f3906ea267904ee1b30a91abaab6973cdaa27a3671033e582f811121c80932b2[.]bin

General

Target
f3906ea267904ee1b30a91abaab6973cdaa27a3671033e582f811121c80932b2.bin
Size 770KB
Sample240305-1xa37sbf99
SHA256 f3906ea267904ee1b30a91abaab6973cdaa27a3671033e582f811121c80932b2
MD5 fc01ff01562dfdc9de3c25ffe4e43406
SHA1 7e86a7ff94f499da4416b9e9d4b8ef6b409fcf32
SHA512 3e22952f6d638089d7cb8278e3bdcc72e4fcddceb1ac2a85a93bf035c14411d7514d4bfb976d7bedea5c51a8fc536cda700b477c893a8eda87da859fb114c971
SSDEEP 24576:rMpwTG5vbYml9Q7aVqI2/nE9wNfrDmQ8l:Ap6cPm+GwwbC
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE

Requests dangerous framework permissions 6 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS

File Explorer

f3906ea267904ee1b30a91abaab6973cdaa27a3671033e582f811121c80932b2.bin

.apk 770KB

f3906ea267904ee1b30a91abaab6973cdaa27a3671033e582f811121c80932b2.bin

SHA256 f3906ea267904ee1b30a91abaab6973cdaa27a3671033e582f811121c80932b2
MD5 fc01ff01562dfdc9de3c25ffe4e43406
SHA1 7e86a7ff94f499da4416b9e9d4b8ef6b409fcf32
SHA512 3e22952f6d638089d7cb8278e3bdcc72e4fcddceb1ac2a85a93bf035c14411d7514d4bfb976d7bedea5c51a8fc536cda700b477c893a8eda87da859fb114c971
SSDEEP 24576:rMpwTG5vbYml9Q7aVqI2/nE9wNfrDmQ8l:Ap6cPm+GwwbC
MD5 SHA1 SHA512 SSDEEP

android arch:arm arch:x86 arch:arm64 arch:x64

com.cityall4

Android Permissions

f3906ea267904ee1b30a91abaab6973cdaa27a3671033e582f811121c80932b2.bin

Permissions

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.USE_FINGERPRINT

android.permission.GET_PACKAGE_SIZE

android.permission.INSTALL_SHORTCUT

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.INTERNET

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.Manifest.permission.READ_PHONE_STATE

android.permission.SEND_SMS

android.permission.USES_POLICY_FORCE_LOCK

android.permission.REQUEST_COMPANION_RUN_IN_BACKGROUND

android.permission.REQUEST_COMPANION_USE_DATA_IN_BACKGROUND

android.permission.REQUEST_DELETE_PACKAGES

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_SETTINGS

android.permission.REORDER_TASKS

Sharing

General

Malware Config

Signatures

File Explorer

f3906ea267904ee1b30a91abaab6973cdaa27a3671033e582f811121c80932b2.bin

com.cityall4.p035t

com.cityall4.p049r

com.cityall4.p039q

com.cityall4.p011n

com.cityall4.p056c

com.cityall4.p048u

com.cityall4.p099t

com.cityall4.p017d

com.cityall4.p090d

com.cityall4.p050y

com.cityall4.p051j

com.cityall4.lmgncdrnuwvh

com.cityall4.sztprstbiwuy

com.cityall4.dnxzobihferf

com.cityall4.ucepkkbmbaaglef

com.cityall4.sqjtstffejsdryr

com.cityall4.liinuuvkqxwkwj

com.cityall4.gjalbkruohmr

com.cityall4.p028f

com.cityall4.p017t

com.cityall4.p037s

com.cityall4.LogSrv

com.cityall4.p046c

com.cityall4.p011j

com.cityall4.p018a

com.cityall4.p046x

com.cityall4.p022h

com.cityall4.p049d

com.cityall4.p046y

com.cityall4.blijaqonzo

com.cityall4.znvrsypvsl

com.cityall4.nwgveoevow

com.cityall4.uquawtvqsw

com.cityall4.tarcrecmzflbqd

com.cityall4.p033m

com.cityall4.p034p

com.cityall4.p020t

com.cityall4.p035j

com.cityall4.p075z

com.cityall4.p034c

com.cityall4.p030v

com.cityall4.p026v

com.cityall4.xbfkaqtxqyxtdr

com.cityall4.wurqnmclyhgx

com.cityall4.vpywmjihtsngoz

com.cityall4.tudwnmaaiq

com.cityall4.ifvrkwufpze

Android Permissions

f3906ea267904ee1b30a91abaab6973cdaa27a3671033e582f811121c80932b2.bin