af620a62ab5911587b55a402bda10e7b

General

Target
af620a62ab5911587b55a402bda10e7b
Size 3.1MB
Sample240229-y4qfcsbd3y
SHA256 d8564f37d48a023ae2cbd2b7b27df61876a572b445db9c66ea904e95d2d64da1
MD5 af620a62ab5911587b55a402bda10e7b
SHA1 48da6580f1aee833b8c76fbf19df1c9bda7fbbba
SHA512 c6d56c031358b7322f05e66e69f05aa91ea6e203a3fd5e61a66ab26ad843023263c0f82f335399b40d40b7066e78a192625766e059e21539843c121fa7014d39
SSDEEP 49152:x2CEh6eaR+wZhFcZnZtC97wHM9fD6PmF/n/L7qP3mHwtVHu5qJTs1EIMxPFAa3s:zeGEnZte7he+hD7qeHYGqJuMtKa3s
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE

Requests dangerous framework permissions 6 IoCs

description	ioc
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read SMS messages.	android.permission.READ_SMS

File Explorer

af620a62ab5911587b55a402bda10e7b

.apk 3.1MB

af620a62ab5911587b55a402bda10e7b

SHA256 d8564f37d48a023ae2cbd2b7b27df61876a572b445db9c66ea904e95d2d64da1
MD5 af620a62ab5911587b55a402bda10e7b
SHA1 48da6580f1aee833b8c76fbf19df1c9bda7fbbba
SHA512 c6d56c031358b7322f05e66e69f05aa91ea6e203a3fd5e61a66ab26ad843023263c0f82f335399b40d40b7066e78a192625766e059e21539843c121fa7014d39
SSDEEP 49152:x2CEh6eaR+wZhFcZnZtC97wHM9fD6PmF/n/L7qP3mHwtVHu5qJTs1EIMxPFAa3s:zeGEnZte7he+hD7qeHYGqJuMtKa3s
MD5 SHA1 SHA512 SSDEEP

