1afb6b59b3f90e6ec757cb424af68817[.]bin

General

Target

1afb6b59b3f90e6ec757cb424af68817.bin
Size

1.6MB
MD5

ef424630a998a3311c12440ebfa38aca
SHA1

97e0eab695e81b5a5476607917381d9bf9f0f9eb
SHA256

0dbeb1669901148ce3c70cec8fe318de8ee205d90ab802f4b1fd7d923e15f314
SHA512

06d5756c133c763f2f0fc3fd756806e8fd68f63574553f18f31d05b1ab9a066ab07a477f5dd60a32fb0f62ab1cd032ea45643704122cf0b8243db0aa652b1d38
SSDEEP

49152:5csyRoRdC/3C6d2sekn/elM2/tSK+lR8ofE2zirp3TwH:5cr936kn/elD/0Nly03zirde

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 9 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to monitor incoming MMS messages.	android.permission.RECEIVE_MMS
Allows read access to the device's phone number(s).	android.permission.READ_PHONE_NUMBERS
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS

Files

1afb6b59b3f90e6ec757cb424af68817.bin
.zip

Password: infected
1ed0598ecb75c742320d8168fd40d1d821c0e0680f2055d86372968c71527d96.apk
.apk android arch:arm64 arch:arm arch:x86 arch:x64

Password: infected

eqiypnczzmdhe.biamakqrh.adpqwepz

eqiypnczzmdhe.biamakqrh.adpqwepz.wrenctzurgikxhf

Activities

eqiypnczzmdhe.biamakqrh.adpqwepz.wrenctzurgikxhf

android.intent.action.MAIN

eqiypnczzmdhe.biamakqrh.adpqwepz.inkgqznuocqe

android.intent.action.SEND
android.intent.action.SENDTO

Permissions

android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.READ_PHONE_STATE
android.permission.READ_CONTACTS
android.permission.CALL_PHONE
android.permission.READ_SMS
android.permission.RECEIVE_SMS
android.permission.REORDER_TASKS
android.permission.WRITE_SMS
android.permission.SEND_SMS
android.permission.RECEIVE_MMS
android.permission.READ_PHONE_NUMBERS
android.permission.FOREGROUND_SERVICE
android.permission.USE_FULL_SCREEN_INTENT
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.REQUEST_DELETE_PACKAGES
android.permission.GET_ACCOUNTS
android.permission.AUTHENTICATE_ACCOUNTS
android.permission.WRITE_SYNC_SETTINGS

Receivers

eqiypnczzmdhe.biamakqrh.adpqwepz.hgmjcatnjygmseq$MyReceiver

fa.fe.sgsdg

eqiypnczzmdhe.biamakqrh.adpqwepz.skjlftnpgqz

android.provider.Telephony.SMS_DELIVER

eqiypnczzmdhe.biamakqrh.adpqwepz.ujaxhtdpvh

android.provider.Telephony.WAP_PUSH_DELIVER

eqiypnczzmdhe.biamakqrh.adpqwepz.ppvilmhruiglh

android.intent.action.BOOT_COMPLETED

bzrizqyc.yvfcsoy.oeaqak.vbnku.zxwakh

android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED
android.intent.action.BOOT_COMPLETED

Services

eqiypnczzmdhe.biamakqrh.adpqwepz.excaibodpdqmz

android.intent.action.RESPOND_VIA_MESSAGE

bzrizqyc.yvfcsoy.oeaqak.bhiyzc.wkozdtd

bzrizqyc.yvfcsoy.oeaqak.service

bzrizqyc.yvfcsoy.oeaqak.bhiyzc.rkaqhxb

android.accounts.AccountAuthenticator

bzrizqyc.yvfcsoy.oeaqak.bhiyzc.btnnlimq

android.content.SyncAdapter

Sharing

General

Malware Config

Signatures

Files

Password: infected

Password: infected

eqiypnczzmdhe.biamakqrh.adpqwepz

eqiypnczzmdhe.biamakqrh.adpqwepz.wrenctzurgikxhf

Activities

eqiypnczzmdhe.biamakqrh.adpqwepz.wrenctzurgikxhf

eqiypnczzmdhe.biamakqrh.adpqwepz.inkgqznuocqe

Permissions

Receivers

eqiypnczzmdhe.biamakqrh.adpqwepz.hgmjcatnjygmseq$MyReceiver

eqiypnczzmdhe.biamakqrh.adpqwepz.skjlftnpgqz

eqiypnczzmdhe.biamakqrh.adpqwepz.ujaxhtdpvh

eqiypnczzmdhe.biamakqrh.adpqwepz.ppvilmhruiglh

bzrizqyc.yvfcsoy.oeaqak.vbnku.zxwakh

Services

eqiypnczzmdhe.biamakqrh.adpqwepz.excaibodpdqmz

bzrizqyc.yvfcsoy.oeaqak.bhiyzc.wkozdtd

bzrizqyc.yvfcsoy.oeaqak.bhiyzc.rkaqhxb

bzrizqyc.yvfcsoy.oeaqak.bhiyzc.btnnlimq