General

  • Target

    e0eacd72afe39de3b327a164f9c69a78c9c0f672d3ad202271772d816db4fad8.apk

  • Size

    377KB

  • MD5

    4f5617ec4668e3406f9bd82dfcf6df6b

  • SHA1

    45eed0d3f6dc143bcfa19f593523ee07683ca66d

  • SHA256

    e0eacd72afe39de3b327a164f9c69a78c9c0f672d3ad202271772d816db4fad8

  • SHA512

    3d830b085d20a049dffccac1691617c7500e3023b45d7961d418f2731dbc530d2de87bda1d7c6fcda6e61ce926f044d6e87e1cdda99bf0a729067e11d68eaa91

  • SSDEEP

    6144:rRxcwkntjYLs32gQ4L0BgtFLVkFh1CTPq2HiXNA4Kg1duR6/s/W4B7:lx2ntjY4mgt0BgtFJ6h1Cb89KEuRIuLZ

Score
10/10

Malware Config

Extracted

Family

ahmyth

C2

http://82.146.35.240:80

Signatures

  • Ahmyth family
  • Requests dangerous framework permissions 11 IoCs

Files

  • e0eacd72afe39de3b327a164f9c69a78c9c0f672d3ad202271772d816db4fad8.apk
    .apk android

    com.remote.app

    com.remote.app.MainActivity


Android Permissions

e0eacd72afe39de3b327a164f9c69a78c9c0f672d3ad202271772d816db4fad8.apk

Permissions

android.permission.WAKE_LOCK

android.permission.CAMERA

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.ACCESS_WIFI_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.READ_PHONE_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.READ_CALL_LOG

android.permission.RECORD_AUDIO

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.READ_CONTACTS

android.permission.FOREGROUND_SERVICE