78fa950df8e85e4866fbd9536567d1cd

General

Target
78fa950df8e85e4866fbd9536567d1cd
Size 3.0MB
Sample240127-ccl3zaaha3
SHA256 20f45f1e7206b07876501aa829adae3e54b3620e733e7b8fee04c448078143b6
MD5 78fa950df8e85e4866fbd9536567d1cd
SHA1 b456d8806dbd21342773f73f120e64f7b0f3f8f7
SHA512 606821bd1afcaf6e7179881b6198f24619fd84efb9bf5e2e3d68b47b4510832c12af279993bac0c9f33c080767b62dd9742946be1ecb80c5d6802c67298c1658
SSDEEP 49152:GfieXW1WFm4lnNQ/ZQ7TRcBALMcdg6Y4bAQNFZtqUJS8Zwz5f8Qo+pa:GqeX7k47QQRcDcGN8Z6hk+g
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE

Requests dangerous framework permissions 8 IoCs

description	ioc
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE

File Explorer

78fa950df8e85e4866fbd9536567d1cd

.apk 3.0MB

78fa950df8e85e4866fbd9536567d1cd

SHA256 20f45f1e7206b07876501aa829adae3e54b3620e733e7b8fee04c448078143b6
MD5 78fa950df8e85e4866fbd9536567d1cd
SHA1 b456d8806dbd21342773f73f120e64f7b0f3f8f7
SHA512 606821bd1afcaf6e7179881b6198f24619fd84efb9bf5e2e3d68b47b4510832c12af279993bac0c9f33c080767b62dd9742946be1ecb80c5d6802c67298c1658
SSDEEP 49152:GfieXW1WFm4lnNQ/ZQ7TRcBALMcdg6Y4bAQNFZtqUJS8Zwz5f8Qo+pa:GqeX7k47QQRcDcGN8Z6hk+g
MD5 SHA1 SHA512 SSDEEP

android

com.uewmuueh.nxoqdhf

Android Permissions

78fa950df8e85e4866fbd9536567d1cd

Permissions

android.permission.ACCESS_NETWORK_STATE

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.CHANGE_WIFI_STATE

android.permission.REORDER_TASKS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.INTERNET

android.permission.WAKE_LOCK

android.permission.ACCESS_WIFI_STATE

android.permission.DISABLE_KEYGUARD

android.permission.SYSTEM_ALERT_WINDOW

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.CAPTURE_VIDEO_OUTPUT

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.RECEIVE_SMS

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.WRITE_SMS

android.permission.SEND_SMS

android.permission.READ_CONTACTS

android.permission.REQUEST_DELETE_PACKAGES

android.permission.READ_SMS

android.permission.CALL_PHONE

78fa950df8e85e4866fbd9536567d1cd

com.uewmuueh.nxoqdhf.bot.components.locker.LockerActivity

com.uewmuueh.nxoqdhf.bot.components.screencast.ScreencastStartActivity

com.uewmuueh.nxoqdhf.MainActivity

com.uewmuueh.nxoqdhf.bot.components.screencast.UnlockActivity

com.uewmuueh.nxoqdhf.bot.components.locker.LockerActivity$DummyActivity

com.uewmuueh.nxoqdhf.bot.PermissionsActivity

com.uewmuueh.nxoqdhf.core.injects_core.Screen

com.uewmuueh.nxoqdhf.bot.sms.ComposeSmsActivity

com.uewmuueh.nxoqdhf.bot.components.injects.system.InjAccessibilityService

com.uewmuueh.nxoqdhf.core.injects_core.Worker

com.uewmuueh.nxoqdhf.bot.components.screencast.ScreencastService

com.uewmuueh.nxoqdhf.bot.sms.HeadlessSmsSendService

com.uewmuueh.nxoqdhf.bot.components.socks5.Socks5ProxyService

com.uewmuueh.nxoqdhf.core.PeriodicJobService

com.uewmuueh.nxoqdhf.bot.sms.MmsReceiver

com.uewmuueh.nxoqdhf.bot.HelperAdmin$MyHomeReceiver

com.uewmuueh.nxoqdhf.core.injects_core.CHandler

com.uewmuueh.nxoqdhf.bot.receivers.MainReceiver

com.uewmuueh.nxoqdhf.core.PeriodicJobReceiver

com.uewmuueh.nxoqdhf.bot.sms.SmsReceiver

android.support.v4.content.FileProvider

Sharing

General

Malware Config

Signatures

File Explorer

78fa950df8e85e4866fbd9536567d1cd

com.uewmuueh.nxoqdhf.bot.components.locker.LockerActivity

com.uewmuueh.nxoqdhf.bot.components.screencast.ScreencastStartActivity

com.uewmuueh.nxoqdhf.MainActivity

com.uewmuueh.nxoqdhf.bot.components.screencast.UnlockActivity

com.uewmuueh.nxoqdhf.bot.components.locker.LockerActivity$DummyActivity

com.uewmuueh.nxoqdhf.bot.PermissionsActivity

com.uewmuueh.nxoqdhf.core.injects_core.Screen

com.uewmuueh.nxoqdhf.bot.sms.ComposeSmsActivity

com.uewmuueh.nxoqdhf.bot.components.injects.system.InjAccessibilityService

com.uewmuueh.nxoqdhf.core.injects_core.Worker

com.uewmuueh.nxoqdhf.bot.components.screencast.ScreencastService

com.uewmuueh.nxoqdhf.bot.sms.HeadlessSmsSendService

com.uewmuueh.nxoqdhf.bot.components.socks5.Socks5ProxyService

com.uewmuueh.nxoqdhf.core.PeriodicJobService

com.uewmuueh.nxoqdhf.bot.sms.MmsReceiver

com.uewmuueh.nxoqdhf.bot.HelperAdmin$MyHomeReceiver

com.uewmuueh.nxoqdhf.core.injects_core.CHandler

com.uewmuueh.nxoqdhf.bot.receivers.MainReceiver

com.uewmuueh.nxoqdhf.core.PeriodicJobReceiver

com.uewmuueh.nxoqdhf.bot.sms.SmsReceiver

android.support.v4.content.FileProvider

Android Permissions

78fa950df8e85e4866fbd9536567d1cd