General

  • Target

    27c3c855c1ce4de51447d9aca1ec9eea.bin

  • Size

    2.8MB

  • MD5

    27c3c855c1ce4de51447d9aca1ec9eea

  • SHA1

    1f15e2878beab335b4a023c62e478346cc368f15

  • SHA256

    c3a28d3c1de4ec5570719cfec942d3ebfbe62e42f090e9360c38375b0070b2ee

  • SHA512

    2473699882079126c3063a5e1e7d10602742e6cfe9b57bfd453c8e98514c33346f2022e948c42ebb8cf3c747eb2b5e2c703f9401d345ea05ef974e1729caa544

  • SSDEEP

    49152:OaZ60RzBm8kyxTkwvwp7Lq4StkfzwmfpfcISbR2Sjtw9BFfTSAVgdhi1GE76T5:DZj1BmyTTEz3h4tBwtlVgHO7O5

Score
7/10

Malware Config

Signatures

  • Requests dangerous framework permissions 5 IoCs

Files

  • 27c3c855c1ce4de51447d9aca1ec9eea.bin
    .apk android

    Password: infected

    com.minion.fcm

    .main


  • layout.bal
  • port.txt

Android Permissions

27c3c855c1ce4de51447d9aca1ec9eea.bin

Permissions

com.minion.fcm.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

android.permission.INTERNET

android.permission.READ_SMS

android.permission.WAKE_LOCK

android.permission.VIBRATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.ACCESS_COARSE_UPDATES

android.permission.READ_PHONE_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

com.google.android.c2dm.permission.RECEIVE

com.google.android.gms.permission.AD_ID

com.minion.fcm.permission.C2D_MESSAGE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.SEND_SMS

android.permission.RECEIVE_SMS

android.permission.ACCESS_WIFI_STATE