45406be65d10301adc856fdb6e36946deb08a601a0bfd2f07647a5dd0e7745fb[.]bin

General

Target
45406be65d10301adc856fdb6e36946deb08a601a0bfd2f07647a5dd0e7745fb.bin
Size 249KB
Sample240310-116dhsdb6s
SHA256 45406be65d10301adc856fdb6e36946deb08a601a0bfd2f07647a5dd0e7745fb
MD5 201122305823e0daee4643e2e0a538ce
SHA1 0c841d726241bfa35d31ac6b8067451004f14364
SHA512 3f75115a03795c089d0f8e6f71dc8575e8ed3c67812a9a5987c06a8277e81cf9e00ee3cd582df817cac659883abdf618cd6854285091984e1a5de7fcac40f0e7
SSDEEP 6144:YVsoarqTj6Izm+gPYajJVf9J27+KBmtAFC8XNDuafnylFq8RXJ9SNWY:z1rMj6I6+jaVc73UupAFDtSwY
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 2 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Requests dangerous framework permissions 9 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW

File Explorer

45406be65d10301adc856fdb6e36946deb08a601a0bfd2f07647a5dd0e7745fb.bin

.apk 249KB

45406be65d10301adc856fdb6e36946deb08a601a0bfd2f07647a5dd0e7745fb.bin

SHA256 45406be65d10301adc856fdb6e36946deb08a601a0bfd2f07647a5dd0e7745fb
MD5 201122305823e0daee4643e2e0a538ce
SHA1 0c841d726241bfa35d31ac6b8067451004f14364
SHA512 3f75115a03795c089d0f8e6f71dc8575e8ed3c67812a9a5987c06a8277e81cf9e00ee3cd582df817cac659883abdf618cd6854285091984e1a5de7fcac40f0e7
SSDEEP 6144:YVsoarqTj6Izm+gPYajJVf9J27+KBmtAFC8XNDuafnylFq8RXJ9SNWY:z1rMj6I6+jaVc73UupAFDtSwY
MD5 SHA1 SHA512 SSDEEP

