ezwwzehtup[.]apk | Triage™

General

Target
ezwwzehtup.apk
Size 195KB
Sample231110-fa9b9sch67
SHA256 1973ff087e8b6e25b8e66a6c6efc54acb5fea1a50dd5e277dca9fa9b62c45c55
MD5 2158da64942dd3f1c28084c1baca338e
SHA1 87ddcfe79fd0683e4e8f5b43289c1e3bf737ba80
SHA512 25e3934e641ba19c23af8048e96cf9ead10f4722cd68b082adbf798764e9324944c70cf2ec1ebca183113e5e901e174238fb1f70abe37e0cad1ecab0c2e65c15
SSDEEP 6144:xJbj89xWXPzu2TERpgQz4YEKSNDPCKDOYAV9ed8I:Dbj892zu2TEsYRSNuKN8tI
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 10 IoCs

description	ioc
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS

File Explorer

ezwwzehtup.apk

.apk 195KB
Q84E7T.db

172KB

ezwwzehtup.apk

SHA256 1973ff087e8b6e25b8e66a6c6efc54acb5fea1a50dd5e277dca9fa9b62c45c55
MD5 2158da64942dd3f1c28084c1baca338e
SHA1 87ddcfe79fd0683e4e8f5b43289c1e3bf737ba80
SHA512 25e3934e641ba19c23af8048e96cf9ead10f4722cd68b082adbf798764e9324944c70cf2ec1ebca183113e5e901e174238fb1f70abe37e0cad1ecab0c2e65c15
SSDEEP 6144:xJbj89xWXPzu2TERpgQz4YEKSNDPCKDOYAV9ed8I:Dbj892zu2TEsYRSNuKN8tI
MD5 SHA1 SHA512 SSDEEP

android arch:arm64

ersjrr.gbzoov.yrlfde.fffm

Android Permissions

ezwwzehtup.apk

Permissions

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.VIBRATE

android.permission.CALL_PHONE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.RECEIVE_BOOT_COMPLETED

evpuxms.ftcevw.bdkod

atczmlj.wspz.xwjb

ncvmixn.rfuytfza.hiqay

psxgl.qptnd.ujfjjyop

loavcrun.iooxu.dzbrh

android.permission.WAKE_LOCK

android.permission.INTERNET

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_CONTACTS

android.permission.READ_PHONE_STATE

android.permission.GET_ACCOUNTS

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.FOREGROUND_SERVICE

android.permission.POST_NOTIFICATIONS

ezwwzehtup.apk

k1.nbActivity

k1.cc

k1.eq

ofd.mncz

fklds.owf

ncv.vhdj

k1.ke

k1.no

k1.xq

kljf.s

grtk.lkxcv

fl.chj

vxm.idsf

mvc.vc

wrip.rw

gsd.fw

ioiuw.clks

k1.nf

k1.g2

k1.di

Q84E7T.db

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

ezwwzehtup.apk

k1.nbActivity

k1.cc

k1.eq

ofd.mncz

fklds.owf

ncv.vhdj

k1.ke

k1.no

k1.xq

kljf.s

grtk.lkxcv

fl.chj

vxm.idsf

mvc.vc

wrip.rw

gsd.fw

ioiuw.clks

k1.nf

k1.g2

k1.di

Q84E7T.db

Android Permissions

ezwwzehtup.apk