15b4ef12a281c43662138a9bb37d9456

Sharing

Copy URL Twitter E-mail

General

Target
15b4ef12a281c43662138a9bb37d9456
Size 3.2MB
Sample231230-mc8bbaafb3
SHA256 b77decb8c8407f3081f009624795035f912dd842224acb55b437dde937a338e6
MD5 15b4ef12a281c43662138a9bb37d9456
SHA1 1a9fbb759957025602457517995baf73ab615142
SHA512 a6750924d92ac92073bff32346d1cf5ba9a3908786fc73f4bbddd16c131abe2cbca05d53d9d14c69389e0e2822d542e324c3aaf6ab507d94b626aed7f768b3e4
SSDEEP 49152:zfNfFh0ky8itaHUrnKvVBxQhozddqwhDjbjxxlVWC8K2maOqvyYSKTEj3vO7VXjh:B0FnLupF1jbjxxldsaYSKwjii5gl
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE

Requests dangerous framework permissions 10 IoCs

description	ioc
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS

File Explorer

15b4ef12a281c43662138a9bb37d9456

.apk 3.2MB

15b4ef12a281c43662138a9bb37d9456

SHA256 b77decb8c8407f3081f009624795035f912dd842224acb55b437dde937a338e6
MD5 15b4ef12a281c43662138a9bb37d9456
SHA1 1a9fbb759957025602457517995baf73ab615142
SHA512 a6750924d92ac92073bff32346d1cf5ba9a3908786fc73f4bbddd16c131abe2cbca05d53d9d14c69389e0e2822d542e324c3aaf6ab507d94b626aed7f768b3e4
SSDEEP 49152:zfNfFh0ky8itaHUrnKvVBxQhozddqwhDjbjxxlVWC8K2maOqvyYSKTEj3vO7VXjh:B0FnLupF1jbjxxldsaYSKwjii5gl
MD5 SHA1 SHA512 SSDEEP

