3cc9e8cfe985ba20254c314537a5a851[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3cc9e8cfe985ba20254c314537a5a851.bin
Size

8.2MB
MD5

b394035c6e042891248f399d6d908b60
SHA1

89693f3f1c436f265d433588119cf56b1f3c54ce
SHA256

b82e58117dcf37eab40d3426827848e01fb13f0e1055940cfe22aaab6b207fba
SHA512

392c37c48e2567be315815f413441321d79f43dfbc90d8e73e2c3806ffe41be09c268e48544a7bc155d79c45d79f76af2d71b21f357286dfc2f10c720cca5965
SSDEEP

196608:BPDRf5Z2/PN7z2u5yK8rtZ7wbNyBlHAu/ToFapGt:FRfHEV73yK8rtHlgu/8FWGt

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 1 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE

Files

3cc9e8cfe985ba20254c314537a5a851.bin
.zip

Password: infected
36c7e45595426c0b91888874fb60aececac84a29289a111b623e5dd22540c34f.apk
.apk android arch:arm

Password: infected

io.luminati.lum_sdk_test

io.luminati.lum_sdk_test.main_activity

Activities

io.luminati.lum_sdk_test.main_activity

android.intent.action.MAIN

Permissions

android.permission.INTERNET
android.permission.READ_PHONE_STATE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.ACCESS_NETWORK_STATE

Receivers

io.topvpn.vpn_api.bcast_recv

android.intent.action.MEDIA_EJECT
android.intent.action.MEDIA_MOUNTED
android.intent.action.MEDIA_UNMOUNTED
android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED
android.intent.action.PHONE_STATE
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.BOOT_COMPLETED
android.intent.action.PACKAGE_REPLACED
android.intent.action.MY_PACKAGE_REPLACED

Services