Resubmissions

04/10/2023, 20:44

231004-zjmz6sha38 10

04/10/2023, 20:44

231004-zjfk4aha36 7

22/09/2023, 22:23

230922-2as6yacf26 10

General

  • Target

    rmmqlfutmu.apk

  • Size

    440KB

  • MD5

    edccbc85bf21d7f587ddf6f574fca5d6

  • SHA1

    8c0bbb2b93c75fb7f510cca02d7cf1481f2a483e

  • SHA256

    0a899df56f6f4918ddcb24a1e5c4d82031203809cdfc08e4b344102435b5f3e1

  • SHA512

    b4a577b09957a9d78a876ba194ef260a4720736be57a7f453ba439debf7d8f5b364d23c9bdea413f726e924c9b921ccfdf3d468e90351a3a6637a4eae1b781df

  • SSDEEP

    12288:3UZ1fOPKiw7v60uZ+IAshMB3ustJqY7luFFw+U7WyoM3Bg:3UZ1yKF7vRhIfqB35tJDlQwhWqO

Score
7/10

Malware Config

Signatures

  • Requests dangerous framework permissions 9 IoCs

Files

  • rmmqlfutmu.apk
    .apk android arch:arm

    kcm.rd.zdgy.kfk.ns.bgfu.utsns

    nldlkw.wuActivity


  • tp6h1g

Android Permissions

rmmqlfutmu.apk

Permissions

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.CALL_PHONE

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.RECEIVE_BOOT_COMPLETED

tfibdc.qimmj.zbijh

unoj.ubpmq.qboa

wgtokm.mgcpz.cqhyq

rhwlzalf.vzll.hyno

qnnjvk.ijmglrb.lbcrzf

android.permission.WAKE_LOCK

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.permission.WRITE_SMS

android.permission.SEND_SMS

android.permission.DISABLE_KEYGUARD

android.permission.CHANGE_WIFI_STATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_CONTACTS

android.permission.READ_PHONE_STATE

android.permission.GET_ACCOUNTS