Aleyna_Tilki_Ifsa[.]apk

General

Target
Aleyna_Tilki_Ifsa.apk
Size 2.2MB
Sample240415-xt4dssdg45
SHA256 731c0da8d74adbb557a0abd4ec2aa6c61e09d429560d76549881f08e564b27cd
MD5 c2df5601485a33aa2feb1cb3b00e1bac
SHA1 3d1d4445e5daa4e88adca360e45da9277c60eb4d
SHA512 7af0ca3260d826dee08e9a0097ab0cf2f05ad626751aa58815c37b03360b4a5d660cd86b87b4df58fbd4cf37058c0b5114de505248dc9aa35fd5a01f489380b1
SSDEEP 49152:7mqf+e8Gt15R82zo8pHuxwmzxXHb2Vee82QTJf5GPQSQPza46f9JA9ETwQTZt:iqfwGt15R828EH3+XHb2ce82QVQQSQPa
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE

Requests dangerous framework permissions 9 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows read access to the device's phone number(s).	android.permission.READ_PHONE_NUMBERS
Allows an application to send SMS messages.	android.permission.SEND_SMS

File Explorer

Aleyna_Tilki_Ifsa.apk

.apk 2.2MB

Aleyna_Tilki_Ifsa.apk

SHA256 731c0da8d74adbb557a0abd4ec2aa6c61e09d429560d76549881f08e564b27cd
MD5 c2df5601485a33aa2feb1cb3b00e1bac
SHA1 3d1d4445e5daa4e88adca360e45da9277c60eb4d
SHA512 7af0ca3260d826dee08e9a0097ab0cf2f05ad626751aa58815c37b03360b4a5d660cd86b87b4df58fbd4cf37058c0b5114de505248dc9aa35fd5a01f489380b1
SSDEEP 49152:7mqf+e8Gt15R82zo8pHuxwmzxXHb2Vee82QTJf5GPQSQPza46f9JA9ETwQTZt:iqfwGt15R828EH3+XHb2ce82QVQQSQPa
MD5 SHA1 SHA512 SSDEEP

android

com.bulb.maid

Android Permissions

Aleyna_Tilki_Ifsa.apk

Permissions

android.permission.READ_PHONE_STATE

android.permission.REQUEST_DELETE_PACKAGES

android.permission.READ_CONTACTS

android.permission.GET_TASKS

android.permission.WAKE_LOCK

android.permission.QUICKBOOT_POWERON

android.permission.RECEIVE_LAUNCH_BROADCASTS

android.permission.RECEIVE_SMS

android.permission.ACCESS_WIFI_STATE

android.permission.READ_SMS

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.CALL_PHONE

android.permission.QUERY_ALL_PACKAGES

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.ACTION_MANAGE_OVERLAY_PERMISSION

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_PHONE_NUMBERS

android.permission.SEND_SMS

android.permission.DISABLE_KEYGUARD

android.permission.INTERNET

Aleyna_Tilki_Ifsa.apk

com.habit.mutual.eejnu.gbrizcrcty

com.google.android.gms.common.api.GoogleApiActivity

com.habit.mutual.rcqvido.woedlbc

com.habit.mutual.txc

com.habit.mutual.eejnu.olrbdsdarwlwnstb

com.habit.mutual.eejnu.huqhfubuikuezg

com.habit.mutual.pjyhu

com.habit.mutual.eejnu.fnvhby

com.habit.mutual.eejnu.lcsfwwkraemf

com.habit.mutual.ybcyniauzuecd.nehklhfuiebbuff

com.habit.mutual.ybcyniauzuecd.ijhlbwt

com.habit.mutual.yjyqymepe

com.habit.mutual.ybcyniauzuecd.cukokqyca

com.habit.mutual.ybcyniauzuecd.fqfvjyk

com.habit.mutual.ybcyniauzuecd.ydcpzgoafid

com.habit.mutual.ybcyniauzuecd.jnisvgr

com.habit.mutual.ybcyniauzuecd.bfqakwiepiikz

com.habit.mutual.rcqvido.lyjsbboh

com.habit.mutual.uoeq

com.habit.mutual.esdyyp.jhtp

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

Aleyna_Tilki_Ifsa.apk

com.habit.mutual.eejnu.gbrizcrcty

com.google.android.gms.common.api.GoogleApiActivity

com.habit.mutual.rcqvido.woedlbc

com.habit.mutual.txc

com.habit.mutual.eejnu.olrbdsdarwlwnstb

com.habit.mutual.eejnu.huqhfubuikuezg

com.habit.mutual.pjyhu

com.habit.mutual.eejnu.fnvhby

com.habit.mutual.eejnu.lcsfwwkraemf

com.habit.mutual.ybcyniauzuecd.nehklhfuiebbuff

com.habit.mutual.ybcyniauzuecd.ijhlbwt

com.habit.mutual.yjyqymepe

com.habit.mutual.ybcyniauzuecd.cukokqyca

com.habit.mutual.ybcyniauzuecd.fqfvjyk

com.habit.mutual.ybcyniauzuecd.ydcpzgoafid

com.habit.mutual.ybcyniauzuecd.jnisvgr

com.habit.mutual.ybcyniauzuecd.bfqakwiepiikz

com.habit.mutual.rcqvido.lyjsbboh

com.habit.mutual.uoeq

com.habit.mutual.esdyyp.jhtp

Android Permissions

Aleyna_Tilki_Ifsa.apk