6d70a0b91afd6647f2674ae00ff2c85c2b6edb9cc6e098c9e1aae5d94ab91184

General

Target
6d70a0b91afd6647f2674ae00ff2c85c2b6edb9cc6e098c9e1aae5d94ab91184
Size 1.4MB
Sample231219-3lxtyaghfl
SHA256 6d70a0b91afd6647f2674ae00ff2c85c2b6edb9cc6e098c9e1aae5d94ab91184
MD5 36a200553785b8de20161334b66f2975
SHA1 aed21f79c45f4aeaff494e4ab6aec84371897006
SHA512 36eab3018ca4c9a2c1851239c3daab175c52f85c8929af8f392178887b9425097e4652139a3bc451e6a68faa715101e60a10e84632f08164e69b7111901d15a2
SSDEEP 24576:DgogPenbZZ2rjA16nYwuuuGWh8s8eByp/nUbJaCioPZcjdNp9VH5Ozqgv8LVC0:aWYO6ndZuGg8eaCZRcZNLVH5Ozqgv8U0
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE

Requests dangerous framework permissions 8 IoCs

description	ioc
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to collect component usage statistics.	android.permission.PACKAGE_USAGE_STATS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW

File Explorer

6d70a0b91afd6647f2674ae00ff2c85c2b6edb9cc6e098c9e1aae5d94ab91184

.apk 1.4MB

6d70a0b91afd6647f2674ae00ff2c85c2b6edb9cc6e098c9e1aae5d94ab91184

SHA256 6d70a0b91afd6647f2674ae00ff2c85c2b6edb9cc6e098c9e1aae5d94ab91184
MD5 36a200553785b8de20161334b66f2975
SHA1 aed21f79c45f4aeaff494e4ab6aec84371897006
SHA512 36eab3018ca4c9a2c1851239c3daab175c52f85c8929af8f392178887b9425097e4652139a3bc451e6a68faa715101e60a10e84632f08164e69b7111901d15a2
SSDEEP 24576:DgogPenbZZ2rjA16nYwuuuGWh8s8eByp/nUbJaCioPZcjdNp9VH5Ozqgv8LVC0:aWYO6ndZuGg8eaCZRcZNLVH5Ozqgv8U0
MD5 SHA1 SHA512 SSDEEP

android arch:arm64 arch:arm arch:x86 arch:x64

com.surfacerain0

Android Permissions

6d70a0b91afd6647f2674ae00ff2c85c2b6edb9cc6e098c9e1aae5d94ab91184

Permissions

android.permission.ADD_VOICEMAIL

android.permission.BATTERY_STATS

android.permission.CLEAR_APP_CACHE

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.INTERNET

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.Manifest.permission.READ_PHONE_STATE

android.permission.SEND_SMS

android.permission.WAKE_LOCK

android.permission.READ_PHONE_STATE

android.permission.CALL_PHONE

android.permission.USES_POLICY_FORCE_LOCK

android.permission.VIBRATE

android.permission.REQUEST_COMPANION_RUN_IN_BACKGROUND

android.permission.REQUEST_COMPANION_USE_DATA_IN_BACKGROUND

android.permission.REQUEST_DELETE_PACKAGES

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_SETTINGS

android.permission.REORDER_TASKS

android.permission.PACKAGE_USAGE_STATS

android.permission.ACTION_MANAGE_OVERLAY_PERMISSION

android.permission.SYSTEM_ALERT_WINDOW

Sharing

General

Malware Config

Signatures

File Explorer

6d70a0b91afd6647f2674ae00ff2c85c2b6edb9cc6e098c9e1aae5d94ab91184

com.surfacerain0.p078s

com.surfacerain0.p030b

com.surfacerain0.p075v

com.surfacerain0.p032w

com.surfacerain0.p066i

com.surfacerain0.p047c

com.surfacerain0.p053q

com.surfacerain0.p014i

com.surfacerain0.p031c

com.surfacerain0.p032k

com.surfacerain0.p030k

com.surfacerain0.p047q

com.surfacerain0.ttbigoopfbqz

com.surfacerain0.vltcozvcea

com.surfacerain0.iijmlwzkhhjptgp

com.surfacerain0.jxgjkhbqrj

com.surfacerain0.p032o

com.surfacerain0.p075f

com.surfacerain0.p092j

com.surfacerain0.LogSrv

com.surfacerain0.p082u

com.surfacerain0.p092d

com.surfacerain0.p091l

com.surfacerain0.p080v

com.surfacerain0.p049d

com.surfacerain0.p090a

com.surfacerain0.p011y

com.surfacerain0.p015g

com.surfacerain0.wflfbdayvojuvbd

com.surfacerain0.racrkuajtgu

com.surfacerain0.bufjsxuzlna

com.surfacerain0.dwxsinfsacm

com.surfacerain0.p061h

com.surfacerain0.p036f

com.surfacerain0.p032t

com.surfacerain0.p070m

com.surfacerain0.p024x

com.surfacerain0.p044j

com.surfacerain0.p090h

com.surfacerain0.p017n

com.surfacerain0.ijejozeoepuk

com.surfacerain0.tmpwpxwaeqskzw

com.surfacerain0.klfkndopkdn

com.surfacerain0.xendidfvdotr

com.surfacerain0.wmepsfqbabgzeda

com.surfacerain0.rwgftymxvwyov

com.surfacerain0.vvdewzadtxkaan

Android Permissions

6d70a0b91afd6647f2674ae00ff2c85c2b6edb9cc6e098c9e1aae5d94ab91184