71e086ef15932b8b1c204a431dfed67a117ca80a165154e5fdec3d5d9eae7fa7

General

Target
71e086ef15932b8b1c204a431dfed67a117ca80a165154e5fdec3d5d9eae7fa7
Size 1.4MB
Sample231220-aepwjaaghl
SHA256 71e086ef15932b8b1c204a431dfed67a117ca80a165154e5fdec3d5d9eae7fa7
MD5 7151c696c3ccde15defd7b1802912f0a
SHA1 1ea1afa40b79eb1c5019f03d30f67c7a6e01bbd7
SHA512 942ab62ce810dd01f06a05cedff9b13f3fae6014cc8ca8319943d85bc45dfc064305cea7ab9e68dbb6d52d7627b8605f6d51d4b2ae81300261457f33b066e343
SSDEEP 24576:5R9fsaqXHu1Nx2p1NX1EZEZz5n3ePq920qmPyCg4gvW05y+:r9ERXHuXx2/NmZEZz5nuS9jqmPyCg4g/
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE

Requests dangerous framework permissions 9 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to collect component usage statistics.	android.permission.PACKAGE_USAGE_STATS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW

File Explorer

71e086ef15932b8b1c204a431dfed67a117ca80a165154e5fdec3d5d9eae7fa7

.apk 1.4MB

71e086ef15932b8b1c204a431dfed67a117ca80a165154e5fdec3d5d9eae7fa7

SHA256 71e086ef15932b8b1c204a431dfed67a117ca80a165154e5fdec3d5d9eae7fa7
MD5 7151c696c3ccde15defd7b1802912f0a
SHA1 1ea1afa40b79eb1c5019f03d30f67c7a6e01bbd7
SHA512 942ab62ce810dd01f06a05cedff9b13f3fae6014cc8ca8319943d85bc45dfc064305cea7ab9e68dbb6d52d7627b8605f6d51d4b2ae81300261457f33b066e343
SSDEEP 24576:5R9fsaqXHu1Nx2p1NX1EZEZz5n3ePq920qmPyCg4gvW05y+:r9ERXHuXx2/NmZEZz5nuS9jqmPyCg4g/
MD5 SHA1 SHA512 SSDEEP

android arch:arm64 arch:arm arch:x86 arch:x64

com.threebeauty7

Android Permissions

71e086ef15932b8b1c204a431dfed67a117ca80a165154e5fdec3d5d9eae7fa7

Permissions

android.permission.GET_PACKAGE_SIZE

android.permission.ADD_VOICEMAIL

android.permission.CLEAR_APP_CACHE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.USE_FINGERPRINT

android.permission.BATTERY_STATS

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.INTERNET

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.Manifest.permission.READ_PHONE_STATE

android.permission.SEND_SMS

android.permission.WAKE_LOCK

android.permission.READ_PHONE_STATE

android.permission.CALL_PHONE

android.permission.USES_POLICY_FORCE_LOCK

android.permission.VIBRATE

android.permission.REQUEST_COMPANION_RUN_IN_BACKGROUND

android.permission.REQUEST_COMPANION_USE_DATA_IN_BACKGROUND

android.permission.REQUEST_DELETE_PACKAGES

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_SETTINGS

android.permission.REORDER_TASKS

android.permission.PACKAGE_USAGE_STATS

android.permission.ACTION_MANAGE_OVERLAY_PERMISSION

android.permission.SYSTEM_ALERT_WINDOW

Sharing

General

Malware Config

Signatures

File Explorer

71e086ef15932b8b1c204a431dfed67a117ca80a165154e5fdec3d5d9eae7fa7

com.threebeauty7.p090i

com.threebeauty7.p019d

com.threebeauty7.p085k

com.threebeauty7.p024g

com.threebeauty7.p076t

com.threebeauty7.p013p

com.threebeauty7.p029i

com.threebeauty7.p053c

com.threebeauty7.p060g

com.threebeauty7.p099f

com.threebeauty7.p037s

com.threebeauty7.p071z

com.threebeauty7.jaitwmlaaxt

com.threebeauty7.gcqywxgoatqxd

com.threebeauty7.stygqpbmmzis

com.threebeauty7.ygcbqlkmetwe

com.threebeauty7.lzizbagjqz

com.threebeauty7.yhplnpwqnchujtp

com.threebeauty7.yyhvvnfuzfuj

com.threebeauty7.hyznjweuqdxzble

com.threebeauty7.p026c

com.threebeauty7.p051i

com.threebeauty7.p077m

com.threebeauty7.LogSrv

com.threebeauty7.p031t

com.threebeauty7.p020o

com.threebeauty7.p083f

com.threebeauty7.p013k

com.threebeauty7.p053d

com.threebeauty7.p019k

com.threebeauty7.p053e

com.threebeauty7.etpjifnlepqlush

com.threebeauty7.bkmetqovvy

com.threebeauty7.bvlulkrlzy

com.threebeauty7.cvnryvogmw

com.threebeauty7.p019j

com.threebeauty7.p094n

com.threebeauty7.p024i

com.threebeauty7.p086k

com.threebeauty7.p099p

com.threebeauty7.p022x

com.threebeauty7.p085b

com.threebeauty7.p074p

com.threebeauty7.qllwjmnspixapkk

com.threebeauty7.zdqoyejywxjj

com.threebeauty7.bfxfuekarec

com.threebeauty7.gdiqnftfawsuj

com.threebeauty7.kmgjaxiwrbidocq

com.threebeauty7.kwbvtbhleyzk

com.threebeauty7.omnflnamgxi

com.threebeauty7.hnmcwuipgcvauzg

Android Permissions

71e086ef15932b8b1c204a431dfed67a117ca80a165154e5fdec3d5d9eae7fa7