General

  • Target

    brasdexapk.zip

  • Size

    1.1MB

  • MD5

    61a5d11203e104a448e7f4acff4ec0bd

  • SHA1

    0bec657852cc1e93896451d6efdf4bb9d1c78490

  • SHA256

    b549733ed3b77d97c7b2f9f651f22abc4df50899c01612a28ec6809d1a2c0040

  • SHA512

    e3eea065a13d9a4ce0b34ed56832447e4d32af337b3a2c8679336acca58c206de89f7e1f5f7d3ec4f245a098cff224d935af0fd9c8978d703fd44f6431a68491

  • SSDEEP

    12288:jQQc/GgIJCFymjvfBL0wvpWbVL5PFgDjk+Pnka9B7LQmSuPQP35ygRtTl1iZysMy:jQrfISfoVL9Fgs+vBdSuPA/g

Score
10/10

Malware Config

Extracted

Family

brasdex

C2

http://brasdex.com:3000

Signatures

  • Brasdex family
  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 2 IoCs

Files

  • brasdexapk.zip
    .apk android

    com.mydocs.documents

    com.mydocs.documents.mainActivity


Android Permissions

brasdexapk.zip

Permissions

android.permission.INTERNET

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.READ_PHONE_STATE

android.permission.REQUEST_DELETE_PACKAGES

android.permission.READ_CONTACTS

android.permission.WAKE_LOCK

android.permission.FOREGROUND_SERVICE