General

  • Target

    Ahmyth-aligned-debugSigned.apk

  • Size

    293KB

  • MD5

    97a4df8c6894f3888d1b91c3a6eaa2e5

  • SHA1

    73e1666f15cd7b5061d24a8771d33870d50ecdf4

  • SHA256

    6fbeb9fdce5e26e3d2d7d35103608c3e84fb7411157895c2279040aff9fb6ee7

  • SHA512

    ffa46e684c69e43340c22e904e4218bd01b5f0899147fda541650d05d7f6d7c1c36a81e4de1337b9964d245b9ec6f1bca7be9067121c892b58084677f90ff695

  • SSDEEP

    6144:N8iuy0OqjMfC6J1qbDqDNv6wEJ3XLBD7PVbPfX5s:N2OqjqSyDN3wVDL5X5s

Score
10/10

Malware Config

Extracted

Family

ahmyth

C2

http://Vallithebest-32755.portmap.host:32755

Signatures

  • Ahmyth family
  • Declares broadcast receivers with permission to handle system events 1 IoCs
  • Requests dangerous framework permissions 4 IoCs

Files

  • Ahmyth-aligned-debugSigned.apk
    .apk android

    ahmyth.mine.king.ahmyth

    ahmyth.mine.king.ahmyth.MainActivity


Android Permissions

Ahmyth-aligned-debugSigned.apk

Permissions

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_BACKGROUND_LOCATION

android.permission.WAKE_LOCK

android.permission.WRITE_SETTINGS

android.permission.WRITE_SECURE_SETTINGS

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMISATIONS

android.permission.RECEIVE_BOOT_COMPLETED