General

  • Target

    _DOL.apk

  • Size

    11.9MB

  • MD5

    2e6530985058179a8adf2bb1e729d516

  • SHA1

    1ac24292df9fb97a07472281378ca460d3a419a0

  • SHA256

    c6213e451e4a23b7725143edd1c725aa748fd9eb32e33304b4f87d63c19e0504

  • SHA512

    99c9b1be06f063227d8c6e84056ada5d44284bcceafa22ff15895d1281f042b4d2452d0fcdc1ab4a5ac285c86d53c75182c95db83794685e1678dc3a64dfb3bb

  • SSDEEP

    196608:laQ8jJjB6zkZHOmwZuXJi5J8qUN5+C8uBbXxm1B10wDQCr8wGj6yIkjF:la/NsSa38qUN5Dhg10w0wGj0A

Score
10/10

Malware Config

Signatures

  • Gigabud family
  • Gigabud payload 1 IoCs
  • Requests dangerous framework permissions 9 IoCs

Files

  • _DOL.apk
    .apk android arch:arm64 arch:arm

    nrmahn.kwqzdrb.nahh

    com.xingchat.android.activity.SplashActivity


  • kqkticwjgzy.dat
  • l58882ccd_a32.so
    .elf linux arm
  • l58882ccd_a64.so
    .elf linux aarch64
  • l58882ccd_x64.so
    .elf linux x64
  • l58882ccd_x86.so
    .elf linux x86

Android Permissions

_DOL.apk

Permissions

android.permission.BIND_ACCESSIBILITY_SERVICE

android.permission.REQUEST_DELETE_PACKAGES

android.permission.QUERY_ALL_PACKAGES

android.permission.GET_INSTALLED_APPS

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_NETWORK_STATE

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.DISABLE_KEYGUARD

android.permission.WAKE_LOCK

android.permission.SYSTEM_ALERT_WINDOW

android.permission.SYSTEM_OVERLAY_WINDOW

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.FOREGROUND_SERVICE

android.permission.READ_PHONE_STATE

android.permission.CAMERA

android.permission.RECORD_AUDIO

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.READ_SMS

android.permission.RECEIVE_SMS

android.permission.SEND_SMS

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.READ_EXTERNAL_STORAGE

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.WRITE_SETTINGS

android.permission.ACCESS_NOTIFICATION_POLICY