703d36404e1e9bb74172bc7be5e3cfb8ffad4a6a4bee54ee0ab18deae3d105d5

General

Target

703d36404e1e9bb74172bc7be5e3cfb8ffad4a6a4bee54ee0ab18deae3d105d5.apk
Size

14.8MB
MD5

a05dcab001a60974ffe00af3b8cdd52f
SHA1

af438a9279d1e4c3cba7bf710c6a90d4283c66dc
SHA256

703d36404e1e9bb74172bc7be5e3cfb8ffad4a6a4bee54ee0ab18deae3d105d5
SHA512

bb4ab06a23bdcbfa9ac0a4fbeb3a7f17919755c3ab1e2319895fdc97ea0978101817fea1a2a41a86e4085c5beb22ca1e54e44d664854c58b303abb0616ddcc91
SSDEEP

393216:zO0kOdzbiqHYTm5y4Cv9O+zShcnF+Ml5QBYLK0sBPuF:60tvbZhCZSQFtQBYLKXm

Score

6^/10

Malware Config

Signatures

Legitimate hosting services abused for malware hosting/C2 1 TTPs

Web Service
T1102

Requests dangerous framework permissions 26 IoCs

description	ioc
Required to be able to connect to paired Bluetooth devices.	android.permission.BLUETOOTH_CONNECT
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an app to access location in the background.	android.permission.ACCESS_BACKGROUND_LOCATION
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read the user's call log.	android.permission.READ_CALL_LOG
Allows an application to write and read the user's call log data.	android.permission.WRITE_CALL_LOG
Allows an application to use SIP service.	android.permission.USE_SIP
Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether.	android.permission.PROCESS_OUTGOING_CALLS
Allows the app to answer an incoming phone call.	android.permission.ANSWER_PHONE_CALLS
Allows read access to the device's phone number(s).	android.permission.READ_PHONE_NUMBERS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to receive WAP push messages.	android.permission.RECEIVE_WAP_PUSH
Allows an application to monitor incoming MMS messages.	android.permission.RECEIVE_MMS
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE

biqfgu.mgycleom.bauokge
1⤵
PID:4271

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

1

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/biqfgu.mgycleom.bauokge/databases/androidx.work.workdb

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/biqfgu.mgycleom.bauokge/databases/androidx.work.workdb-journal

Filesize
512B

MD5
72ead5d260218fb1ebf47a0ebef33745

SHA1
82ce9b78e74e5436c71de293f5360ce7b2719d52

SHA256
bbf6e4960b5c1f3ed90f8c8906c338ae4166382d547777be5fa840554fa6c268

SHA512
9efe17175adeefda8e230236ff374a9673be28a7ed698b0a979c7e27ef3b1aa75504a00747b1795dbc42da5985ea0b15c7878f5c5d9b30b6631bfa9adc43e304

Download Submit
/data/data/biqfgu.mgycleom.bauokge/databases/androidx.work.workdb-shm

Filesize
28KB

MD5
cf845a781c107ec1346e849c9dd1b7e8

SHA1
b44ccc7f7d519352422e59ee8b0bdbac881768a7

SHA256
18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

SHA512
4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

Download Submit
/data/data/biqfgu.mgycleom.bauokge/databases/androidx.work.workdb-wal

Filesize
16KB

MD5
d6c9809c95a14e15932a17390495929b

SHA1
01c5e9e42823f0c498eb0d822fa8262324532b76

SHA256
35ea476e6562c464fb78cf9a282f190d05f65f4075eed9ed6cc9134b79a7c986

SHA512
bf70248620ac1932d4c4554d499abe4ce1fd5e740d8f2104fb6475375ae24fd47286abbc177d8d2ebe7a4436df219c3aade9439b6728439dc4d1b9505c30a3c6

Download Submit
/data/data/biqfgu.mgycleom.bauokge/databases/androidx.work.workdb-wal

Filesize
88KB

MD5
2ab23c3b5d0e175c0a10c3e5efad1b67

SHA1
18333257bc685a4378ff1eb3947eff5198027281

SHA256
f87b7ce308deef827acf111c13f556ab4a9c113501ddfdc9951ed1402f95adbf

SHA512
da4a0fbceb69aa3be9f221f9a3b1979912f2b3203b5e2bcd818ea3bd14457d535f752d8eb3cb8844ee6c371f869d095a29cd19331241e8b167fd45cbbced0553

Download Submit
/storage/emulated/0/Android/data/biqfgu.mgycleom.bauokge/files/apk/app1.apk

Filesize
101KB

MD5
8c059ff97599300b970bfe7ceb85068e

SHA1
3b3342b7da3cf1eda03db91bc60cba57bafbd2a3

SHA256
41fb5c0e53a7521213ab3dcc794aa9c309dbb225f644520c9cac806e27bbe0ec

SHA512
893eb692cad004c2d5fa3299cbdc64ac8212a3d0d33b3c617f8d709bf8f50701b57c86121ec2353283e8422a72c0416a0285f5c5f2b9c6a76fe99798daec009f

Download Submit

Analysis

Sharing