHONE_STATE

android.permission.CALL_PHONE

android.permission.USES_POLICY_FORCE_LOCK

android.permission.VIBRATE

android.permission.REQUEST_COMPANION_RUN_IN_BACKGROUND

android.permission.REQUEST_COMPANION_USE_DATA_IN_BACKGROUND

android.permission.REQUEST_DELETE_PACKAGES

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_SETTINGS

android.permission.REORDER_TASKS

Sharing

General

Malware Config

Signatures

File Explorer

8f451105c469b786a2ca2aa96b6cdb17e1e92736c8e58f2cd81141b51de8a0a4.bin

com.citytell99.p051y

com.citytell99.p048j

com.citytell99.p050s

com.citytell99.p094s

com.citytell99.p024r

com.citytell99.p076x

com.citytell99.p093z

com.citytell99.p076p

com.citytell99.p071o

com.citytell99.p067q

com.citytell99.p098d

com.citytell99.p043l

com.citytell99.qkuyflqkculqwj

com.citytell99.unuoxpxjew

com.citytell99.ydxszsdzwkaqvba

com.citytell99.zmmmxkkpqr

com.citytell99.nqovymzzmbs

com.citytell99.p055n

com.citytell99.p018s

com.citytell99.p039g

com.citytell99.LogSrv

com.citytell99.p057f

com.citytell99.p031f

com.citytell99.p011r

com.citytell99.p023r

com.citytell99.p088b

com.citytell99.p067a

com.citytell99.p099f

com.citytell99.ojrfsbmknrdxrc

com.citytell99.pwigifaioq

com.citytell99.vjewgyitqijcbno

com.citytell99.sfduxlzwmv

com.citytell99.ucmzkgablapl

com.citytell99.yzczirzpwq

com.citytell99.p090z

com.citytell99.p088f

com.citytell99.p074w

com.citytell99.p082v

com.citytell99.p052j

com.citytell99.p060e

com.citytell99.p026e

com.citytell99.p079z

com.citytell99.tyicxsbiit

com.citytell99.ttjsefdjedxbmx

com.citytell99.mkifxfpnuaujgww

com.citytell99.vpzhshvnornw

com.citytell99.irzarmejchsug

com.citytell99.rgystmlnnf

Android Permissions

8f451105c469b786a2ca2aa96b6cdb17e1e92736c8e58f2cd81141b51de8a0a4.bin