gigabud | appปลอมกรมที่ดิน_DOL[.]apk

Sharing

Copy URL Twitter E-mail

General

Target
appปลอมกรมที่ดิน_DOL.apk
Size 11.9MB
Sample240222-ee1p9abc7x
SHA256 c6213e451e4a23b7725143edd1c725aa748fd9eb32e33304b4f87d63c19e0504
MD5 2e6530985058179a8adf2bb1e729d516
SHA1 1ac24292df9fb97a07472281378ca460d3a419a0
SHA512 99c9b1be06f063227d8c6e84056ada5d44284bcceafa22ff15895d1281f042b4d2452d0fcdc1ab4a5ac285c86d53c75182c95db83794685e1678dc3a64dfb3bb
SSDEEP 196608:laQ8jJjB6zkZHOmwZuXJi5J8qUN5+C8uBbXxm1B10wDQCr8wGj6yIkjF:la/NsSa38qUN5Dhg10w0wGj0A
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

gigabud

Malware Config

Signatures

Gigabud family
gigabud

Gigabud payload 1 IoCs

resource	yara_rule
sample	family_gigabud

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE

Requests dangerous framework permissions 13 IoCs

description	ioc
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS

File Explorer

appปลอมกรมที่ดิน_DOL.apk

.apk 11.9MB

appปลอมกรมที่ดิน_DOL.apk

SHA256 c6213e451e4a23b7725143edd1c725aa748fd9eb32e33304b4f87d63c19e0504
MD5 2e6530985058179a8adf2bb1e729d516
SHA1 1ac24292df9fb97a07472281378ca460d3a419a0
SHA512 99c9b1be06f063227d8c6e84056ada5d44284bcceafa22ff15895d1281f042b4d2452d0fcdc1ab4a5ac285c86d53c75182c95db83794685e1678dc3a64dfb3bb
SSDEEP 196608:laQ8jJjB6zkZHOmwZuXJi5J8qUN5+C8uBbXxm1B10wDQCr8wGj6yIkjF:la/NsSa38qUN5Dhg10w0wGj0A
MD5 SHA1 SHA512 SSDEEP

