77509e714b925cbd657145157246e995f80ac51d4582733497bb6c25f3bed75a

General

Target
77509e714b925cbd657145157246e995f80ac51d4582733497bb6c25f3bed75a
Size 1.7MB
Sample231220-bfvnvadegk
SHA256 77509e714b925cbd657145157246e995f80ac51d4582733497bb6c25f3bed75a
MD5 8d93679f27d398c9e07afb37d0d00235
SHA1 6614fd775ff4d8cc9bdf1bc9edf7fb03337dcbac
SHA512 2b40208df69b5989f5298952ebec29032f476d181e72744bf26d11dfc333c3c4360150c248684a03adea3f88194e3a2984c71c8fdbf64256df4a09eee9e47c7c
SSDEEP 24576:t23hdzNt1fs3vYyMMhbIonSgyF8gSfYtoR9dIBTYOQzB7WaFNm262kXI/D/96Gz5:ItxsfTRz88BgGR9dIBTYOQ1aXI5bMk
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE

Requests dangerous framework permissions 8 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS

File Explorer

77509e714b925cbd657145157246e995f80ac51d4582733497bb6c25f3bed75a

.apk 1.7MB

77509e714b925cbd657145157246e995f80ac51d4582733497bb6c25f3bed75a

SHA256 77509e714b925cbd657145157246e995f80ac51d4582733497bb6c25f3bed75a
MD5 8d93679f27d398c9e07afb37d0d00235
SHA1 6614fd775ff4d8cc9bdf1bc9edf7fb03337dcbac
SHA512 2b40208df69b5989f5298952ebec29032f476d181e72744bf26d11dfc333c3c4360150c248684a03adea3f88194e3a2984c71c8fdbf64256df4a09eee9e47c7c
SSDEEP 24576:t23hdzNt1fs3vYyMMhbIonSgyF8gSfYtoR9dIBTYOQzB7WaFNm262kXI/D/96Gz5:ItxsfTRz88BgGR9dIBTYOQ1aXI5bMk
MD5 SHA1 SHA512 SSDEEP

android arch:arm64 arch:arm arch:x86 arch:x64

com.decidelovehxx

Android Permissions

77509e714b925cbd657145157246e995f80ac51d4582733497bb6c25f3bed75a

Permissions

android.permission.CLEAR_APP_CACHE

android.permission.USE_FINGERPRINT

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.GET_PACKAGE_SIZE

android.permission.BATTERY_STATS

android.permission.ADD_VOICEMAIL

android.permission.INSTALL_SHORTCUT

android.permission.READ_EXTERNAL_STORAGE

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.INTERNET

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.Manifest.permission.READ_PHONE_STATE

android.permission.SEND_SMS

android.permission.WAKE_LOCK

android.permission.READ_PHONE_STATE

android.permission.CALL_PHONE

android.permission.USES_POLICY_FORCE_LOCK

android.permission.VIBRATE

android.permission.REQUEST_COMPANION_RUN_IN_BACKGROUND

android.permission.REQUEST_COMPANION_USE_DATA_IN_BACKGROUND

android.permission.REQUEST_DELETE_PACKAGES

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_SETTINGS

android.permission.REORDER_TASKS

Sharing

General

Malware Config

Signatures

File Explorer

77509e714b925cbd657145157246e995f80ac51d4582733497bb6c25f3bed75a

com.decidelovehxx.p040w

com.decidelovehxx.p019b

com.decidelovehxx.p072g

com.decidelovehxx.p092l

com.decidelovehxx.p081w

com.decidelovehxx.p059f

com.decidelovehxx.p039k

com.decidelovehxx.p042l

com.decidelovehxx.p038k

com.decidelovehxx.p034s

com.decidelovehxx.p092i

com.decidelovehxx.oxoediqlbxgd

com.decidelovehxx.grturbuoff

com.decidelovehxx.bpccvqznxliic

com.decidelovehxx.mnoajtfwcks

com.decidelovehxx.xidrloueemx

com.decidelovehxx.uvilmbjuzlubmx

com.decidelovehxx.phgxcgzetnubn

com.decidelovehxx.aplnpqnpmd

com.decidelovehxx.p053h

com.decidelovehxx.p098j

com.decidelovehxx.p058o

com.decidelovehxx.LogSrv

com.decidelovehxx.p054s

com.decidelovehxx.p041p

com.decidelovehxx.p099f

com.decidelovehxx.p075w

com.decidelovehxx.p057a

com.decidelovehxx.p069q

com.decidelovehxx.p067j

com.decidelovehxx.p094b

com.decidelovehxx.ghkbyzisape

com.decidelovehxx.tziieejden

com.decidelovehxx.ktluwrejamtvpm

com.decidelovehxx.aqqctdnpwhjcuya

com.decidelovehxx.hujpqdwmubmrm

com.decidelovehxx.abaowygpewhjntx

com.decidelovehxx.cdzoxcohon

com.decidelovehxx.p068m

com.decidelovehxx.p073g

com.decidelovehxx.p060q

com.decidelovehxx.p073x

com.decidelovehxx.p034p

com.decidelovehxx.p062i

com.decidelovehxx.p021r

com.decidelovehxx.p044u

com.decidelovehxx.ujkcywhoqrqvylv

com.decidelovehxx.nudohjbvoqi

com.decidelovehxx.icuukjffqxpi

com.decidelovehxx.vdfypivlzzy

com.decidelovehxx.ifiogxrlknn

com.decidelovehxx.iybkelwgyupml

com.decidelovehxx.cuicwqbsmxohmlt

com.decidelovehxx.fygnvtyurym

Android Permissions

77509e714b925cbd657145157246e995f80ac51d4582733497bb6c25f3bed75a