aug_doNot.zip
- SHA256 cbd1a2f0b45ffb63ff6e3fb30ea8c046b98ff4f9a307713b1a0ebe04dde1e64c
Password
infected
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
51b9d09d57365fa4e09251b0072eff1d.apk
Resource
android-x64-20240221-en
android-10-x64
6 signatures
600 seconds
General
- Target aug_doNot.zip
- Size 2.3MB
- Sample240223-txy2psdb53
- SHA256 cbd1a2f0b45ffb63ff6e3fb30ea8c046b98ff4f9a307713b1a0ebe04dde1e64c
- MD5 aa05d02c5aacd5ecb4e60cb88bcc2c9d
- SHA1 70c0be133128eb73f94d9fe4c83f7e668df7a2b7
- SHA512 d1b267ebff225de5a4aebc67db20259783c9bd4abff2244d5332f5551e4248c434dddd8d4b1c9fcab1228e0a54cfcc5f8aee6d4e6f09e5e62d6a873fd2b949f5
- SSDEEP 49152:Ze1oot8v2pDMV3Dmz0jUxD7HtsWH1YVM6irFX/ceMp0sq8:YaoriCVx7maGVM64BsR
- MD5 SHA1 SHA512 SSDEEP
Score
6/10
Malware Config
Signatures
- Declares services with permission to bind to the system 1 IoCs
description ioc Required by accessibility services to bind with the system. Allows apps to access accessibility features. android.permission.BIND_ACCESSIBILITY_SERVICE - Requests dangerous framework permissions 16 IoCs
description ioc Allows an application to send SMS messages. android.permission.SEND_SMS Allows an application to read SMS messages. android.permission.READ_SMS Allows an application to receive SMS messages. android.permission.RECEIVE_SMS Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE Allows access to the list of accounts in the Accounts Service. android.permission.GET_ACCOUNTS Allows an application to read the user's contacts data. android.permission.READ_CONTACTS Allows an application to read the user's call log. android.permission.READ_CALL_LOG Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether. android.permission.PROCESS_OUTGOING_CALLS Allows an application to record audio. android.permission.RECORD_AUDIO Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call. android.permission.CALL_PHONE Allows an application to read or write the system settings. android.permission.WRITE_SETTINGS Allows an app to access approximate location. android.permission.ACCESS_COARSE_LOCATION Allows an app to access precise location. android.permission.ACCESS_FINE_LOCATION Allows an application to read the user's calendar data. android.permission.READ_CALENDAR
File Explorer
-
aug_doNot.zip.zip 2.3MB
-
51b9d09d57365fa4e09251b0072eff1d.zip.apk 1.6MB
-
abdef021da3fcb8082c82743c2e730ae.zip.apk 1.6MB
51b9d09d57365fa4e09251b0072eff1d.zip
- SHA256 fb8ab2ce46a749604eb1b4cbb9601b6c59256ce3069f50aa3d4a384d13c6a2bd
- MD5 51b9d09d57365fa4e09251b0072eff1d
- SHA1 b24a57e19851e2504f1e070f137aa0ff566b0535
- SHA512 9a3a1fce9031007aeb226e6d0ae9c083607f52e4d5e09986ac06307fd21466e52c32f3cb6a96381c49fa97db98e23b9e841a17c3318e75620372408ad1640543
- SSDEEP 24576:KHyxnegkL/Cpf9iRPgau8ZA2zMBpmR5MDGYJYgx8FleQI7AyWDkJ3BbpL3OzN:Ka1kL/CBYpgg3cmMDGCYk8u8QvbpL+J
- MD5 SHA1 SHA512 SSDEEP
com.tencent.mobileqq
com.system.myapplication.Jvm.LocalFragment
android.permission.INTERNET
android.permission.RECEIVE_BOOT_COMPLETED
com.android.browser.permission.READ_HISTORY_BOOKMARKS
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.SEND_SMS
com.google.android.c2dm.permission.RECEIVE
android.permission.READ_SMS
android.permission.RECEIVE_SMS
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.GET_ACCOUNTS
android.permission.READ_CONTACTS
android.permission.READ_CALL_LOG
android.permission.READ_PHONE_STATE
android.permission.PROCESS_OUTGOING_CALLS
android.permission.RECORD_AUDIO
android.permission.STORAGE
android.permission.CALL_PHONE
android.permission.WRITE_SETTINGS
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.READ_CALENDAR
android.permission.WAKE_LOCK
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
com.system.myapplication.MainActivty
com.system.myapplication.Godzilla
com.system.myapplication.Jvm.LocalFragment
android.intent.action.MAIN
com.google.android.gms.common.api.GoogleApiActivity
com.system.myapplication.Activities.dcteat
com.system.myapplication.Fragments.HulkFibS
com.google.firebase.MESSAGING_EVENT
com.system.myapplication.Adapters.adapinr
android.accessibilityservice.AccessibilityService
com.google.firebase.messaging.FirebaseMessagingService
com.google.firebase.MESSAGING_EVENT
com.evernote.android.job.v21.PlatformJobService
com.evernote.android.job.v14.PlatformAlarmService
com.evernote.android.job.v14.PlatformAlarmServiceExact
com.evernote.android.job.gcm.PlatformGcmService
com.google.android.gms.gcm.ACTION_TASK_READY
com.evernote.android.job.JobRescheduleService
com.google.firebase.components.ComponentDiscoveryService
com.google.android.gms.measurement.AppMeasurementService
com.google.android.gms.measurement.AppMeasurementJobService
com.google.firebase.iid.FirebaseInstanceIdService
