General

  • Target

    0d09d5e46e779d796a8d295043e5bbd90ac43705fa7ff7953faa5d8370840f93

  • Size

    4.3MB

  • MD5

    6151b1e2e5035a8eb596ce1c37565e87

  • SHA1

    bf482e86d512da46126f0e61733bca4352620176

  • SHA256

    0d09d5e46e779d796a8d295043e5bbd90ac43705fa7ff7953faa5d8370840f93

  • SHA512

    16c6c311287fc4f19e701cfc964b17b1d754d8aee7b8d745652bfc1f02aaf5638487e63aff5a900b7cb629ddfc62f896856626440da74b17662f80ca4b2f1e22

  • SSDEEP

    98304:AGtCFIYkriTxD7j9bapQAnLUDaZKSRVrYO/eh1cLsdFrufrcjEj3:FWpD37dSRVWh1cLsdML

Score
10/10

Malware Config

Extracted

Family

furball

C2

http://www.androidsystemswebview.com/msd

Signatures

  • Furball family
  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 5 IoCs

Files

  • 0d09d5e46e779d796a8d295043e5bbd90ac43705fa7ff7953faa5d8370840f93
    .apk android

    com.getdoc.freepaaper.dissertation

    com.getdoc.freepaaper.dissertation.ui.login.LoginActivity


Android Permissions

0d09d5e46e779d796a8d295043e5bbd90ac43705fa7ff7953faa5d8370840f93

Permissions

android.permission.INTERNET

android.permission.WAKE_LOCK

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.VIBRATE

android.permission.PACKAGE_USAGE_STATS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.QUICKBOOT_POWERON

android.permission.REAL_GET_TASKS

android.permission.GET_ACCOUNTS

com.android.browser.permission.READ_HISTORY_BOOKMARKS

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_LOGS

android.permission.WRITE_SETTINGS