8ee9ffe2e96311ce7dd4a2ede1b180b4[.]bin

Sharing

Copy URL Twitter E-mail

General

Target

8ee9ffe2e96311ce7dd4a2ede1b180b4.bin
Size

34.6MB
MD5

76d4b6d7298316d7d3acc58c722e15c0
SHA1

da40d5e5016c6c5bb467e02e3eb1c99bba58d6f8
SHA256

0160d2c37f5a84adc2809f265139a033c6d1646aa9e15fc9f820f01e77f16d0a
SHA512

1fa5c7238d45b0b26947b0b066dcca8995f9b1de4a5878cd559564e0467f8ac201782cab448724761a3c2a424a088a009df6a6be4c4824b4e73875724b2cb49f
SSDEEP

786432:p17xl0eRHmChfDvoJMI/DaBDiFRVxm/ku6kq2G4beAO+yDM:3XpRHm2bvoJMI/2BDeRVxm/E2G4beAOi

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 9 IoCs

description	ioc
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to monitor incoming MMS messages.	android.permission.RECEIVE_MMS
Allows an application to receive WAP push messages.	android.permission.RECEIVE_WAP_PUSH
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS

Files

8ee9ffe2e96311ce7dd4a2ede1b180b4.bin
.zip

Password: infected
d564e94904f5df40e11fc9edbab58a5423cfc298958c7e5410478bcc77c2f742.apk
.apk android arch:arm64 arch:arm arch:x86 arch:x64

Password: infected

com.zero.ztothez

io.dcloud.PandoraEntry

Activities

com.zero.ztothez.MainSmsActivity

android.intent.action.SEND
android.intent.action.SENDTO

com.zero.ztothez.service.SmsPermissionService

android.intent.action.SEND
android.intent.action.SENDTO

io.dcloud.PandoraEntry

android.intent.action.MAIN

io.dcloud.PandoraEntryActivity

android.intent.action.VIEW

Permissions

android.permission.CAMERA
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_SMS
android.permission.WRITE_SMS
android.permission.RECEIVE_SMS
android.permission.SEND_SMS
android.permission.RECEIVE_MMS
android.permission.RECEIVE_WAP_PUSH
android.permission.INTERNET
android.permission.FOREGROUND_SERVICE
android.permission.GET_TASKS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.BROADCAST_STICKY
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS
android.permission.ACCESS_NETWORK_STATE
com.huawei.android.launcher.permission.CHANGE_BADGE
com.vivo.notification.permission.BADGE_ICON
android.permission.READ_EXTERNAL_STORAGE
com.asus.msa.SupplementaryDID.ACCESS
freemme.permission.msa
android.permission.WAKE_LOCK
android.permission.POST_NOTIFICATIONS
com.google.android.c2dm.permission.RECEIVE
com.google.android.gms.permission.AD_ID
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

Receivers

com.zero.ztothez.receiver.MmsReceiver

android.provider.Telephony.WAP_PUSH_DELIVER

com.zero.ztothez.receiver.SmsReceiver

android.provider.Telephony.SMS_RECEIVED
android.provider.Telephony.SMS_DELIVER

io.dcloud.common.adapter.io.DownloadReceiver

android.intent.action.PACKAGE_ADDED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY
android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW
android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.TIME_SET
android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.work.diagnostics.REQUEST_DIAGNOSTICS

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

Services

com.zero.ztothez.service.FirebaseMessageReceiver

com.google.firebase.MESSAGING_EVENT

com.zero.ztothez.HeadlessSmsSendService

android.intent.action.RESPOND_VIA_MESSAGE

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT
HBuilder.png
.png
__uniappchooselocation.js
.js
__uniapperror.png
.png
__uniappes6.js
.js
__uniappopenlocation.js
.js
__uniapppicker.js
.js
__uniappquill.js
.js
__uniappquillimageresize.js
.js
__uniappscan.js
.js
__uniappsuccess.png
.png
__uniappview.html
.html .js
ad2.jpg
ad3.jpg
app-config-service.js
.js
app-config.js
.js
app-service.js
.js
app-view.js
.js
arc.png
.png
baseline.prof
baseline.profm
car.png
.png
dcloud3.dat
.js
dcloud_beep.ogg
dcloud_configs.json
dcloud_control.xml
.xml
dcloud_error.html
.html .js
dcloud_iconfont.ttf
dcloud_prograss_snow1.png
.png
dcloud_properties.xml
dcloud_uniplugins.json
emptyCart.jpg
error.html
.html
h1.png
.png
login.png
.png
logo.png
.png
manifest.json
missing-face.png
.png
point.png
.png
select.png
.png
selected.png
.png
supplierconfig.json
tab-cart-current.png
.png
tab-cart.png
.png
tab-cate-current.png
.png
tab-cate.png
.png
tab-home-current.png
.png
tab-home.png
.png
tab-mall-current.png
.png
tab-mall.png
.png
tab-my-current.png
.png
tab-my.png
.png
uni-jsframework-dev.js
uni-jsframework-vue3-dev.js
uni-jsframework-vue3.js
uni-jsframework.js
uni.webview.1.5.2.js
.js
unincomponents.ttf
user-bg.jpg
view.css
view.umd.min.js
.js
vip-card-bg.png
.png
yticon.ttf
zlsioh.dat

Sharing

General

Malware Config

Signatures

Files

Password: infected

Password: infected

com.zero.ztothez

io.dcloud.PandoraEntry

Activities

com.zero.ztothez.MainSmsActivity

com.zero.ztothez.service.SmsPermissionService

io.dcloud.PandoraEntry

io.dcloud.PandoraEntryActivity

Permissions

Receivers

com.zero.ztothez.receiver.MmsReceiver

com.zero.ztothez.receiver.SmsReceiver

io.dcloud.common.adapter.io.DownloadReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.diagnostics.DiagnosticsReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

Services

com.zero.ztothez.service.FirebaseMessageReceiver

com.zero.ztothez.HeadlessSmsSendService

com.google.firebase.messaging.FirebaseMessagingService