com.google.firebase.INSTANCE_ID_EVENT
com.system.myapplication.Jvm.aojvmnr
android.provider.Telephony.SMS_RECEIVED
android.provider.Telephony.SMS_SENT
com.system.myapplication.Adapters.adapurre
android.intent.action.PHONE_STATE
android.intent.action.NEW_OUTGOING_CALL
com.system.myapplication.Activities.actere
android.net.conn.CONNECTIVITY_CHANGE
com.system.myapplication.Adapters.adaptw
android.intent.action.BOOT_COMPLETED
com.system.myapplication.Utils.cPhclRr
android.intent.action.PHONE_STATE
android.intent.action.NEW_OUTGOING_CALL
com.system.myapplication.Fragments.trFragmentaigt
com.evernote.android.job.v14.PlatformAlarmReceiver
com.evernote.android.job.v14.RUN_JOB
net.vrallev.android.job.v14.RUN_JOB
com.evernote.android.job.JobBootReceiver
android.intent.action.BOOT_COMPLETED
android.intent.action.QUICKBOOT_POWERON
com.htc.intent.action.QUICKBOOT_POWERON
android.intent.action.MY_PACKAGE_REPLACED
com.google.android.gms.measurement.AppMeasurementReceiver
com.google.android.gms.measurement.AppMeasurementInstallReferrerReceiver
com.android.vending.INSTALL_REFERRER
com.google.firebase.iid.FirebaseInstanceIdReceiver
com.google.android.c2dm.intent.RECEIVE
com.google.firebase.provider.FirebaseInitProvider
abdef021da3fcb8082c82743c2e730ae.zip
- SHA256 6da0eb7adfd30a0970eda4777fb619fc517207de1a79292a15546e8fbf857801
- MD5 abdef021da3fcb8082c82743c2e730ae
- SHA1 58a4b3c59b3f52c05543c13dcff5942c40037255
- SHA512 bc530f5e3f1892ae963cea72845065c6fd0619182c05dfceaa14f93e032acd2618a2cb741985617ee51e32cb998962212b6c5b98a2e078d7f5a65d8ac06775ff
- SSDEEP 24576:KeiPIzCbU+FtEnmkWW25lMOtTWSoEouYJYgx8FleQI7AyWDkJ3BbpL3Ozun:KBUJ+flb7Jo3uCYk8u8QvbpL+Sn
- MD5 SHA1 SHA512 SSDEEP
com.tencent.mobileqq
com.system.myapplication.Jvm.LocalFragment
android.permission.INTERNET
android.permission.RECEIVE_BOOT_COMPLETED
com.android.browser.permission.READ_HISTORY_BOOKMARKS
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.SEND_SMS
com.google.android.c2dm.permission.RECEIVE
android.permission.READ_SMS
android.permission.RECEIVE_SMS
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.GET_ACCOUNTS
android.permission.READ_CONTACTS
android.permission.READ_CALL_LOG
android.permission.READ_PHONE_STATE
android.permission.PROCESS_OUTGOING_CALLS
android.permission.RECORD_AUDIO
android.permission.STORAGE
android.permission.CALL_PHONE
android.permission.WRITE_SETTINGS
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.READ_CALENDAR
android.permission.WAKE_LOCK
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
com.system.myapplication.MainActivty
com.system.myapplication.Godzilla
com.system.myapplication.Jvm.LocalFragment
android.intent.action.MAIN
com.google.android.gms.common.api.GoogleApiActivity
com.system.myapplication.Activities.dcteat
com.system.myapplication.Fragments.HulkFibS
com.google.firebase.MESSAGING_EVENT
com.system.myapplication.Adapters.adapinr
android.accessibilityservice.AccessibilityService
com.google.firebase.messaging.FirebaseMessagingService
com.google.firebase.MESSAGING_EVENT
com.evernote.android.job.v21.PlatformJobService
com.evernote.android.job.v14.PlatformAlarmService
com.evernote.android.job.v14.PlatformAlarmServiceExact
com.evernote.android.job.gcm.PlatformGcmService
com.google.android.gms.gcm.ACTION_TASK_READY
com.evernote.android.job.JobRescheduleService
com.google.firebase.components.ComponentDiscoveryService
com.google.android.gms.measurement.AppMeasurementService
com.google.android.gms.measurement.AppMeasurementJobService
com.google.firebase.iid.FirebaseInstanceIdService
com.google.firebase.INSTANCE_ID_EVENT
com.system.myapplication.Jvm.aojvmnr
android.provider.Telephony.SMS_RECEIVED
android.provider.Telephony.SMS_SENT
com.system.myapplication.Adapters.adapurre
android.intent.action.PHONE_STATE
android.intent.action.NEW_OUTGOING_CALL
com.system.myapplication.Activities.actere
android.net.conn.CONNECTIVITY_CHANGE
com.system.myapplication.Adapters.adaptw
android.intent.action.BOOT_COMPLETED
com.system.myapplication.Utils.cPhclRr
android.intent.action.PHONE_STATE
android.intent.action.NEW_OUTGOING_CALL
com.system.myapplication.Fragments.trFragmentaigt
com.evernote.android.job.v14.PlatformAlarmReceiver
com.evernote.android.job.v14.RUN_JOB
net.vrallev.android.job.v14.RUN_JOB
com.evernote.android.job.JobBootReceiver
android.intent.action.BOOT_COMPLETED
android.intent.action.QUICKBOOT_POWERON
com.htc.intent.action.QUICKBOOT_POWERON
android.intent.action.MY_PACKAGE_REPLACED
com.google.android.gms.measurement.AppMeasurementReceiver
com.google.android.gms.measurement.AppMeasurementInstallReferrerReceiver
com.android.vending.INSTALL_REFERRER
com.google.firebase.iid.FirebaseInstanceIdReceiver
com.google.android.c2dm.intent.RECEIVE