ahmyth | e0eacd72afe39de3b327a164f9c69a78c9c0f672d3ad202271772d816db4fad8[.]zip

General

Target
e0eacd72afe39de3b327a164f9c69a78c9c0f672d3ad202271772d816db4fad8.zip
Size 342KB
Sample231012-fl23bsge2z
SHA256 e7f867923fd164c221616c59edf06d5c9f419bf76c508af26be541ab16745868
MD5 0ea764afa833084b76e270f8e092204b
SHA1 92e0bf9db0311561376026cb3bfeb858d2d253d9
SHA512 a0e982acc578b397652e8a37e7e67b7adb64683fc6fa24aed9c1cafc0e689522b8fbaf9a5bf0442ce4cf41c3f25c119d688160ab0002b38d39c82eaadabfe373
SSDEEP 6144:Ex+uf/sJRaGItqp6zo9f3k7ONT76UB2jJdqGqimQq+2OcQGEgp3g7:6nsJ0GbpLUyNuU6jMJOcTEgs
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

ahmyth

Family

C2

Requests dangerous framework permissions 11 IoCs

description	ioc
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to read the user's call log.	android.permission.READ_CALL_LOG
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS

e0eacd72afe39de3b327a164f9c69a78c9c0f672d3ad202271772d816db4fad8.zip

.zip 342KB
e0eacd72afe39de3b327a164f9c69a78c9c0f672d3ad202271772d816db4fad8.apk

.apk 377KB

SHA256 e7f867923fd164c221616c59edf06d5c9f419bf76c508af26be541ab16745868
MD5 0ea764afa833084b76e270f8e092204b
SHA1 92e0bf9db0311561376026cb3bfeb858d2d253d9
SHA512 a0e982acc578b397652e8a37e7e67b7adb64683fc6fa24aed9c1cafc0e689522b8fbaf9a5bf0442ce4cf41c3f25c119d688160ab0002b38d39c82eaadabfe373
SSDEEP 6144:Ex+uf/sJRaGItqp6zo9f3k7ONT76UB2jJdqGqimQq+2OcQGEgp3g7:6nsJ0GbpLUyNuU6jMJOcTEgs
MD5 SHA1 SHA512 SSDEEP

Password

infected

SHA256 e0eacd72afe39de3b327a164f9c69a78c9c0f672d3ad202271772d816db4fad8
MD5 4f5617ec4668e3406f9bd82dfcf6df6b
SHA1 45eed0d3f6dc143bcfa19f593523ee07683ca66d
SHA512 3d830b085d20a049dffccac1691617c7500e3023b45d7961d418f2731dbc530d2de87bda1d7c6fcda6e61ce926f044d6e87e1cdda99bf0a729067e11d68eaa91
SSDEEP 6144:rRxcwkntjYLs32gQ4L0BgtFLVkFh1CTPq2HiXNA4Kg1duR6/s/W4B7:lx2ntjY4mgt0BgtFJ6h1Cb89KEuRIuLZ
MD5 SHA1 SHA512 SSDEEP

android

com.remote.app