bcccfa38ee36676d78d9a996c7da6ac30cba6f199d47200b2e8614c0093fb6d2[.]bin

General

Target
bcccfa38ee36676d78d9a996c7da6ac30cba6f199d47200b2e8614c0093fb6d2.bin
Size 398KB
Sample240310-11a8dacg59
SHA256 bcccfa38ee36676d78d9a996c7da6ac30cba6f199d47200b2e8614c0093fb6d2
MD5 43848122b736221fcf3abb897333c8c6
SHA1 478a7b003691778844469772e8af636e8a6212ba
SHA512 2f6cc449059e999a89de99e166b54104c91e3f966acebbbe284f4adb57661705c92b55e3de133078bd7ddeab4ba6ee201192f44b3d24c7a3a6a3204028c765a6
SSDEEP 12288:bFvws5XkLUoajdlq/dFa9urrWPWL7iOt3LT6099:bxws5XQUoaEdcFC99
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Requests dangerous framework permissions 10 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS

File Explorer

bcccfa38ee36676d78d9a996c7da6ac30cba6f199d47200b2e8614c0093fb6d2.bin

.apk 398KB

bcccfa38ee36676d78d9a996c7da6ac30cba6f199d47200b2e8614c0093fb6d2.bin

SHA256 bcccfa38ee36676d78d9a996c7da6ac30cba6f199d47200b2e8614c0093fb6d2
MD5 43848122b736221fcf3abb897333c8c6
SHA1 478a7b003691778844469772e8af636e8a6212ba
SHA512 2f6cc449059e999a89de99e166b54104c91e3f966acebbbe284f4adb57661705c92b55e3de133078bd7ddeab4ba6ee201192f44b3d24c7a3a6a3204028c765a6
SSDEEP 12288:bFvws5XkLUoajdlq/dFa9urrWPWL7iOt3LT6099:bxws5XQUoaEdcFC99
MD5 SHA1 SHA512 SSDEEP

android

dd.aS.us.dd

dd.aS.us.ap.MainActivity

android.intent.action.MAIN

dd.aS.us.ap.smssix.SendSms

android.intent.action.SEND android.intent.action.SENDTO

dd.aS.us.ap.iA

dd.aS.us.ap.BombCC.Bo

dd.aS.us.ap.BombCC.CC

dd.aS.us.ap.P

dd.aS.us.ap.b.B

dd.aS.us.ap.Contacts

dd.aS.us.ap.Smspam

dd.aS.us.ap.SMSspamlist

dd.aS.us.ap.Leading

dd.aS.us.ap.call

dd.aS.us.ap.forwarding

dd.aS.us.ap.install

dd.aS.us.ap.StartWeb

dd.aS.us.ap.StartApp

dd.aS.us.ap.AllApp

dd.aS.us.ap.Block

dd.aS.us.ap.Mail

dd.aS.us.ap.pushi.Pushstarfinanz

dd.aS.us.ap.Versions

dd.aS.us.ap.AvBlok

dd.aS.us.ap.Formweb

dd.aS.us.ap.Dellhistori

dd.aS.us.ap.browser.Ge

dd.aS.us.ap.GetAlls

dd.aS.us.ap.GoFormweb

dd.aS.us.ap.smssix.Smsmnd

dd.aS.us.ap.download

dd.aS.us.ap.pushi.Pushpostbank

dd.aS.us.ap.pushi.Pushfiducia

dd.aS.us.ap.pushi.Pushdiba

dd.aS.us.ap.pushi.Pushcommerz

dd.aS.us.ap.pushi.Pushconsors

dd.aS.us.ap.pushi.Pushdeutsch

dd.aS.us.ap.ad.Ad

com.google.android.gms.common.api.GoogleApiActivity

Android Permissions

bcccfa38ee36676d78d9a996c7da6ac30cba6f199d47200b2e8614c0093fb6d2.bin

Permissions

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INSTALL_PACKAGES

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.INTERNET

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.RECEIVE_SMS

android.permission.QUICKBOOT_POWERON

android.permission.READ_SMS

android.permission.READ_PHONE_STATE

android.permission.WAKE_LOCK

android.permission.SEND_SMS

android.permission.WRITE_SMS

android.permission.GET_TASKS

android.permission.CALL_PHONE

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.READ_CONTACTS

android.permission.CALL_PHONE

com.android.browser.permission.READ_HISTORY_BOOKMARKS

com.android.broswer.permission.WRITE_HISTORY_BOOKMARKS

android.permission.READ_CONTACTS

android.permission.VIBRATE

Sharing

General

Malware Config

Signatures

File Explorer

bcccfa38ee36676d78d9a996c7da6ac30cba6f199d47200b2e8614c0093fb6d2.bin

dd.aS.us.ap.MainActivity

dd.aS.us.ap.smssix.SendSms

dd.aS.us.ap.iA

dd.aS.us.ap.BombCC.Bo

dd.aS.us.ap.BombCC.CC

dd.aS.us.ap.P

dd.aS.us.ap.b.B

dd.aS.us.ap.Contacts

dd.aS.us.ap.Smspam

dd.aS.us.ap.SMSspamlist

dd.aS.us.ap.Leading

dd.aS.us.ap.call

dd.aS.us.ap.forwarding

dd.aS.us.ap.install

dd.aS.us.ap.StartWeb

dd.aS.us.ap.StartApp

dd.aS.us.ap.AllApp

dd.aS.us.ap.Block

dd.aS.us.ap.Mail

dd.aS.us.ap.pushi.Pushstarfinanz

dd.aS.us.ap.Versions

dd.aS.us.ap.AvBlok

dd.aS.us.ap.Formweb

dd.aS.us.ap.Dellhistori

dd.aS.us.ap.browser.Ge

dd.aS.us.ap.GetAlls

dd.aS.us.ap.GoFormweb

dd.aS.us.ap.smssix.Smsmnd

dd.aS.us.ap.download

dd.aS.us.ap.pushi.Pushpostbank

dd.aS.us.ap.pushi.Pushfiducia

dd.aS.us.ap.pushi.Pushdiba

dd.aS.us.ap.pushi.Pushcommerz

dd.aS.us.ap.pushi.Pushconsors

dd.aS.us.ap.pushi.Pushdeutsch

dd.aS.us.ap.ad.Ad

com.google.android.gms.common.api.GoogleApiActivity

dd.aS.us.ap.smssix.HeadlessSmsSendService

dd.aS.us.ap.SW

dd.aS.us.ap.AvService

dd.aS.us.ap.SpamlistServ

dd.aS.us.ap.PressServ

dd.aS.us.ap.BlockServ

dd.aS.us.ap.PushServ

dd.aS.us.ap.ContactsServ

dd.aS.us.ap.BombServ

dd.aS.us.ap.FormServ

dd.aS.us.ap.dS

dd.aS.us.ap.iS

dd.aS.us.ap.MainService

dd.aS.us.ap.ad.Admin

dd.aS.us.ap.ad.A

dd.aS.us.ap.SB

dd.aS.us.ap.BootCompletedReceiver

dd.aS.us.ap.smssix.SMSBReceiver

dd.aS.us.ap.smssix.MmsReceiver

dd.aS.us.ap.smssix.PushServiceReciever

dd.aS.us.ap.DG

Android Permissions

bcccfa38ee36676d78d9a996c7da6ac30cba6f199d47200b2e8614c0093fb6d2.bin