tztrrhdzyk[.]apk | Triage™

General

Target
tztrrhdzyk.apk
Size 191KB
Sample231112-brbp4sda26
SHA256 c5b1cfa4db75b4ce9afdb164de278a02c8d5c24ae14a8e109f9b3a058e35e1b2
MD5 bdeb51e006156f580c51b2760327c919
SHA1 79f3761b59c6677a06de2ddd95737e3eef058a13
SHA512 2d67512dc3746b6089862e934c5081b8f97c28d185e310faa1fd42b0f10f4dca87975855d437a562ca4e4988808480044c9a686d6dc70a5d89687531934eb420
SSDEEP 3072:tJZ/ZuodOhTBOWkeTLUFsGkySAoAisgRDhq6IyrLIM1kqKczHFMc1ss2TrmWjWPr:bZGtBOWfCsGyAtcRDh1HrL1kqKPJ8Y4h
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 10 IoCs

description	ioc
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS

File Explorer

tztrrhdzyk.apk

.apk 191KB
4LDBD6.db

164KB

tztrrhdzyk.apk

SHA256 c5b1cfa4db75b4ce9afdb164de278a02c8d5c24ae14a8e109f9b3a058e35e1b2
MD5 bdeb51e006156f580c51b2760327c919
SHA1 79f3761b59c6677a06de2ddd95737e3eef058a13
SHA512 2d67512dc3746b6089862e934c5081b8f97c28d185e310faa1fd42b0f10f4dca87975855d437a562ca4e4988808480044c9a686d6dc70a5d89687531934eb420
SSDEEP 3072:tJZ/ZuodOhTBOWkeTLUFsGkySAoAisgRDhq6IyrLIM1kqKczHFMc1ss2TrmWjWPr:bZGtBOWfCsGyAtcRDh1HrL1kqKPJ8Y4h
MD5 SHA1 SHA512 SSDEEP

android arch:arm64

izup.jxnio.ddqofa.ajs

Android Permissions

tztrrhdzyk.apk

Permissions

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.VIBRATE

android.permission.CALL_PHONE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.RECEIVE_BOOT_COMPLETED

xfnybh.gqnzwfi.zywu

dhchktz.gciav.ywudz

pybnr.korhdom.eqsakx

vjsv.njsa.ivdb

dhfdy.nhoed.vjsltfg

android.permission.WAKE_LOCK

android.permission.INTERNET

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_CONTACTS

android.permission.READ_PHONE_STATE

android.permission.GET_ACCOUNTS

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.FOREGROUND_SERVICE

android.permission.POST_NOTIFICATIONS

tztrrhdzyk.apk

d2.nbActivity

d2.ad

d2.wa

d2.cc

d2.eq

ofd.mncz

fklds.owf

ncv.vhdj

d2.ke

d2.no

d2.xq

kljf.s

grtk.lkxcv

fl.chj

vxm.idsf

mvc.vc

wrip.rw

gsd.fw

ioiuw.clks

d2.nf

d2.g2

d2.di

d2.sp

4LDBD6.db

Sharing

General

Malware Config

Signatures

File Explorer

tztrrhdzyk.apk

d2.nbActivity

d2.ad

d2.wa

d2.cc

d2.eq

ofd.mncz

fklds.owf

ncv.vhdj

d2.ke

d2.no

d2.xq

kljf.s

grtk.lkxcv

fl.chj

vxm.idsf

mvc.vc

wrip.rw

gsd.fw

ioiuw.clks

d2.nf

d2.g2

d2.di

d2.sp

4LDBD6.db

Android Permissions

tztrrhdzyk.apk