2864a617f4ff4feb4bc41e0a32ab10f2b92e105a40a805fb967cdd1bebcda112[.]bin

General

Target
2864a617f4ff4feb4bc41e0a32ab10f2b92e105a40a805fb967cdd1bebcda112.bin
Size 509KB
Sample231208-1wslvsdaaj
SHA256 2864a617f4ff4feb4bc41e0a32ab10f2b92e105a40a805fb967cdd1bebcda112
MD5 553490bf29b82a85452bcad710f6a49c
SHA1 5f1d87155bf35954ef24ff98d694fb2403cb4d59
SHA512 b9d7e84995c08b58076a09d7fc4cf90fed93c1fc31c8c5eb655154664f6a6cf885ad9a18b5dae7fd23ed69fc6676bffd20df0ff559d84a8ba719e61d62c5f551
SSDEEP 12288:ZYzOaXDRSUgtvzwS1UyODhJwAGm6XozR0tn/:ZS9XkUg931pODB6XozRMn/
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE

Requests dangerous framework permissions 8 IoCs

description	ioc
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS

File Explorer

2864a617f4ff4feb4bc41e0a32ab10f2b92e105a40a805fb967cdd1bebcda112.bin

.apk 509KB

2864a617f4ff4feb4bc41e0a32ab10f2b92e105a40a805fb967cdd1bebcda112.bin

SHA256 2864a617f4ff4feb4bc41e0a32ab10f2b92e105a40a805fb967cdd1bebcda112
MD5 553490bf29b82a85452bcad710f6a49c
SHA1 5f1d87155bf35954ef24ff98d694fb2403cb4d59
SHA512 b9d7e84995c08b58076a09d7fc4cf90fed93c1fc31c8c5eb655154664f6a6cf885ad9a18b5dae7fd23ed69fc6676bffd20df0ff559d84a8ba719e61d62c5f551
SSDEEP 12288:ZYzOaXDRSUgtvzwS1UyODhJwAGm6XozR0tn/:ZS9XkUg931pODB6XozRMn/
MD5 SHA1 SHA512 SSDEEP

android arch:arm64 arch:arm arch:x86 arch:x64

com.restnoticeipf

Android Permissions

2864a617f4ff4feb4bc41e0a32ab10f2b92e105a40a805fb967cdd1bebcda112.bin

Permissions

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.USE_FINGERPRINT

android.permission.BATTERY_STATS

android.permission.INSTALL_SHORTCUT

android.permission.CLEAR_APP_CACHE

android.permission.GET_PACKAGE_SIZE

android.permission.ADD_VOICEMAIL

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.INTERNET

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.Manifest.permission.READ_PHONE_STATE

android.permission.SEND_SMS

android.permission.WAKE_LOCK

android.permission.READ_PHONE_STATE

android.permission.CALL_PHONE

android.permission.USES_POLICY_FORCE_LOCK

android.permission.VIBRATE

android.permission.REQUEST_COMPANION_RUN_IN_BACKGROUND

android.permission.REQUEST_COMPANION_USE_DATA_IN_BACKGROUND

android.permission.REQUEST_DELETE_PACKAGES

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_SETTINGS

android.permission.REORDER_TASKS

2864a617f4ff4feb4bc41e0a32ab10f2b92e105a40a805fb967cdd1bebcda112.bin

com.restnoticeipf.p027i

com.restnoticeipf.p051r

com.restnoticeipf.p030v

com.restnoticeipf.p063z

com.restnoticeipf.p071c

com.restnoticeipf.p040e

com.restnoticeipf.p019i

com.restnoticeipf.p043y

com.restnoticeipf.p043a

com.restnoticeipf.p068z

com.restnoticeipf.p084l

com.restnoticeipf.p079w

com.restnoticeipf.p022r

com.restnoticeipf.p052t

com.restnoticeipf.p048u

com.restnoticeipf.p044z

com.restnoticeipf.p065n

com.restnoticeipf.p090t

com.restnoticeipf.p058v

com.restnoticeipf.p024h

com.restnoticeipf.p067s

com.restnoticeipf.p078m

com.restnoticeipf.p026g

com.restnoticeipf.p089a

com.restnoticeipf.p021s

com.restnoticeipf.p092e

com.restnoticeipf.p089g

com.restnoticeipf.p047a

com.restnoticeipf.p082g

com.restnoticeipf.p066y

com.restnoticeipf.p044u

Sharing

General

Malware Config

Signatures

File Explorer

2864a617f4ff4feb4bc41e0a32ab10f2b92e105a40a805fb967cdd1bebcda112.bin

com.restnoticeipf.p027i

com.restnoticeipf.p051r

com.restnoticeipf.p030v

com.restnoticeipf.p063z

com.restnoticeipf.p071c

com.restnoticeipf.p040e

com.restnoticeipf.p019i

com.restnoticeipf.p043y

com.restnoticeipf.p043a

com.restnoticeipf.p068z

com.restnoticeipf.p084l

com.restnoticeipf.p079w

com.restnoticeipf.p022r

com.restnoticeipf.p052t

com.restnoticeipf.p048u

com.restnoticeipf.p044z

com.restnoticeipf.p065n

com.restnoticeipf.p090t

com.restnoticeipf.p058v

com.restnoticeipf.p024h

com.restnoticeipf.p067s

com.restnoticeipf.p078m

com.restnoticeipf.p026g

com.restnoticeipf.p089a

com.restnoticeipf.p021s

com.restnoticeipf.p092e

com.restnoticeipf.p089g

com.restnoticeipf.p047a

com.restnoticeipf.p082g

com.restnoticeipf.p066y

com.restnoticeipf.p044u

Android Permissions

2864a617f4ff4feb4bc41e0a32ab10f2b92e105a40a805fb967cdd1bebcda112.bin