android

already.lamp.alien

fluid.horn.just.AEiQeWnJwXgSfKbTlKd

fluid.horn.just.MIbTdDyApLpTuRuZhMgToYiLoXmEtRqXqDwZbTsMoKlMtYjKb

fluid.horn.just.SCfWsAyHuMnAcToQtSeFzPhXtXfMzSzGnGbUyKrFsAaDpDw

fluid.horn.just.PKbCwMfSzDcMqCtHaFpThBnKfPb

fluid.horn.just.HDbFtKdRgNkLpRf

fluid.horn.just.HEgUwFuLgTpZfHgZrEzYoDjFeWmLlHsYgLmRlOeWh

fluid.horn.just.YRxYwPcPgHhQzRuAuJqEbSfQoZjOxYb

com.google.android.gms.common.api.GoogleApiActivity

fluid.horn.just.INzIqKlMnCrYnAmCpZaXsUmPpQbDiLr

fluid.horn.just.LWfZfEiYqGeWlQsXrSrWjKf

fluid.horn.just.ztx

fluid.horn.just.CSgMqJhAlGoRqHgQuLaZsOeDpLfAfRaQj

fluid.horn.just.iqder

fluid.horn.just.XJfIoLjNsEhZxOlWnItCyQqArUkLnCfYsQuGaAuTyNm

fluid.horn.just.GOkCaTxAqChMdHbWpOqItTnAgXkYzEnGeAhYeLaTeYlPsLhQi

fluid.horn.just.RDtWhZpTgHk

fluid.horn.just.wcxmnkhnylmvx

fluid.horn.just.HBgBdGrOkRnHqTpHgOqBnMpGbLsSz

fluid.horn.just.PDzEpOnPlJtKf

fluid.horn.just.xvzzd

android.intent.action.SEND android.intent.action.SENDTO

fluid.horn.just.HEhDlCyYzZpQeKbMlAdBs

fluid.horn.just.XYoUfIiStEiFsIfOiDhPbClGdXwUsNmDcTwEnRwWhHzWkZkJyWbJf

fluid.horn.just.WMyKwOcPwXeNfShXtApPkNfNcLgIjAqYdUq

fluid.horn.just.TSqXkUdQzUdTcFmPrPfJfZaGqKcZgUnZpByDoZwJsHrUl

fluid.horn.just.DGpOzKbAxZyGxRrRqDgZwSsElGlMd

fluid.horn.just.EFjMiJhPoMuKcYgCtDnXjWtUoCnXtQhCmIeKn

fluid.horn.just.EDnUzPgIdUoXtOiUdZzDjScRsEgEbXcZlSfDwXzJoHoHtNkDnIcCkXj

fluid.horn.just.mrcghswj

fluid.horn.just.AAmYbReEbAePwUzKiWmLwXyBxTp

fluid.horn.just.CQiFyZwNuSzQdFbLgMcUtBdCdBlIo

fluid.horn.just.KRmHjWbUkKnMlDxGtHpJsZe

fluid.horn.just.JKyRiHhXq

fluid.horn.just.hqasapzhb

fluid.horn.just.NXmTmLhJtRuRfAwDwTiZcBxSjUlJgRjGnIgXm

fluid.horn.just.UNxNiAaMzFdPfHoJnOaQnBrHo

fluid.horn.just.rycdrlzdubznk

android.intent.action.MAIN

fluid.horn.just.SKfSyHyJtKwFl

fluid.horn.just.AClBlOfEiPcCrFgAfAaKuWoHbZlUiTeYkChPeUgLtZhOgHd

fluid.horn.just.TCxNdCfAdKoEkBiKhMpQgCrPwTrGa

fluid.horn.just.vhijmduyekht

fluid.horn.just.RBcGiYgFzGfWmWmQnCqLm

fluid.horn.just.UWnSlNbZc

fluid.horn.just.qyaneumhhmokwqva

fluid.horn.just.HHnUeYlToSyQd

fluid.horn.just.QQiRkOiXjFzSqKiBdUeOlEuEh

fluid.horn.just.SMeXjCiJeOnYlDtEqJqEiXsKoDuYnUcRyPcItUqGeGqLcOfYzTr

fluid.horn.just.DLrPlQsUzZkQrQwBcHkFiWqLtPkGuKa

fluid.horn.just.IHtSsMuYt

fluid.horn.just.JPwJlDwIjHyIrHdBcNmFyCbAqRqXnQwRmEx

fluid.horn.just.AAbEgCeGaSfHrThLiBdDlYnAfAmKfPrFtTrXcZtEeOl

Android Permissions

15b4ef12a281c43662138a9bb37d9456

Permissions

android.permission.SEND_SMS

android.permission.GET_ACCOUNTS

android.permission.FOREGROUND_SERVICE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.USE_FULL_SCREEN_INTENT

android.permission.INTERNET

android.permission.READ_SMS

android.permission.WAKE_LOCK

android.permission.CALL_PHONE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.RECORD_AUDIO

