d34b6ab46f320027fc4b552058bfdea0[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d34b6ab46f320027fc4b552058bfdea0.bin
Size

2.3MB
MD5

543f1d437df031ce22121f633ef436a5
SHA1

90fb26b00147296d7fc7270c80a6d6bbc4cf94f5
SHA256

25f8bbed399aecf108c5573e8fd6ec6f05472ebf53404bbf5c577c3332324f08
SHA512

8476000f305682830b914ecdcfde3ce7c25a8f49823cef1ea680c57d143ab538f6dbe8a947ccf3f53de357a507624132b1ce1dfe3d4c2e5bd0836ef05a17b7ee
SSDEEP

49152:MlhFd0GpH0bO7ab0Mwe0fh6NyXtu8tpQJmxkvX55wRrlSJ/f:Ml7d70b9baFXLtnKhaZ6f

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 4 IoCs

description	ioc
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS

Files

d34b6ab46f320027fc4b552058bfdea0.bin
.zip

Password: infected
05c6c40bb523cdac5158e3f43e4ae590d16b135f3c64e3b71615a86b6feeff89.apk
.apk android arch:arm64 arch:arm arch:x86 arch:x64

Password: infected

com.test.mvapp

com.test.mvapp.MainActivity

Activities

com.test.mvapp.MainActivity

android.intent.action.MAIN

Permissions

android.permission.INTERNET
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS
android.permission.POST_NOTIFICATIONS
android.permission.READ_SMS
android.permission.SEND_SMS
android.permission.RECEIVE_SMS
android.permission.ACCESS_NETWORK_STATE
android.permission.WAKE_LOCK
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.FOREGROUND_SERVICE
com.google.android.c2dm.permission.RECEIVE
com.test.mvapp.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Receivers

com.test.mvapp.rec.BootCompletedReceiver

android.intent.action.BOOT_COMPLETED

com.test.mvapp.s.SReceiver

android.provider.Telephony.SMS_RECEIVED

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

Services

com.test.mvapp.servc.MyService

com.google.firebase.MESSAGING_EVENT

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT
baseline.prof
baseline.profm