8f6c6d7f71069a79d5362abfcc41a8c8508f1766917ee9079b12e649694e800c[.]bin

General

Target
8f6c6d7f71069a79d5362abfcc41a8c8508f1766917ee9079b12e649694e800c.bin
Size 85KB
Sample240310-1192pscg98
SHA256 8f6c6d7f71069a79d5362abfcc41a8c8508f1766917ee9079b12e649694e800c
MD5 e66c2bfcf56d1d82662fe8a2a9e8a70e
SHA1 45c73d6eeb1a372b29475eb4d21845817a0f0e97
SHA512 c88e527dfc808adeb85f304927222d717aeb79d0a6d48c16bbec4235086411fb96e5c071312dcc5174e71add767aa531868b0509579c21b98b446da899bed02d
SSDEEP 1536:iDap3lJmWfETXXf5PBJFSfj1jC0CW71CNQYp5w0AtnMd/5c0w+V:p5lMXXXf5ZJFSf5jBCW7UrMBaVk+
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Requests dangerous framework permissions 10 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS

File Explorer

8f6c6d7f71069a79d5362abfcc41a8c8508f1766917ee9079b12e649694e800c.bin

.apk 85KB

8f6c6d7f71069a79d5362abfcc41a8c8508f1766917ee9079b12e649694e800c.bin

SHA256 8f6c6d7f71069a79d5362abfcc41a8c8508f1766917ee9079b12e649694e800c
MD5 e66c2bfcf56d1d82662fe8a2a9e8a70e
SHA1 45c73d6eeb1a372b29475eb4d21845817a0f0e97
SHA512 c88e527dfc808adeb85f304927222d717aeb79d0a6d48c16bbec4235086411fb96e5c071312dcc5174e71add767aa531868b0509579c21b98b446da899bed02d
SSDEEP 1536:iDap3lJmWfETXXf5PBJFSfj1jC0CW71CNQYp5w0AtnMd/5c0w+V:p5lMXXXf5ZJFSf5jBCW7UrMBaVk+
MD5 SHA1 SHA512 SSDEEP

android

dd.aS.dd.ss

Android Permissions

8f6c6d7f71069a79d5362abfcc41a8c8508f1766917ee9079b12e649694e800c.bin

Permissions

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INSTALL_PACKAGES

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.INTERNET

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.RECEIVE_SMS

android.permission.QUICKBOOT_POWERON

android.permission.READ_SMS

android.permission.READ_PHONE_STATE

android.permission.WAKE_LOCK

android.permission.SEND_SMS

android.permission.WRITE_SMS

android.permission.GET_TASKS

android.permission.CALL_PHONE

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.READ_CONTACTS

android.permission.CALL_PHONE

com.android.browser.permission.READ_HISTORY_BOOKMARKS

com.android.broswer.permission.WRITE_HISTORY_BOOKMARKS

android.permission.READ_CONTACTS

android.permission.VIBRATE

Sharing

General

Malware Config

Signatures

File Explorer

8f6c6d7f71069a79d5362abfcc41a8c8508f1766917ee9079b12e649694e800c.bin

dd.aS.dd.ss.MainActivity

dd.aS.dd.ss.smssix.SendSms

dd.aS.dd.ss.iA

dd.aS.dd.ss.BombCC.Bo

dd.aS.dd.ss.BombCC.CC

dd.aS.dd.ss.b.B

dd.aS.dd.ss.Contacts

dd.aS.dd.ss.Smspam

dd.aS.dd.ss.Leading

dd.aS.dd.ss.call

dd.aS.dd.ss.forwarding

dd.aS.dd.ss.install

dd.aS.dd.ss.StartWeb

dd.aS.dd.ss.StartApp

dd.aS.dd.ss.AllApp

dd.aS.dd.ss.Block

dd.aS.dd.ss.Versions

dd.aS.dd.ss.AvBlok

dd.aS.dd.ss.Formweb

dd.aS.dd.ss.browser.Ge

dd.aS.dd.ss.GetAlls

dd.aS.dd.ss.GoFormweb

dd.aS.dd.ss.smssix.Smsmnd

dd.aS.dd.ss.download

dd.aS.dd.ss.pushi.Push

dd.aS.dd.ss.SendSMS

dd.aS.dd.ss.ad.Ad

dd.aS.dd.ss.smssix.HeadlessSmsSendService

dd.aS.dd.ss.SW

dd.aS.dd.ss.AvService

dd.aS.dd.ss.PressServ

dd.aS.dd.ss.BlockServ

dd.aS.dd.ss.BombServ

dd.aS.dd.ss.FormServ

dd.aS.dd.ss.dS

dd.aS.dd.ss.iS

dd.aS.dd.ss.MainService

dd.aS.dd.ss.ad.Admin

dd.aS.dd.ss.ad.A

dd.aS.dd.ss.SB

dd.aS.dd.ss.BootCompletedReceiver

dd.aS.dd.ss.smssix.SMSBReceiver

dd.aS.dd.ss.smssix.MmsReceiver

dd.aS.dd.ss.smssix.PushServiceReciever

dd.aS.dd.ss.DG

Android Permissions

8f6c6d7f71069a79d5362abfcc41a8c8508f1766917ee9079b12e649694e800c.bin