331e239de166370ab59ae9715b8883ed6bbb642e721bd99854532b96d5b97806[.]bin

General

Target
331e239de166370ab59ae9715b8883ed6bbb642e721bd99854532b96d5b97806.bin
Size 4.1MB
Sample240413-1yattsdf2x
SHA256 331e239de166370ab59ae9715b8883ed6bbb642e721bd99854532b96d5b97806
MD5 144ecbe7fe5f52577163493160d3d9a8
SHA1 4a7345612480c4d01f158cabc73d204f6d5bcc25
SHA512 612db01f4724d05b1cf1fc771b6e96094ebe4aa3879f51151b94e5ea0b3d785f8e97df30a27a2bfc29364c57a385d92d79a11550cc15ddaf0c8b83274fa6d91b
SSDEEP 98304:ZZL4xaxIGqxrZuK1LO6JLSJKr5n/W/A9hVqP2CXyQMbEaE1lNKCCfs:juai7xrwWTmw51g+CdM0vNlCs
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE

Requests dangerous framework permissions 14 IoCs

description	ioc
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows read access to the device's phone number(s).	android.permission.READ_PHONE_NUMBERS

File Explorer

331e239de166370ab59ae9715b8883ed6bbb642e721bd99854532b96d5b97806.bin

.apk 4.1MB

331e239de166370ab59ae9715b8883ed6bbb642e721bd99854532b96d5b97806.bin

SHA256 331e239de166370ab59ae9715b8883ed6bbb642e721bd99854532b96d5b97806
MD5 144ecbe7fe5f52577163493160d3d9a8
SHA1 4a7345612480c4d01f158cabc73d204f6d5bcc25
SHA512 612db01f4724d05b1cf1fc771b6e96094ebe4aa3879f51151b94e5ea0b3d785f8e97df30a27a2bfc29364c57a385d92d79a11550cc15ddaf0c8b83274fa6d91b
SSDEEP 98304:ZZL4xaxIGqxrZuK1LO6JLSJKr5n/W/A9hVqP2CXyQMbEaE1lNKCCfs:juai7xrwWTmw51g+CdM0vNlCs
MD5 SHA1 SHA512 SSDEEP

android arch:arm arch:arm64 arch:x64 arch:x86

au.actress.spring

Android Permissions

331e239de166370ab59ae9715b8883ed6bbb642e721bd99854532b96d5b97806.bin

Permissions

android.permission.DISABLE_KEYGUARD

android.permission.QUERY_ALL_PACKAGES

android.permission.SYSTEM_ALERT_WINDOW

android.permission.REORDER_TASKS

android.permission.USE_FULL_SCREEN_INTENT

android.permission.FOREGROUND_SERVICE

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.CALL_PHONE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.READ_PHONE_STATE

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.permission.REQUEST_DELETE_PACKAGES

android.permission.SEND_SMS

android.permission.READ_CONTACTS

android.permission.WAKE_LOCK

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.GET_ACCOUNTS

android.permission.RECORD_AUDIO

android.permission.QUICKBOOT_POWERON

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.QUERY_ALL_PACKAGES

android.permission.DISABLE_KEYGUARD

android.permission.GET_TASKS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.ACCESS_WIFI_STATE

android.permission.ACTION_MANAGE_OVERLAY_PERMISSION

android.permission.RECEIVE_LAUNCH_BROADCASTS

android.permission.READ_PHONE_NUMBERS

331e239de166370ab59ae9715b8883ed6bbb642e721bd99854532b96d5b97806.bin

org.criminal.police.mqqewguppkfxvvg

com.google.android.gms.common.api.GoogleApiActivity

org.criminal.police.jvzqpthnfy

org.criminal.police.chhhcoaxozh

org.criminal.police.iupci

org.criminal.police.hnktyj

org.criminal.police.juverzqpuytfgad

org.criminal.police.huacmbwkemdcvh

org.criminal.police.xgtgpeb

org.criminal.police.ygrptlp

org.criminal.police.vzhoxmzbspnm

org.criminal.police.uxtskupwqux

org.criminal.police.xbrvxlyh

org.criminal.police.kuhws

org.criminal.police.qmzbr

org.criminal.police.mvwidzzatsln

org.criminal.police.qcjvhyhgpo

org.criminal.police.uuj

org.criminal.police.gtakcalp

org.criminal.police.gjivwehjbwbdush

org.criminal.police.oqzorzvlnmybl

org.criminal.police.ggmoygg

org.criminal.police.qatbrujjasc

org.criminal.police.wpjwupiqieutmvwu

org.criminal.police.azuvxkhglra

org.criminal.police.fvxscrwpasccu

org.criminal.police.geqnzg

org.criminal.police.waqxhu

org.criminal.police.jqqgjrghlkzb

org.criminal.police.iapqkurb

org.criminal.police.pqbbqidnednebr

org.criminal.police.rlwbckifnpnqqfyl

org.criminal.police.wdzmqsrquz

org.criminal.police.afwojn

Sharing

General

Malware Config

Signatures

File Explorer

331e239de166370ab59ae9715b8883ed6bbb642e721bd99854532b96d5b97806.bin

org.criminal.police.mqqewguppkfxvvg

com.google.android.gms.common.api.GoogleApiActivity

org.criminal.police.jvzqpthnfy

org.criminal.police.chhhcoaxozh

org.criminal.police.iupci

org.criminal.police.hnktyj

org.criminal.police.juverzqpuytfgad

org.criminal.police.huacmbwkemdcvh

org.criminal.police.xgtgpeb

org.criminal.police.ygrptlp

org.criminal.police.vzhoxmzbspnm

org.criminal.police.uxtskupwqux

org.criminal.police.xbrvxlyh

org.criminal.police.kuhws

org.criminal.police.qmzbr

org.criminal.police.mvwidzzatsln

org.criminal.police.qcjvhyhgpo

org.criminal.police.uuj

org.criminal.police.gtakcalp

org.criminal.police.gjivwehjbwbdush

org.criminal.police.oqzorzvlnmybl

org.criminal.police.ggmoygg

org.criminal.police.qatbrujjasc

org.criminal.police.wpjwupiqieutmvwu

org.criminal.police.azuvxkhglra

org.criminal.police.fvxscrwpasccu

org.criminal.police.geqnzg

org.criminal.police.waqxhu

org.criminal.police.jqqgjrghlkzb

org.criminal.police.iapqkurb

org.criminal.police.pqbbqidnednebr

org.criminal.police.rlwbckifnpnqqfyl

org.criminal.police.wdzmqsrquz

org.criminal.police.afwojn

Android Permissions

331e239de166370ab59ae9715b8883ed6bbb642e721bd99854532b96d5b97806.bin