e6e736df1923c47f6624dab18bf6a341995b5e756395256aa0b3f4c43594481a[.]zip

General

Target

e6e736df1923c47f6624dab18bf6a341995b5e756395256aa0b3f4c43594481a.zip
Size

904KB
MD5

2008eef5e770fc6eab02d78a09a00309
SHA1

a45186b857079ab79364c1a7821a86640c264bc5
SHA256

67fec3383cc7efd479e9f0f151dc4586ab3cef2ecf1e363a684ee5ede270ea82
SHA512

02c2f64f0cdc7260754422c8b81a74d880e1abc846965722932dd917b7a62f9f60be02721499e2abc7f270cf950a7cdb391f6512b099ee86c73b9c576570ac23
SSDEEP

24576:vEKrmthzqycq14kGzz4HhTaT6yY/nSkrV7CB6fvlUIuu:vzrmtTDDGzzau6yY/nJReYfvl+u

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE

Requests dangerous framework permissions 5 IoCs

description	ioc
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS

Files

e6e736df1923c47f6624dab18bf6a341995b5e756395256aa0b3f4c43594481a.zip
.zip

Password: infected
e6e736df1923c47f6624dab18bf6a341995b5e756395256aa0b3f4c43594481a.apk
.apk android

Password: infected

com.cff4fcb7fa3ebdc13f.c8b4069c84dcba20f7

com.cff4fcb7fa3ebdc13f.c8b4069c84dcba20f7.qxjtsbt

Activities

com.cff4fcb7fa3ebdc13f.c8b4069c84dcba20f7.iqgnbpzvk

android.intent.action.SEND
android.intent.action.SENDTO

com.cff4fcb7fa3ebdc13f.c8b4069c84dcba20f7.qxjtsbt

android.intent.action.MAIN

Permissions

android.permission.SYSTEM_ALERT_WINDOW
android.permission.READ_EXTERNAL_STORAGE
android.permission.REQUEST_INSTALL_PACKAGES
android.permission.REQUEST_DELETE_PACKAGES
android.permission.INTERNET
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS
android.permission.WAKE_LOCK
android.permission.ACCESS_NETWORK_STATE
android.permission.REQUEST_COMPANION_RUN_IN_BACKGROUND
android.permission.REQUEST_COMPANION_USE_DATA_IN_BACKGROUND
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.RECEIVE_SMS
android.permission.READ_SMS

Receivers

com.cff4fcb7fa3ebdc13f.c8b4069c84dcba20f7.cfxyar

android.intent.action.BOOT_COMPLETED
android.intent.action.REBOOT
android.intent.action.USER_PRESENT
android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED
android.provider.Telephony.SMS_RECEIVED
android.intent.action.SCREEN_ON
android.intent.action.EXTERNAL_APPLICATIONS_AVAILABLE
android.net.conn.CONNECTIVITY_CHANGE
android.net.wifi.WIFI_STATE_CHANGED
android.intent.action.DREAMING_STOPPED

com.cff4fcb7fa3ebdc13f.c8b4069c84dcba20f7.vlqszyspt

android.provider.Telephony.SMS_RECEIVED

com.cff4fcb7fa3ebdc13f.c8b4069c84dcba20f7.norzwjh

android.provider.Telephony.SMS_DELIVER

com.cff4fcb7fa3ebdc13f.c8b4069c84dcba20f7.wvlslprur

android.provider.Telephony.WAP_PUSH_DELIVER

com.cff4fcb7fa3ebdc13f.c8b4069c84dcba20f7.xyhixwahe

android.intent.action.USER_PRESENT

Services

com.cff4fcb7fa3ebdc13f.c8b4069c84dcba20f7.wvchzwn

android.accessibilityservice.AccessibilityService

com.cff4fcb7fa3ebdc13f.c8b4069c84dcba20f7.dccedjhs

android.intent.action.RESPOND_VIA_MESSAGE

Sharing

General

Malware Config

Signatures

Files

Password: infected

Password: infected

com.cff4fcb7fa3ebdc13f.c8b4069c84dcba20f7

com.cff4fcb7fa3ebdc13f.c8b4069c84dcba20f7.qxjtsbt

Activities

com.cff4fcb7fa3ebdc13f.c8b4069c84dcba20f7.iqgnbpzvk

com.cff4fcb7fa3ebdc13f.c8b4069c84dcba20f7.qxjtsbt

Permissions

Receivers

com.cff4fcb7fa3ebdc13f.c8b4069c84dcba20f7.cfxyar

com.cff4fcb7fa3ebdc13f.c8b4069c84dcba20f7.vlqszyspt

com.cff4fcb7fa3ebdc13f.c8b4069c84dcba20f7.norzwjh

com.cff4fcb7fa3ebdc13f.c8b4069c84dcba20f7.wvlslprur

com.cff4fcb7fa3ebdc13f.c8b4069c84dcba20f7.xyhixwahe

Services

com.cff4fcb7fa3ebdc13f.c8b4069c84dcba20f7.wvchzwn

com.cff4fcb7fa3ebdc13f.c8b4069c84dcba20f7.dccedjhs