1154984469ac6f8fa6bb9f7e2ea3796e78859590bf08b10811ac6f8742033b61[.]bin

General

Target
1154984469ac6f8fa6bb9f7e2ea3796e78859590bf08b10811ac6f8742033b61.bin
Size 541KB
Sample240223-116dhsag71
SHA256 1154984469ac6f8fa6bb9f7e2ea3796e78859590bf08b10811ac6f8742033b61
MD5 28a0c0cb35835accd79169a3b1e6ba91
SHA1 71c82367955de4bf230fd4a1cce77a94da04d71e
SHA512 be0fcee772ab7af3ff8f7e27aeaf2d9012f141cd5243fc11b744435fa1da7c89397698d608bd6db24a4f954b030c5a1b0e077b871ad65dbb432a5b1060464f0e
SSDEEP 12288:wPgwUGCtNzU5zUgmlATMLtmbJgbQXo9yo3EBrsA+xlZRE5gnn:wPnwNiPcAgJEgOo9LEBINKgnn
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE

Requests dangerous framework permissions 7 IoCs

description	ioc
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS

File Explorer

1154984469ac6f8fa6bb9f7e2ea3796e78859590bf08b10811ac6f8742033b61.bin

.apk 541KB

1154984469ac6f8fa6bb9f7e2ea3796e78859590bf08b10811ac6f8742033b61.bin

SHA256 1154984469ac6f8fa6bb9f7e2ea3796e78859590bf08b10811ac6f8742033b61
MD5 28a0c0cb35835accd79169a3b1e6ba91
SHA1 71c82367955de4bf230fd4a1cce77a94da04d71e
SHA512 be0fcee772ab7af3ff8f7e27aeaf2d9012f141cd5243fc11b744435fa1da7c89397698d608bd6db24a4f954b030c5a1b0e077b871ad65dbb432a5b1060464f0e
SSDEEP 12288:wPgwUGCtNzU5zUgmlATMLtmbJgbQXo9yo3EBrsA+xlZRE5gnn:wPnwNiPcAgJEgOo9LEBINKgnn
MD5 SHA1 SHA512 SSDEEP

android arch:arm64 arch:arm arch:x86 arch:x64

com.buildatj

Android Permissions

1154984469ac6f8fa6bb9f7e2ea3796e78859590bf08b10811ac6f8742033b61.bin

Permissions

android.permission.INSTALL_SHORTCUT

android.permission.ADD_VOICEMAIL

android.permission.CLEAR_APP_CACHE

android.permission.GET_PACKAGE_SIZE

android.permission.READ_EXTERNAL_STORAGE

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.INTERNET

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.Manifest.permission.READ_PHONE_STATE

android.permission.SEND_SMS

android.permission.WAKE_LOCK

android.permission.READ_PHONE_STATE

android.permission.CALL_PHONE

android.permission.USES_POLICY_FORCE_LOCK

android.permission.VIBRATE

android.permission.REQUEST_COMPANION_RUN_IN_BACKGROUND

android.permission.REQUEST_COMPANION_USE_DATA_IN_BACKGROUND

android.permission.REQUEST_DELETE_PACKAGES

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_SETTINGS

android.permission.REORDER_TASKS

Sharing

General

Malware Config

Signatures

File Explorer

1154984469ac6f8fa6bb9f7e2ea3796e78859590bf08b10811ac6f8742033b61.bin

com.buildatj.p019c

com.buildatj.p034v

com.buildatj.p088y

com.buildatj.p058o

com.buildatj.p073f

com.buildatj.p061y

com.buildatj.p086a

com.buildatj.p026t

com.buildatj.p090l

com.buildatj.p092o

com.buildatj.p050z

com.buildatj.p063b

com.buildatj.cjxpocmqndk

com.buildatj.xeftrbjciezjpc

com.buildatj.kglxubcvucz

com.buildatj.zsyqbbewlmgnnyw

com.buildatj.nlllqnmeig

com.buildatj.udgcarohyu

com.buildatj.p029d

com.buildatj.p055v

com.buildatj.p044v

com.buildatj.LogSrv

com.buildatj.p051x

com.buildatj.p080r

com.buildatj.p071a

com.buildatj.p076r

com.buildatj.p078r

com.buildatj.p048h

com.buildatj.p015b

com.buildatj.sxnwkpoxnnkpx

com.buildatj.oimnbktdjhhmnpl

com.buildatj.ymogcilwnkfgozr

com.buildatj.plopugesrq

com.buildatj.ycpmxqokwedbob

com.buildatj.p051m

com.buildatj.p087k

com.buildatj.p062t

com.buildatj.p059l

com.buildatj.p019v

com.buildatj.p042x

com.buildatj.p012s

com.buildatj.p094o

com.buildatj.p025u

com.buildatj.qtlloipcchp

com.buildatj.lhgbefggrcpnk

com.buildatj.omnergyjuox

com.buildatj.dzjmvmmgifeykpm

com.buildatj.bcmzspugch

com.buildatj.bjjfcsvjapawwcd

com.buildatj.cymjmpacicpgmpw

com.buildatj.asdqqkkoao

com.buildatj.wiuzbogjhtv

Android Permissions

1154984469ac6f8fa6bb9f7e2ea3796e78859590bf08b10811ac6f8742033b61.bin