android

adult.cross.grass

topple.coil.ensure.SOyXlUfLqUrEsXqJuNnBfTxBpLmNlOmIsRaPnOfUq

topple.coil.ensure.vhczjepcsmtt.lolfmiwwkpnx

topple.coil.ensure.TJyPnNsCtJnAqXtCkTtEm

topple.coil.ensure.CXnKhImUcFtNzScExOkFqDzOaPaOoAfMbFzHsFiSgDzApAi

topple.coil.ensure.WBtLiMzKqDoOuTrLgOlZjWtDbOsDhXhYdBzPtCtWwPzNr

com.google.android.gms.common.api.GoogleApiActivity

topple.coil.ensure.GLmYkOhFoBuHdFhNsOePwXpDzWtYmGqOp

topple.coil.ensure.FRrCiUqMi

topple.coil.ensure.CUzGdOcHaOhEuCwIjJbDmTqDtLmTqPgQyCqHiAyCjUnAoZpOhXz

topple.coil.ensure.CJiHuMuKgMl

topple.coil.ensure.htmckckufpr.btiohesssgz

topple.coil.ensure.FLjDsFdMdNgAbWmIkTrTlNbReMgKwCjIuSmKfJhUoOmSoSm

topple.coil.ensure.NIlIyBs

topple.coil.ensure.GEoFiZxNyKiCpDoKiNk

topple.coil.ensure.gua

android.intent.action.SENDTO android.intent.action.SEND

topple.coil.ensure.FFhHcThGdKcJsLtXzAqRuKfAnQd

topple.coil.ensure.SLoMpCwDaUcTjSnNfCnGpTl

topple.coil.ensure.HHzFqIu

topple.coil.ensure.MEzXlLfUyZeXpNeAcNjWiDpCaDjGtFgRwFpHiCzNdSfSh

topple.coil.ensure.DDcRaJfAjMcTp

topple.coil.ensure.vhczjepcsmtt.zrr

topple.coil.ensure.ZMeOiXzYbSgXmTw

topple.coil.ensure.vhczjepcsmtt.vpdwbvgfcyizjzb

topple.coil.ensure.HBjOtLyIqDrPbXxYgWwDmOxOgOkXqRqNlIhWcLr

topple.coil.ensure.dck

android.intent.action.MAIN

topple.coil.ensure.WUsUdGpNfAs

topple.coil.ensure.MAsLlCjJxLiWiErDaTfWbIfTuWbDsRaZaNsCkHxLbSz

topple.coil.ensure.PMqBhBeFw

topple.coil.ensure.vhczjepcsmtt.rdbakulaprfyuc

topple.coil.ensure.XBfBlWzBfAyLbCiJgUpJxZxNjCzFfIc

topple.coil.ensure.vhczjepcsmtt.ncrosaytsgq

topple.coil.ensure.HZkZeYlNqJcFk

topple.coil.ensure.HMnQfXuTtYeIfUpUzFlZgJsZdQzRqYfBzSyRz

topple.coil.ensure.LHiXiWtHcYxZgEbIrGoQdFzNeTdBeKf

topple.coil.ensure.ZHmQfIiGuXgDiRtHrCiMxTzMfYt

topple.coil.ensure.NKaFhEgUxTnLcFjNuCgLr

topple.coil.ensure.TXgXoYnHpTgDzLySp

Android Permissions

af620a62ab5911587b55a402bda10e7b

Permissions

android.permission.INTERNET

android.permission.WAKE_LOCK

android.permission.RECEIVE_SMS

android.permission.SEND_SMS

android.permission.REQUEST_DELETE_PACKAGES

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.READ_CONTACTS

android.permission.READ_PHONE_STATE

android.permission.CALL_PHONE

android.permission.READ_SMS

Sharing

General

Malware Config

Signatures

File Explorer

af620a62ab5911587b55a402bda10e7b

topple.coil.ensure.SOyXlUfLqUrEsXqJuNnBfTxBpLmNlOmIsRaPnOfUq

topple.coil.ensure.vhczjepcsmtt.lolfmiwwkpnx

topple.coil.ensure.TJyPnNsCtJnAqXtCkTtEm

topple.coil.ensure.CXnKhImUcFtNzScExOkFqDzOaPaOoAfMbFzHsFiSgDzApAi

topple.coil.ensure.WBtLiMzKqDoOuTrLgOlZjWtDbOsDhXhYdBzPtCtWwPzNr

com.google.android.gms.common.api.GoogleApiActivity

topple.coil.ensure.GLmYkOhFoBuHdFhNsOePwXpDzWtYmGqOp

topple.coil.ensure.FRrCiUqMi

topple.coil.ensure.CUzGdOcHaOhEuCwIjJbDmTqDtLmTqPgQyCqHiAyCjUnAoZpOhXz

topple.coil.ensure.CJiHuMuKgMl

topple.coil.ensure.htmckckufpr.btiohesssgz

topple.coil.ensure.FLjDsFdMdNgAbWmIkTrTlNbReMgKwCjIuSmKfJhUoOmSoSm

topple.coil.ensure.NIlIyBs

topple.coil.ensure.GEoFiZxNyKiCpDoKiNk

topple.coil.ensure.gua

topple.coil.ensure.FFhHcThGdKcJsLtXzAqRuKfAnQd

topple.coil.ensure.SLoMpCwDaUcTjSnNfCnGpTl

topple.coil.ensure.HHzFqIu

topple.coil.ensure.MEzXlLfUyZeXpNeAcNjWiDpCaDjGtFgRwFpHiCzNdSfSh

topple.coil.ensure.DDcRaJfAjMcTp

topple.coil.ensure.vhczjepcsmtt.zrr

topple.coil.ensure.ZMeOiXzYbSgXmTw

topple.coil.ensure.vhczjepcsmtt.vpdwbvgfcyizjzb

topple.coil.ensure.HBjOtLyIqDrPbXxYgWwDmOxOgOkXqRqNlIhWcLr

topple.coil.ensure.dck

topple.coil.ensure.WUsUdGpNfAs

topple.coil.ensure.MAsLlCjJxLiWiErDaTfWbIfTuWbDsRaZaNsCkHxLbSz

topple.coil.ensure.PMqBhBeFw

topple.coil.ensure.vhczjepcsmtt.rdbakulaprfyuc

topple.coil.ensure.XBfBlWzBfAyLbCiJgUpJxZxNjCzFfIc

topple.coil.ensure.vhczjepcsmtt.ncrosaytsgq

topple.coil.ensure.HZkZeYlNqJcFk

topple.coil.ensure.HMnQfXuTtYeIfUpUzFlZgJsZdQzRqYfBzSyRz

topple.coil.ensure.LHiXiWtHcYxZgEbIrGoQdFzNeTdBeKf

topple.coil.ensure.ZHmQfIiGuXgDiRtHrCiMxTzMfYt

topple.coil.ensure.NKaFhEgUxTnLcFjNuCgLr

topple.coil.ensure.TXgXoYnHpTgDzLySp

topple.coil.ensure.saelerqaogw.ycau

topple.coil.ensure.saelerqaogw.htirf

topple.coil.ensure.nsptpruof

topple.coil.ensure.saelerqaogw.erqggnd

topple.coil.ensure.saelerqaogw.zfreeehbspxtdmv

topple.coil.ensure.saelerqaogw.ufaotccfqdbmpza

topple.coil.ensure.saelerqaogw.dxvzwfpkogv

topple.coil.ensure.saelerqaogw.wijhxj

topple.coil.ensure.htmckckufpr.gxae

topple.coil.ensure.gvt

topple.coil.ensure.scbpolyoycszu.hvujsnttvj

Android Permissions

af620a62ab5911587b55a402bda10e7b