General

  • Target

    Framework1.0_JC.apk

  • Size

    293KB

  • MD5

    a3d2be01b33a758822f1640c32788f32

  • SHA1

    71ba7ada38b96220eac9d172310933a83e9a8649

  • SHA256

    442016df9ae41e675b20c6a225282cffcf8f4e259ac50d04497c9c9c8e60c452

  • SHA512

    25134cb72a544981cea0c3e1133a098cfd4c30fa7677f20376d511fceeb469d005fa2749d5b205bc6d635de36cddb2dde668935b57ce250e102885f00261888e

  • SSDEEP

    6144:6f7KQq29bsCBcUP/9xLZR+1ZBct5Ec3I8bfPHdD8LX:m7Kn2oCiQ9u7ct5ETg9D8r

Score
10/10

Malware Config

Extracted

Family

ahmyth

C2

http://8.tcp.ngrok.io:11735?model=

Signatures

  • Ahmyth family
  • Requests dangerous framework permissions 14 IoCs

Files

  • Framework1.0_JC.apk
    .apk android

    ahmyth.mine.king.ahmyth

    ahmyth.mine.king.ahmyth.MainActivity


Android Permissions

Framework1.0_JC.apk

Permissions

android.permission.WAKE_LOCK

android.permission.CAMERA

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MANAGE_EXTERNAL_STORAGE

android.permission.WRITE_SETTINGS

android.permission.WRITE_SECURE_SETTINGS

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.RECEIVE_SMS

android.permission.WRITE_SMS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.READ_PHONE_STATE

android.permission.READ_CALL_LOG

android.permission.PROCESS_OUTGOING_CALLS

android.permission.READ_CONTACTS

android.permission.RECORD_AUDIO

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_BACKGROUND_LOCATION

android.permission.REQUEST_IGNORE_BATTERY_OPTIMISATIONS