Overview

overview

10

Static

static

6

814001a82c...86.apk

android-9-x86

10

814001a82c...86.apk

android-10-x64

10

814001a82c...86.apk

android-11-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    814001a82cc709413ba6d301ad65bd32052e4aa493313117e50cfcb419e3d086

  • Size

    2.5MB

  • MD5

    ebb3f0c1dd02fa60eaae2a881445f903

  • SHA1

    32608b24115e7450dd94305efdfa982e0b6ea4bb

  • SHA256

    814001a82cc709413ba6d301ad65bd32052e4aa493313117e50cfcb419e3d086

  • SHA512

    f01d16e2d8a0611a31692e7a30062981cc8d62229b5d21515bf1fb4a74ec01cfd7c69f5014abbfc3fdbbe29135a3286bfaf62ca74fbc8048184285a1095a2a79

  • SSDEEP

    49152:gWBO0yQ1vpyQiyQryQaLaimVc926DGBeAFYMGPVb9syI/jWYByQqtMAXH/fhcY8B:LykpytyGyhatckS+GPVpNIlByFXXnr8B

Score
6/10

Malware Config

Signatures

  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 12 IoCs

Files

  • 814001a82cc709413ba6d301ad65bd32052e4aa493313117e50cfcb419e3d086
    .apk android

    pimniwgttytaiztgxszckjnliss.jtscbwzuaqb.hmtmnfpdtwglmempr

    udzxafscficpojlfpkuenizko.pxftqkwjxtuehmnimrwhi.rkgjclohdhlmunmeblpueoaqtm.ncec.myvbo


Android Permissions

814001a82cc709413ba6d301ad65bd32052e4aa493313117e50cfcb419e3d086

Permissions

android.permission.WAKE_LOCK

android.permission.GET_TASKS

android.permission.MANAGE_OWN_CALLS

android.permission.ACCESS_NETWORK_STATE

android.permission.RECORD_AUDIO

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.MANAGE_OWN_CALLS

android.permission.READ_EXTERNAL_STORAGE

android.permission.PACKAGE_USAGE_STATS

android.permission.SEND_SMS

android.permission.READ_CONTACTS

android.permission.READ_SMS

android.permission.WRITE_SMS

android.permission.RECEIVE_SMS

android.permission.ACCESS_FINE_LOCATION

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.CALL_PHONE

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.RECEIVE_BOOT_COMPLETED