f8325774b1a49b78db2aaff9b8fb82ec[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f8325774b1a49b78db2aaff9b8fb82ec.bin
Size

10.8MB
MD5

061672459f21e18a6031ac15baf85f87
SHA1

e1b7be1e9153255f93736a30141adf81ea2851cb
SHA256

ce35e40a83794dea0c82039fba0c0794166d521db681da90bdf0bb941cfaae0d
SHA512

e90573a4d9548d1d57fc81a5d01002ac0b01e32320bd4364519592df3185a127dce2d18536e92bc092261d1a9d47ef6baef19bac98f7735ad3729663aa984e60
SSDEEP

196608:Oz6WoFgOpxWwKpScVvrEkNdoGKWwnEDCnJtZ+NdGaScOtWCDTGvxSrR1rcgxhe:MoFgkiJNeGKZnEEJtZ+NdocOsdmP7e

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 3 IoCs

description	ioc
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE

Files

f8325774b1a49b78db2aaff9b8fb82ec.bin
.zip

Password: infected
dc2fb2c741e5ce0f59864e5ffe75a7b2949cd278e78b50004ab60d61f30f939c.apk
.apk android

Password: infected

com.speakvoice.text.totrans.translator

com.speakvoice.text.totrans.translator.SplashActivity

Activities

com.speakvoice.text.totrans.translator.SplashActivity

android.intent.action.MAIN
android.intent.action.VIEW

Permissions

android.permission.ACCESS_NETWORK_STATE
android.permission.INTERNET
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_NETWORK_STATE
android.permission.SYSTEM_ALERT_WINDOW
android.permission.CAMERA
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_EXTERNAL_STORAGE
android.permission.WAKE_LOCK
com.google.android.gms.permission.AD_ID

Receivers

Services

com.speakvoice.text.totrans.translator.service.LanguageTranslatServices

android.service.notification.NotificationListenerService
language