android arch:arm64 arch:arm

Gigabud payload

Password

secplayground

nrmahn.kwqzdrb.nahh

cn.hx.plugin.ui.nypwoa0.Woxyaa0Activity

cn.hx.plugin.ui.nypwoa0.Kalhsb1Activity

cn.hx.plugin.ui.nypwoa0.Zpbyec2Activity

cn.hx.plugin.ui.ulcihb1.Drkrpa0Activity

cn.hx.plugin.ui.ulcihb1.Jbkdyb1Activity

cn.hx.plugin.ui.ulcihb1.Qputgc2Activity

cn.hx.plugin.ui.sdgtrc2.Gwmcaa0Activity

cn.hx.plugin.ui.sdgtrc2.Osvdrb1Activity

cn.hx.plugin.ui.sdgtrc2.Svmpfc2Activity

cn.hx.plugin.ui.ieslrd3.Ejirfa0Activity

cn.hx.plugin.ui.ieslrd3.Zwigvb1Activity

cn.hx.plugin.ui.ieslrd3.Tydupc2Activity

cn.hx.plugin.ui.ywmade4.Xkiyua0Activity

cn.hx.plugin.ui.ywmade4.Tnzonb1Activity

cn.hx.plugin.ui.ywmade4.Asyhbc2Activity

cn.hx.plugin.ui.yiouff5.Luxnka0Activity

cn.hx.plugin.ui.yiouff5.Apyymb1Activity

cn.hx.plugin.ui.yiouff5.Kbielc2Activity

cn.hx.plugin.ui.rtsltg6.Gfkqma0Activity

cn.hx.plugin.ui.rtsltg6.Tomqxb1Activity

cn.hx.plugin.ui.rtsltg6.Nzpffc2Activity

cn.hx.plugin.ui.zodznh7.Lqqova0Activity

cn.hx.plugin.ui.zodznh7.Gpfokb1Activity

cn.hx.plugin.ui.zodznh7.Pbcntc2Activity

cn.hx.plugin.ui.udahki8.Gmftpa0Activity

cn.hx.plugin.ui.udahki8.Jzulab1Activity

cn.hx.plugin.ui.udahki8.Tpzazc2Activity

cn.hx.plugin.ui.hmmlgj9.Npsraa0Activity

cn.hx.plugin.ui.hmmlgj9.Ptsgmb1Activity

cn.hx.plugin.ui.hmmlgj9.Hdnncc2Activity

cn.hx.plugin.ui.lwrvyk10.Oqkwna0Activity

cn.hx.plugin.ui.lwrvyk10.Ybqclb1Activity

cn.hx.plugin.ui.lwrvyk10.Qpzlec2Activity

cn.hx.plugin.ui.icbxyl11.Bxbkca0Activity

cn.hx.plugin.ui.icbxyl11.Idgtab1Activity

cn.hx.plugin.ui.icbxyl11.Njggic2Activity

cn.hx.plugin.ui.jwydbm12.Txbzja0Activity

cn.hx.plugin.ui.jwydbm12.Oalndb1Activity

cn.hx.plugin.ui.jwydbm12.Wwgwuc2Activity

cn.hx.plugin.ui.nnbwin13.Uxiiza0Activity

cn.hx.plugin.ui.nnbwin13.Dxfmrb1Activity

cn.hx.plugin.ui.nnbwin13.Cfqqmc2Activity

cn.hx.plugin.ui.qiwrjo14.Zubqka0Activity

cn.hx.plugin.ui.qiwrjo14.Loudzb1Activity

cn.hx.plugin.ui.qiwrjo14.Uqzxnc2Activity

cn.hx.plugin.ui.szzlbp15.Hyxaqa0Activity

cn.hx.plugin.ui.szzlbp15.Mqdshb1Activity

cn.hx.plugin.ui.szzlbp15.Xoxutc2Activity

cn.hx.plugin.ui.vdhbbq16.Gtaoha0Activity

cn.hx.plugin.ui.vdhbbq16.Vtmthb1Activity

cn.hx.plugin.ui.vdhbbq16.Liowic2Activity

cn.hx.plugin.ui.xkpher17.Pgwbga0Activity

cn.hx.plugin.ui.xkpher17.Aiyxzb1Activity

cn.hx.plugin.ui.xkpher17.Dejvqc2Activity

cn.hx.plugin.ui.tdhiqs18.Zlvsda0Activity

cn.hx.plugin.ui.tdhiqs18.Icxxtb1Activity

cn.hx.plugin.ui.tdhiqs18.Yhcmpc2Activity

cn.hx.plugin.ui.ovoact19.Dgxkta0Activity

cn.hx.plugin.ui.ovoact19.Ibfvcb1Activity

cn.hx.plugin.ui.ovoact19.Facrlc2Activity

cn.hx.plugin.ui.qkydbu20.Coubqa0Activity

cn.hx.plugin.ui.qkydbu20.Uzhnhb1Activity

cn.hx.plugin.ui.qkydbu20.Fayksc2Activity

cn.hx.plugin.ui.luuxrv21.Agriza0Activity

cn.hx.plugin.ui.luuxrv21.Sciytb1Activity

cn.hx.plugin.ui.luuxrv21.Srvlbc2Activity

cn.hx.plugin.ui.yuhbhw22.Jvlwaa0Activity

cn.hx.plugin.ui.yuhbhw22.Zqjdxb1Activity

cn.hx.plugin.ui.yuhbhw22.Jexzmc2Activity

cn.hx.plugin.ui.axhpcx23.Sbtmta0Activity

cn.hx.plugin.ui.axhpcx23.Hbkeeb1Activity

cn.hx.plugin.ui.axhpcx23.Xsvtzc2Activity

cn.hx.plugin.ui.rbvsay24.Ysbwqa0Activity

cn.hx.plugin.ui.rbvsay24.Sasaub1Activity

cn.hx.plugin.ui.rbvsay24.Aijeqc2Activity

cn.hx.plugin.ui.pothmz25.Epgpna0Activity

cn.hx.plugin.ui.pothmz25.Vvngxb1Activity

cn.hx.plugin.ui.pothmz25.Cgfcwc2Activity

cn.hx.plugin.ui.sacvkab26.Odmbka0Activity

cn.hx.plugin.ui.sacvkab26.Jkmacb1Activity

cn.hx.plugin.ui.sacvkab26.Iztwac2Activity

cn.hx.plugin.ui.wrkmfbb27.Mhvnba0Activity

cn.hx.plugin.ui.wrkmfbb27.Jlywrb1Activity

cn.hx.plugin.ui.wrkmfbb27.Rsrdsc2Activity

cn.hx.plugin.ui.ygrtdcb28.Jvddpa0Activity

cn.hx.plugin.ui.ygrtdcb28.Lfsfxb1Activity

cn.hx.plugin.ui.ygrtdcb28.Slecdc2Activity

cn.hx.plugin.ui.ufgxadb29.Qpidla0Activity

cn.hx.plugin.ui.ufgxadb29.Nhrvib1Activity

cn.hx.plugin.ui.ufgxadb29.Uzngnc2Activity

com.xingchat.android.activity.SplashActivity

android.intent.action.MAIN

com.xingchat.android.activity.MainActivity

com.xingchat.android.activity.SettingActivity

com.xingchat.android.activity.LoginActivity

com.xingchat.android.activity.AboutUsActivity

com.xingchat.android.activity.SettingInquirePwdActivity

com.xingchat.android.activity.SettingSafePwdActivity

com.xingchat.android.activity.AAQActivity

com.xingchat.android.activity.ActivationActivity

com.xingchat.android.activity.WaitCheckActivity

com.xingchat.android.activity.TransplentPermissionActivity

com.blankj.utilcode.util.UtilsTransActivity4MainProcess

com.blankj.utilcode.util.UtilsTransActivity

com.common.lib.activity.PhotoPreviewActivity

com.common.lib.activity.CameraActivity

com.common.lib.activity.BasePermissionActivity

Android Permissions

appปลอมกรมที่ดิน_DOL.apk

Permissions

android.permission.BIND_ACCESSIBILITY_SERVICE

android.permission.REQUEST_DELETE_PACKAGES

android.permission.QUERY_ALL_PACKAGES

android.permission.GET_INSTALLED_APPS

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_NETWORK_STATE

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.DISABLE_KEYGUARD

android.permission.WAKE_LOCK

android.permission.SYSTEM_ALERT_WINDOW

android.permission.SYSTEM_OVERLAY_WINDOW

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.FOREGROUND_SERVICE

android.permission.READ_PHONE_STATE

android.permission.CAMERA

android.permission.RECORD_AUDIO

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.READ_SMS

android.permission.RECEIVE_SMS

android.permission.SEND_SMS

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.READ_EXTERNAL_STORAGE

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.WRITE_SETTINGS

android.permission.ACCESS_NOTIFICATION_POLICY