android

fsdfsdf.gsdsfsf.fsdfsdf.lbljhkjblkjblkjblkj

fsdfsdf.gsdsfsf.gjhghjg.lbljhkjblkjblkjblkj.MainActivity

android.intent.action.MAIN

fsdfsdf.gsdsfsf.gjhghjg.lbljhkjblkjblkjblkj.SmsMnd.SendSms

android.intent.action.SEND android.intent.action.SENDTO

fsdfsdf.gsdsfsf.gjhghjg.lbljhkjblkjblkjblkj.Socks.Forvard

fsdfsdf.gsdsfsf.gjhghjg.lbljhkjblkjblkjblkj.Socks.Socksdsfsdfsd

fsdfsdf.gsdsfsf.gjhghjg.lbljhkjblkjblkjblkj.Crypt.CriptActivity$mainActivity

fsdfsdf.gsdsfsf.gjhghjg.lbljhkjblkjblkjblkj.Crypt.Scrynlock$mainActivity

fsdfsdf.gsdsfsf.gjhghjg.lbljhkjblkjblkjblkj.Inject

fsdfsdf.gsdsfsf.gjhghjg.lbljhkjblkjblkjblkj.Contacts

fsdfsdf.gsdsfsf.gjhghjg.lbljhkjblkjblkjblkj.SmsSpamContact

fsdfsdf.gsdsfsf.gjhghjg.lbljhkjblkjblkjblkj.Leading

fsdfsdf.gsdsfsf.gjhghjg.lbljhkjblkjblkjblkj.CallNumberSend

fsdfsdf.gsdsfsf.gjhghjg.lbljhkjblkjblkjblkj.ForvardCall

fsdfsdf.gsdsfsf.gjhghjg.lbljhkjblkjblkjblkj.StartWeb

fsdfsdf.gsdsfsf.gjhghjg.lbljhkjblkjblkjblkj.StartApp

fsdfsdf.gsdsfsf.gjhghjg.lbljhkjblkjblkjblkj.AllApp

fsdfsdf.gsdsfsf.gjhghjg.lbljhkjblkjblkjblkj.GetHistory

fsdfsdf.gsdsfsf.gjhghjg.lbljhkjblkjblkjblkj.GetAllSms

fsdfsdf.gsdsfsf.gjhghjg.lbljhkjblkjblkjblkj.SmsMnd.Smsmnd

fsdfsdf.gsdsfsf.gjhghjg.lbljhkjblkjblkjblkj.InstallApp

fsdfsdf.gsdsfsf.gjhghjg.lbljhkjblkjblkjblkj.Notification

fsdfsdf.gsdsfsf.gjhghjg.lbljhkjblkjblkjblkj.DellSms

fsdfsdf.gsdsfsf.gjhghjg.lbljhkjblkjblkjblkj.SendSMS

fsdfsdf.gsdsfsf.gjhghjg.lbljhkjblkjblkjblkj.SmsBroadcast

android.intent.action.BOOT_COMPLETED android.intent.action.QUICKBOOT_POWERON com.htc.intent.action.QUICKBOOT_POWERON android.intent.action.USER_PRESENT android.intent.action.PACKAGE_ADDED android.intent.action.PACKAGE_REMOVED android.provider.Telephony.SMS_RECEIVED android.intent.action.PHONE_STATE android.intent.action.NEW_OUTGOING_CALL android.intent.action.ACTION_BATTERY_LOW android.intent.action.ACTION_BATTERY_OKAY android.intent.action.ACTION_POWER_CONNECTED android.intent.action.ACTION_POWER_DISCONNECTED android.intent.action.REBOOT

fsdfsdf.gsdsfsf.gjhghjg.lbljhkjblkjblkjblkj.BootCompletedReceiver

android.intent.action.BOOT_COMPLETED android.intent.action.QUICKBOOT_POWERON com.htc.intent.action.QUICKBOOT_POWERON

fsdfsdf.gsdsfsf.gjhghjg.lbljhkjblkjblkjblkj.SmsMnd.SMSBReceiver

android.provider.Telephony.SMS_RECEIVED

fsdfsdf.gsdsfsf.gjhghjg.lbljhkjblkjblkjblkj.SmsMnd.MmsReceiver

android.provider.Telephony.SMS_DELIVER

fsdfsdf.gsdsfsf.gjhghjg.lbljhkjblkjblkjblkj.SmsMnd.PushServiceReciever

android.provider.Telephony.WAP_PUSH_DELIVER

fsdfsdf.gsdsfsf.gjhghjg.lbljhkjblkjblkjblkj.Crypt.CriptActivity

android.app.action.DEVICE_ADMIN_ENABLED android.app.action.DEVICE_ADMIN_DISABLED

fsdfsdf.gsdsfsf.gjhghjg.lbljhkjblkjblkjblkj.Crypt.Scrynlock

android.app.action.DEVICE_ADMIN_ENABLED android.app.action.DEVICE_ADMIN_DISABLED

fsdfsdf.gsdsfsf.gjhghjg.lbljhkjblkjblkjblkj.Boot

Android Permissions

45406be65d10301adc856fdb6e36946deb08a601a0bfd2f07647a5dd0e7745fb.bin

Permissions

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INSTALL_PACKAGES

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.INTERNET

android.permission.RECEIVE_SMS

android.permission.QUICKBOOT_POWERON

android.permission.READ_SMS

android.permission.WAKE_LOCK

android.permission.SEND_SMS

android.permission.WRITE_SMS

android.permission.GET_TASKS

android.permission.CALL_PHONE

android.permission.READ_CONTACTS

com.android.browser.permission.READ_HISTORY_BOOKMARKS

com.android.broswer.permission.WRITE_HISTORY_BOOKMARKS

android.permission.VIBRATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.BIND_DEVICE_ADMIN

