rmmqlfutmu[.]apk | Triage™

General

Target
rmmqlfutmu.apk
Size 440KB
Sample231012-eca2tafc65
SHA256 0a899df56f6f4918ddcb24a1e5c4d82031203809cdfc08e4b344102435b5f3e1
MD5 edccbc85bf21d7f587ddf6f574fca5d6
SHA1 8c0bbb2b93c75fb7f510cca02d7cf1481f2a483e
SHA512 b4a577b09957a9d78a876ba194ef260a4720736be57a7f453ba439debf7d8f5b364d23c9bdea413f726e924c9b921ccfdf3d468e90351a3a6637a4eae1b781df
SSDEEP 12288:3UZ1fOPKiw7v60uZ+IAshMB3ustJqY7luFFw+U7WyoM3Bg:3UZ1yKF7vRhIfqB35tJDlQwhWqO
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 9 IoCs

description	ioc
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS

File Explorer

rmmqlfutmu.apk

.apk 440KB
tp6h1g

299KB

rmmqlfutmu.apk

SHA256 0a899df56f6f4918ddcb24a1e5c4d82031203809cdfc08e4b344102435b5f3e1
MD5 edccbc85bf21d7f587ddf6f574fca5d6
SHA1 8c0bbb2b93c75fb7f510cca02d7cf1481f2a483e
SHA512 b4a577b09957a9d78a876ba194ef260a4720736be57a7f453ba439debf7d8f5b364d23c9bdea413f726e924c9b921ccfdf3d468e90351a3a6637a4eae1b781df
SSDEEP 12288:3UZ1fOPKiw7v60uZ+IAshMB3ustJqY7luFFw+U7WyoM3Bg:3UZ1yKF7vRhIfqB35tJDlQwhWqO
MD5 SHA1 SHA512 SSDEEP

android arch:arm

kcm.rd.zdgy.kfk.ns.bgfu.utsns

Android Permissions

rmmqlfutmu.apk

Permissions

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.CALL_PHONE

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.RECEIVE_BOOT_COMPLETED

tfibdc.qimmj.zbijh

unoj.ubpmq.qboa

wgtokm.mgcpz.cqhyq

rhwlzalf.vzll.hyno

qnnjvk.ijmglrb.lbcrzf

android.permission.WAKE_LOCK

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.permission.WRITE_SMS

android.permission.SEND_SMS

android.permission.DISABLE_KEYGUARD

android.permission.CHANGE_WIFI_STATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_CONTACTS

android.permission.READ_PHONE_STATE

android.permission.GET_ACCOUNTS

rmmqlfutmu.apk

nldlkw.wuActivity

nldlkw.qbService

nldlkw.soReceiver

tp6h1g

Sharing

General

Malware Config

Signatures

File Explorer

rmmqlfutmu.apk

nldlkw.wuActivity

nldlkw.qbService

nldlkw.soReceiver

tp6h1g

Android Permissions

rmmqlfutmu.apk