173aa89091bd450df5cb0af509b8ddd74ebb2097433e8f2998edcd3848647b7a[.]bin

General

Target
173aa89091bd450df5cb0af509b8ddd74ebb2097433e8f2998edcd3848647b7a.bin
Size 509KB
Sample240413-1w1bpsad55
SHA256 173aa89091bd450df5cb0af509b8ddd74ebb2097433e8f2998edcd3848647b7a
MD5 913847e5845268f10a4a2b11024827ea
SHA1 b542051df3e58b6712c5a72361a5d1c686233ba9
SHA512 c8b2804a0896b8e2b4ee58e4358f14c7780e5a2e28c01bf5ee31fdf17d3c033be728108fc775adbb2a0d6875b13b82240c8feb390fbebdffcbf4f1b6683f7391
SSDEEP 12288:tSkTYtBbHmGKNuFak1Rsg8c7kdwmlzo1wRFY4EsQWNSznw:MaCZuEp8m7WRFVqznw
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE

Requests dangerous framework permissions 7 IoCs

description	ioc
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE

File Explorer

173aa89091bd450df5cb0af509b8ddd74ebb2097433e8f2998edcd3848647b7a.bin

.apk 509KB

173aa89091bd450df5cb0af509b8ddd74ebb2097433e8f2998edcd3848647b7a.bin

SHA256 173aa89091bd450df5cb0af509b8ddd74ebb2097433e8f2998edcd3848647b7a
MD5 913847e5845268f10a4a2b11024827ea
SHA1 b542051df3e58b6712c5a72361a5d1c686233ba9
SHA512 c8b2804a0896b8e2b4ee58e4358f14c7780e5a2e28c01bf5ee31fdf17d3c033be728108fc775adbb2a0d6875b13b82240c8feb390fbebdffcbf4f1b6683f7391
SSDEEP 12288:tSkTYtBbHmGKNuFak1Rsg8c7kdwmlzo1wRFY4EsQWNSznw:MaCZuEp8m7WRFVqznw
MD5 SHA1 SHA512 SSDEEP

android arch:arm64 arch:arm arch:x86 arch:x64

com.nextfreele

Android Permissions

173aa89091bd450df5cb0af509b8ddd74ebb2097433e8f2998edcd3848647b7a.bin

Permissions

android.permission.ADD_VOICEMAIL

android.permission.USE_FINGERPRINT

android.permission.CLEAR_APP_CACHE

android.permission.BATTERY_STATS

android.permission.READ_EXTERNAL_STORAGE

android.permission.GET_PACKAGE_SIZE

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.INTERNET

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.WAKE_LOCK

android.permission.CALL_PHONE

android.permission.USES_POLICY_FORCE_LOCK

android.permission.VIBRATE

android.permission.REQUEST_COMPANION_RUN_IN_BACKGROUND

android.permission.REQUEST_COMPANION_USE_DATA_IN_BACKGROUND

android.permission.REQUEST_DELETE_PACKAGES

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_SETTINGS

android.permission.REORDER_TASKS

android.permission.READ_PHONE_STATE

173aa89091bd450df5cb0af509b8ddd74ebb2097433e8f2998edcd3848647b7a.bin

com.nextfreele.p078l

com.nextfreele.p066p

com.nextfreele.p018k

com.nextfreele.p049s

com.nextfreele.p095m

com.nextfreele.p015s

com.nextfreele.p081h

com.nextfreele.p090t

com.nextfreele.p025q

com.nextfreele.p090x

com.nextfreele.p051y

com.nextfreele.p055o

com.nextfreele.p018w

com.nextfreele.p094n

com.nextfreele.p020a

com.nextfreele.p094f

com.nextfreele.p017z

com.nextfreele.p067r

com.nextfreele.p020t

com.nextfreele.p015j

com.nextfreele.p036w

com.nextfreele.p074n

com.nextfreele.p053o

com.nextfreele.p040y

com.nextfreele.p019g

com.nextfreele.p027o

com.nextfreele.p051g

com.nextfreele.p078p

com.nextfreele.p017d

com.nextfreele.p085i

Sharing

General

Malware Config

Signatures

File Explorer

173aa89091bd450df5cb0af509b8ddd74ebb2097433e8f2998edcd3848647b7a.bin

com.nextfreele.p078l

com.nextfreele.p066p

com.nextfreele.p018k

com.nextfreele.p049s

com.nextfreele.p095m

com.nextfreele.p015s

com.nextfreele.p081h

com.nextfreele.p090t

com.nextfreele.p025q

com.nextfreele.p090x

com.nextfreele.p051y

com.nextfreele.p055o

com.nextfreele.p018w

com.nextfreele.p094n

com.nextfreele.p020a

com.nextfreele.p094f

com.nextfreele.p017z

com.nextfreele.p067r

com.nextfreele.p020t

com.nextfreele.p015j

com.nextfreele.p036w

com.nextfreele.p074n

com.nextfreele.p053o

com.nextfreele.p040y

com.nextfreele.p019g

com.nextfreele.p027o

com.nextfreele.p051g

com.nextfreele.p078p

com.nextfreele.p017d

com.nextfreele.p085i

Android Permissions

173aa89091bd450df5cb0af509b8ddd74ebb2097433e8f2998edcd3848647b7a.bin