caprarat | fbde6f65c960c2469d957f1fdb6d7240bd6eec5e4f34b68e01dda85cb9bf6841

General

Target

fbde6f65c960c2469d957f1fdb6d7240bd6eec5e4f34b68e01dda85cb9bf6841
Size

2.7MB
MD5

fc54078c5ae26d856109d306c37909ae
SHA1

8beab9e454b5283e892aeca6bca9afb608fa8718
SHA256

fbde6f65c960c2469d957f1fdb6d7240bd6eec5e4f34b68e01dda85cb9bf6841
SHA512

2b3b3bff34a833c1cbeee7b280dcf70364bf9d3bcaa6c9c13a192257e979c1457abf113f1c75a02639a8f8fb302f453efcde9a1103fee87dfeea188fff28acdd
SSDEEP

49152:1+GXVzVoug3HVnBkzUpz1p59ze+WuGnnlUxA2Uf+Vv9exf7N74bLWSSHV5jgdXOC:TXnoug3ZBt3/3W9nIUfc0fh4/wzeth

Score

10^/10

caprarat

Malware Config

Extracted

Family

caprarat

Version

MSK-2023

C2

ptzbubble.shop:14862

Signatures

Caprarat family
caprarat

Requests dangerous framework permissions 13 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether.	android.permission.PROCESS_OUTGOING_CALLS
Allows an application to record audio.	android.permission.RECORD_AUDIO
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to read the user's call log.	android.permission.READ_CALL_LOG
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS

Files

fbde6f65c960c2469d957f1fdb6d7240bd6eec5e4f34b68e01dda85cb9bf6841
.apk android

com.moves.media.tubes

com.media.gallery.service.MainActivity

Activities

com.media.gallery.service.MainActivity

android.intent.action.MAIN

Permissions

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS
android.permission.STORAGE
android.permission.ACCESS_NETWORK_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_EXTERNAL_STORAGE
android.permission.ACCESS_WIFI_STATE
android.permission.ACCESS_COARSE_LOCATION
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.INTERNET
android.permission.ACCESS_FINE_LOCATION
android.permission.RECEIVE_SMS
android.permission.READ_SMS
android.permission.READ_PHONE_STATE
android.permission.PROCESS_OUTGOING_CALLS
android.permission.RECORD_AUDIO
android.permission.CAMERA
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.READ_CONTACTS
android.permission.READ_CALL_LOG
android.permission.READ_INSTALL_SESSIONS
android.permission.GET_ACCOUNTS
android.permission.AUTHENTICATE_ACCOUNTS
android.permission.REQUEST_INSTALL_PACKAGES

Receivers

com.media.gallery.service.callReceiver

android.intent.action.PHONE_STATE
android.intent.action.NEW_OUTGOING_CALL

com.media.gallery.service.BootUpReceiver

android.intent.action.BOOT_COMPLETED
.ActivityRecognition.RestartSensor
REFRESH_THIS

com.media.gallery.service.AdminsManager

android.app.action.DEVICE_ADMIN_ENABLED

Services

com.media.gallery.service.TPSClient

Service

com.media.gallery.service.GPSListener

Service

com.media.gallery.service.callRecording

Recording

com.media.gallery.service.NotificationListener

android.service.notification.NotificationListenerService

Android Permissions

fbde6f65c960c2469d957f1fdb6d7240bd6eec5e4f34b68e01dda85cb9bf6841

Permissions

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.INTERNET

android.permission.ACCESS_FINE_LOCATION

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.permission.READ_PHONE_STATE

android.permission.PROCESS_OUTGOING_CALLS

android.permission.RECORD_AUDIO

android.permission.CAMERA

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.READ_CONTACTS

android.permission.READ_CALL_LOG

android.permission.READ_INSTALL_SESSIONS

android.permission.GET_ACCOUNTS

android.permission.AUTHENTICATE_ACCOUNTS

android.permission.REQUEST_INSTALL_PACKAGES

Sharing

General

Malware Config

Extracted

Signatures

Files

com.moves.media.tubes

com.media.gallery.service.MainActivity

Activities

com.media.gallery.service.MainActivity

Permissions

Receivers

com.media.gallery.service.callReceiver

com.media.gallery.service.BootUpReceiver

com.media.gallery.service.AdminsManager

Services

com.media.gallery.service.TPSClient

com.media.gallery.service.GPSListener

com.media.gallery.service.callRecording

com.media.gallery.service.NotificationListener

Android Permissions

fbde6f65c960c2469d957f1fdb6d7240bd6eec5e4f34b68e01dda85cb9bf6841