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.DISABLE_KEYGUARD

android.permission.READ_LOGS

45406be65d10301adc856fdb6e36946deb08a601a0bfd2f07647a5dd0e7745fb.bin

fsdfsdf.gsdsfsf.gjhghjg.lbljhkjblkjblkjblkj.MainActivity

fsdfsdf.gsdsfsf.gjhghjg.lbljhkjblkjblkjblkj.SmsMnd.SendSms

fsdfsdf.gsdsfsf.gjhghjg.lbljhkjblkjblkjblkj.Socks.Forvard

fsdfsdf.gsdsfsf.gjhghjg.lbljhkjblkjblkjblkj.Socks.Socksdsfsdfsd

fsdfsdf.gsdsfsf.gjhghjg.lbljhkjblkjblkjblkj.Crypt.CriptActivity$mainActivity

fsdfsdf.gsdsfsf.gjhghjg.lbljhkjblkjblkjblkj.Crypt.Scrynlock$mainActivity

fsdfsdf.gsdsfsf.gjhghjg.lbljhkjblkjblkjblkj.Inject

fsdfsdf.gsdsfsf.gjhghjg.lbljhkjblkjblkjblkj.Contacts

fsdfsdf.gsdsfsf.gjhghjg.lbljhkjblkjblkjblkj.SmsSpamContact

fsdfsdf.gsdsfsf.gjhghjg.lbljhkjblkjblkjblkj.Leading

fsdfsdf.gsdsfsf.gjhghjg.lbljhkjblkjblkjblkj.CallNumberSend

fsdfsdf.gsdsfsf.gjhghjg.lbljhkjblkjblkjblkj.ForvardCall

fsdfsdf.gsdsfsf.gjhghjg.lbljhkjblkjblkjblkj.StartWeb

fsdfsdf.gsdsfsf.gjhghjg.lbljhkjblkjblkjblkj.StartApp

fsdfsdf.gsdsfsf.gjhghjg.lbljhkjblkjblkjblkj.AllApp

fsdfsdf.gsdsfsf.gjhghjg.lbljhkjblkjblkjblkj.GetHistory

fsdfsdf.gsdsfsf.gjhghjg.lbljhkjblkjblkjblkj.GetAllSms

fsdfsdf.gsdsfsf.gjhghjg.lbljhkjblkjblkjblkj.SmsMnd.Smsmnd

fsdfsdf.gsdsfsf.gjhghjg.lbljhkjblkjblkjblkj.InstallApp

fsdfsdf.gsdsfsf.gjhghjg.lbljhkjblkjblkjblkj.Notification

fsdfsdf.gsdsfsf.gjhghjg.lbljhkjblkjblkjblkj.DellSms

fsdfsdf.gsdsfsf.gjhghjg.lbljhkjblkjblkjblkj.SendSMS

fsdfsdf.gsdsfsf.gjhghjg.lbljhkjblkjblkjblkj.SmsMnd.HeadlessSmsSendService

fsdfsdf.gsdsfsf.gjhghjg.lbljhkjblkjblkjblkj.CommandService

fsdfsdf.gsdsfsf.gjhghjg.lbljhkjblkjblkjblkj.Alarm

fsdfsdf.gsdsfsf.gjhghjg.lbljhkjblkjblkjblkj.GoSms

fsdfsdf.gsdsfsf.gjhghjg.lbljhkjblkjblkjblkj.InjectProcess

fsdfsdf.gsdsfsf.gjhghjg.lbljhkjblkjblkjblkj.DeNotif

fsdfsdf.gsdsfsf.gjhghjg.lbljhkjblkjblkjblkj.SmsBroadcast

fsdfsdf.gsdsfsf.gjhghjg.lbljhkjblkjblkjblkj.BootCompletedReceiver

fsdfsdf.gsdsfsf.gjhghjg.lbljhkjblkjblkjblkj.SmsMnd.SMSBReceiver

fsdfsdf.gsdsfsf.gjhghjg.lbljhkjblkjblkjblkj.SmsMnd.MmsReceiver

fsdfsdf.gsdsfsf.gjhghjg.lbljhkjblkjblkjblkj.SmsMnd.PushServiceReciever

fsdfsdf.gsdsfsf.gjhghjg.lbljhkjblkjblkjblkj.Crypt.CriptActivity

fsdfsdf.gsdsfsf.gjhghjg.lbljhkjblkjblkjblkj.Crypt.Scrynlock

fsdfsdf.gsdsfsf.gjhghjg.lbljhkjblkjblkjblkj.Boot

Sharing

General

