General

  • Target

    a98a224b644d3d88eed27aa05548a41e0178dba93ed9145250f61912e924b3e9

  • Size

    1.1MB

  • MD5

    6b69a9bf30d76c135db369956774f2cb

  • SHA1

    22f49fa7fe1506d2639f08e9ae198e262396c052

  • SHA256

    a98a224b644d3d88eed27aa05548a41e0178dba93ed9145250f61912e924b3e9

  • SHA512

    2df561ffe8b9d8ce3ab6b1a5b1eccb4312e7230fa20c4da451e76cdb53e94169ffc4b2fbc0a09fe45ca6e5551921ba51670c087b0eb899ccc9206186ec0b83dd

  • SSDEEP

    24576:idX3e1cFTNITHE4Uo+N6SSmZ1e8+wyJ8Doj562FuNGlhlsdbC/lwU6Xf:idneJTZrq6XmZ8ZwEsMuNGl3OmSXf

Score
10/10

Malware Config

Signatures

  • Hermit family
  • Hermit payload 1 IoCs
  • Requests dangerous framework permissions 14 IoCs

Files

  • a98a224b644d3d88eed27aa05548a41e0178dba93ed9145250f61912e924b3e9
    .apk android

    com.vodaservices

    com.android.manager.MainActivity


Android Permissions

a98a224b644d3d88eed27aa05548a41e0178dba93ed9145250f61912e924b3e9

Permissions

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WAKE_LOCK

com.android.browser.permission.READ_HISTORY_BOOKMARKS

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.CAMERA

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.CHANGE_WIFI_MULTICAST_STATE

android.permission.INTERNET

android.permission.AUTHENTICATE_ACCOUNTS

android.permission.GET_ACCOUNTS

android.permission.MANAGE_ACCOUNTS

android.permission.DISABLE_KEYGUARD

android.permission.READ_CALL_LOG

android.permission.READ_CONTACTS

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.RECORD_AUDIO

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_SMS

android.permission.READ_PHONE_STATE

android.permission.RECEIVE_SMS

android.permission.PROCESS_OUTGOING_CALLS

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.USE_CREDENTIALS

android.permission.BIND_ACCESSIBILITY_SERVICE

com.google.android.c2dm.permission.RECEIVE

com.vodaservices.permission.C2D_MESSAGE