Overview

overview

10

Static

static

10

revenue.apk

android-9-x86

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    revenue.apk

  • Size

    12.1MB

  • MD5

    f7ec02659a0ff1e0815a1a2519bdd75f

  • SHA1

    8e1fb73223a297712cf436fa7ca8550d1fa5e742

  • SHA256

    8217c25ba07efce758f178000f257e1ef950d2331544cc0bbcc08cad6839292c

  • SHA512

    a29f929b8490c38dc9ceff501b615bd08457767273598be2e4c36ec465d8279ef35500bbe57172bac2895cd17df9f1311a18c715b9daa8528bae8fc1d48b76a9

  • SSDEEP

    196608:JFTh2IahZp8DVlI6zy/I3s3+xuW8jNqTJYW20aykLXKXelp:LTnvZllzy1W8dWqLXYYp

Score
10/10
gigabud

Malware Config

Extracted

Family

gigabud

C2

http://addc5.cc/x/command?token=

http://8.219.85.91:8888/push-streaming?id=1234

Signatures

  • Gigabud family
    gigabud
  • Gigabud payload 1 IoCs
  • Requests dangerous framework permissions 9 IoCs

Files

  • revenue.apk
    .apk android arch:arm

    com.delgeo.desygner

    com.xingchat.android.activity.SplashActivity


Android Permissions

revenue.apk

Permissions

android.permission.BIND_ACCESSIBILITY_SERVICE

android.permission.REQUEST_DELETE_PACKAGES

android.permission.QUERY_ALL_PACKAGES

android.permission.GET_INSTALLED_APPS

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.FOREGROUND_SERVICE

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.CAMERA

android.permission.RECORD_AUDIO

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.READ_SMS

android.permission.RECEIVE_SMS

android.permission.SEND_SMS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.SYSTEM_OVERLAY_WINDOW

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.READ_EXTERNAL_STORAGE

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.WRITE_SETTINGS

android.permission.ACCESS_NOTIFICATION_POLICY