Malware Config

Signatures

File Explorer

45406be65d10301adc856fdb6e36946deb08a601a0bfd2f07647a5dd0e7745fb.bin

fsdfsdf.gsdsfsf.gjhghjg.lbljhkjblkjblkjblkj.MainActivity

fsdfsdf.gsdsfsf.gjhghjg.lbljhkjblkjblkjblkj.SmsMnd.SendSms

fsdfsdf.gsdsfsf.gjhghjg.lbljhkjblkjblkjblkj.Socks.Forvard

fsdfsdf.gsdsfsf.gjhghjg.lbljhkjblkjblkjblkj.Socks.Socksdsfsdfsd

fsdfsdf.gsdsfsf.gjhghjg.lbljhkjblkjblkjblkj.Crypt.CriptActivity$mainActivity

fsdfsdf.gsdsfsf.gjhghjg.lbljhkjblkjblkjblkj.Crypt.Scrynlock$mainActivity

fsdfsdf.gsdsfsf.gjhghjg.lbljhkjblkjblkjblkj.Inject

fsdfsdf.gsdsfsf.gjhghjg.lbljhkjblkjblkjblkj.Contacts

fsdfsdf.gsdsfsf.gjhghjg.lbljhkjblkjblkjblkj.SmsSpamContact

fsdfsdf.gsdsfsf.gjhghjg.lbljhkjblkjblkjblkj.Leading

fsdfsdf.gsdsfsf.gjhghjg.lbljhkjblkjblkjblkj.CallNumberSend

fsdfsdf.gsdsfsf.gjhghjg.lbljhkjblkjblkjblkj.ForvardCall

fsdfsdf.gsdsfsf.gjhghjg.lbljhkjblkjblkjblkj.StartWeb

fsdfsdf.gsdsfsf.gjhghjg.lbljhkjblkjblkjblkj.StartApp

fsdfsdf.gsdsfsf.gjhghjg.lbljhkjblkjblkjblkj.AllApp

fsdfsdf.gsdsfsf.gjhghjg.lbljhkjblkjblkjblkj.GetHistory

fsdfsdf.gsdsfsf.gjhghjg.lbljhkjblkjblkjblkj.GetAllSms

fsdfsdf.gsdsfsf.gjhghjg.lbljhkjblkjblkjblkj.SmsMnd.Smsmnd

fsdfsdf.gsdsfsf.gjhghjg.lbljhkjblkjblkjblkj.InstallApp

fsdfsdf.gsdsfsf.gjhghjg.lbljhkjblkjblkjblkj.Notification

fsdfsdf.gsdsfsf.gjhghjg.lbljhkjblkjblkjblkj.DellSms

fsdfsdf.gsdsfsf.gjhghjg.lbljhkjblkjblkjblkj.SendSMS

fsdfsdf.gsdsfsf.gjhghjg.lbljhkjblkjblkjblkj.SmsMnd.HeadlessSmsSendService

fsdfsdf.gsdsfsf.gjhghjg.lbljhkjblkjblkjblkj.CommandService

fsdfsdf.gsdsfsf.gjhghjg.lbljhkjblkjblkjblkj.Alarm

fsdfsdf.gsdsfsf.gjhghjg.lbljhkjblkjblkjblkj.GoSms

fsdfsdf.gsdsfsf.gjhghjg.lbljhkjblkjblkjblkj.InjectProcess

fsdfsdf.gsdsfsf.gjhghjg.lbljhkjblkjblkjblkj.DeNotif

fsdfsdf.gsdsfsf.gjhghjg.lbljhkjblkjblkjblkj.SmsBroadcast

fsdfsdf.gsdsfsf.gjhghjg.lbljhkjblkjblkjblkj.BootCompletedReceiver

fsdfsdf.gsdsfsf.gjhghjg.lbljhkjblkjblkjblkj.SmsMnd.SMSBReceiver

fsdfsdf.gsdsfsf.gjhghjg.lbljhkjblkjblkjblkj.SmsMnd.MmsReceiver

fsdfsdf.gsdsfsf.gjhghjg.lbljhkjblkjblkjblkj.SmsMnd.PushServiceReciever

fsdfsdf.gsdsfsf.gjhghjg.lbljhkjblkjblkjblkj.Crypt.CriptActivity

fsdfsdf.gsdsfsf.gjhghjg.lbljhkjblkjblkjblkj.Crypt.Scrynlock

fsdfsdf.gsdsfsf.gjhghjg.lbljhkjblkjblkjblkj.Boot

Android Permissions

45406be65d10301adc856fdb6e36946deb08a601a0bfd2f07647a5dd0e7745fb.bin