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.REQUEST_DELETE_PACKAGES

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.READ_CONTACTS

android.permission.RECEIVE_SMS

Sharing

General

Malware Config

Signatures

File Explorer

15b4ef12a281c43662138a9bb37d9456

fluid.horn.just.AEiQeWnJwXgSfKbTlKd

fluid.horn.just.MIbTdDyApLpTuRuZhMgToYiLoXmEtRqXqDwZbTsMoKlMtYjKb

fluid.horn.just.SCfWsAyHuMnAcToQtSeFzPhXtXfMzSzGnGbUyKrFsAaDpDw

fluid.horn.just.PKbCwMfSzDcMqCtHaFpThBnKfPb

fluid.horn.just.HDbFtKdRgNkLpRf

fluid.horn.just.HEgUwFuLgTpZfHgZrEzYoDjFeWmLlHsYgLmRlOeWh

fluid.horn.just.YRxYwPcPgHhQzRuAuJqEbSfQoZjOxYb

com.google.android.gms.common.api.GoogleApiActivity

fluid.horn.just.INzIqKlMnCrYnAmCpZaXsUmPpQbDiLr

fluid.horn.just.LWfZfEiYqGeWlQsXrSrWjKf

fluid.horn.just.ztx

fluid.horn.just.CSgMqJhAlGoRqHgQuLaZsOeDpLfAfRaQj

fluid.horn.just.iqder

fluid.horn.just.XJfIoLjNsEhZxOlWnItCyQqArUkLnCfYsQuGaAuTyNm

fluid.horn.just.GOkCaTxAqChMdHbWpOqItTnAgXkYzEnGeAhYeLaTeYlPsLhQi

fluid.horn.just.RDtWhZpTgHk

fluid.horn.just.wcxmnkhnylmvx

fluid.horn.just.HBgBdGrOkRnHqTpHgOqBnMpGbLsSz

fluid.horn.just.PDzEpOnPlJtKf

fluid.horn.just.xvzzd

fluid.horn.just.HEhDlCyYzZpQeKbMlAdBs

fluid.horn.just.XYoUfIiStEiFsIfOiDhPbClGdXwUsNmDcTwEnRwWhHzWkZkJyWbJf

fluid.horn.just.WMyKwOcPwXeNfShXtApPkNfNcLgIjAqYdUq

fluid.horn.just.TSqXkUdQzUdTcFmPrPfJfZaGqKcZgUnZpByDoZwJsHrUl

fluid.horn.just.DGpOzKbAxZyGxRrRqDgZwSsElGlMd

fluid.horn.just.EFjMiJhPoMuKcYgCtDnXjWtUoCnXtQhCmIeKn

fluid.horn.just.EDnUzPgIdUoXtOiUdZzDjScRsEgEbXcZlSfDwXzJoHoHtNkDnIcCkXj

fluid.horn.just.mrcghswj

fluid.horn.just.AAmYbReEbAePwUzKiWmLwXyBxTp

fluid.horn.just.CQiFyZwNuSzQdFbLgMcUtBdCdBlIo

fluid.horn.just.KRmHjWbUkKnMlDxGtHpJsZe

fluid.horn.just.JKyRiHhXq

fluid.horn.just.hqasapzhb

fluid.horn.just.NXmTmLhJtRuRfAwDwTiZcBxSjUlJgRjGnIgXm

fluid.horn.just.UNxNiAaMzFdPfHoJnOaQnBrHo

fluid.horn.just.rycdrlzdubznk

fluid.horn.just.SKfSyHyJtKwFl

fluid.horn.just.AClBlOfEiPcCrFgAfAaKuWoHbZlUiTeYkChPeUgLtZhOgHd

fluid.horn.just.TCxNdCfAdKoEkBiKhMpQgCrPwTrGa

fluid.horn.just.vhijmduyekht

fluid.horn.just.RBcGiYgFzGfWmWmQnCqLm

fluid.horn.just.UWnSlNbZc

fluid.horn.just.qyaneumhhmokwqva

fluid.horn.just.HHnUeYlToSyQd

fluid.horn.just.QQiRkOiXjFzSqKiBdUeOlEuEh

fluid.horn.just.SMeXjCiJeOnYlDtEqJqEiXsKoDuYnUcRyPcItUqGeGqLcOfYzTr

fluid.horn.just.DLrPlQsUzZkQrQwBcHkFiWqLtPkGuKa

fluid.horn.just.IHtSsMuYt

fluid.horn.just.JPwJlDwIjHyIrHdBcNmFyCbAqRqXnQwRmEx

fluid.horn.just.AAbEgCeGaSfHrThLiBdDlYnAfAmKfPrFtTrXcZtEeOl

fluid.horn.just.crcstgixcn

fluid.horn.just.tmihbjowpowqfkv

fluid.horn.just.xbvcdxtlzenb

fluid.horn.just.nuuehksjmgcf

fluid.horn.just.doxgekiz

fluid.horn.just.fcco

fluid.horn.just.sorcgikcvn

fluid.horn.just.ekvxko

fluid.horn.just.qwevqiud

fluid.horn.just.nbqzmq

fluid.horn.just.erwnxmp

fluid.horn.just.rmcngeakbjhon

fluid.horn.just.hvienbw

fluid.horn.just.fbropccshsfir

fluid.horn.just.lcrxdnrpi

fluid.horn.just.kamyvg

fluid.horn.just.jaksqquftao

fluid.horn.just.kgdwgaihtcm

Android Permissions

15b4ef12a281c43662138a9bb37d9456