548346ff3b5bb8a9f0da40fd4ebdcb2a

General

Target
548346ff3b5bb8a9f0da40fd4ebdcb2a
Size 3.2MB
Sample240426-lefhmsde4x
SHA256 50ed006fb1be9516185367ada34c9b5c1da69223c62f533be1107f8b8bd2f76f
MD5 548346ff3b5bb8a9f0da40fd4ebdcb2a
SHA1 e4cd2bfe551d9f9fdbfd3f96be7ecb7f120257f3
SHA512 43106eaad33af80f77335c4141a2a83f782b2fe576c1ca3e4abe14314d5d3fe9f574a8ebb8a74ef664b0812affeaf128fbe5ae197d64dd83d5be5b2388893430
SSDEEP 98304:NvIuD/ow/xt+GCUtvl+PceDIIAJXaIlgIi1gQ2:1zo8x0G7Eb/A6aQ2
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE

Requests dangerous framework permissions 10 IoCs

description	ioc
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to record audio.	android.permission.RECORD_AUDIO

File Explorer

548346ff3b5bb8a9f0da40fd4ebdcb2a

.apk 3.2MB

548346ff3b5bb8a9f0da40fd4ebdcb2a

SHA256 50ed006fb1be9516185367ada34c9b5c1da69223c62f533be1107f8b8bd2f76f
MD5 548346ff3b5bb8a9f0da40fd4ebdcb2a
SHA1 e4cd2bfe551d9f9fdbfd3f96be7ecb7f120257f3
SHA512 43106eaad33af80f77335c4141a2a83f782b2fe576c1ca3e4abe14314d5d3fe9f574a8ebb8a74ef664b0812affeaf128fbe5ae197d64dd83d5be5b2388893430
SSDEEP 98304:NvIuD/ow/xt+GCUtvl+PceDIIAJXaIlgIi1gQ2:1zo8x0G7Eb/A6aQ2
MD5 SHA1 SHA512 SSDEEP

android arch:x86 arch:x64 arch:arm arch:arm64

stove.senator.friend

Android Permissions

548346ff3b5bb8a9f0da40fd4ebdcb2a

Permissions

android.permission.REORDER_TASKS

android.permission.USE_FULL_SCREEN_INTENT

android.permission.FOREGROUND_SERVICE

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.CALL_PHONE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.READ_PHONE_STATE

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.permission.REQUEST_DELETE_PACKAGES

android.permission.SEND_SMS

android.permission.READ_CONTACTS

android.permission.WAKE_LOCK

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.GET_ACCOUNTS

android.permission.RECORD_AUDIO

548346ff3b5bb8a9f0da40fd4ebdcb2a

elect.slavery.shuttle.tquzjonc

com.google.android.gms.common.api.GoogleApiActivity

elect.slavery.shuttle.yivrhwjcvzqrxch

elect.slavery.shuttle.ezjpmpwydi

elect.slavery.shuttle.dhsndz

elect.slavery.shuttle.gmqcwofhlbokbyo

elect.slavery.shuttle.socyfom

elect.slavery.shuttle.qrnmwzfsz

elect.slavery.shuttle.xnkfefeq

elect.slavery.shuttle.hbkk

elect.slavery.shuttle.ftt

elect.slavery.shuttle.zzq

elect.slavery.shuttle.prlibivfruyg

elect.slavery.shuttle.nukblrdhynugexa

elect.slavery.shuttle.apkajcwdstywaqr

elect.slavery.shuttle.zzvpruhg

elect.slavery.shuttle.qwmpnsfh

elect.slavery.shuttle.rxc

elect.slavery.shuttle.aurycwa

elect.slavery.shuttle.puvsmvrvgvsrvv

elect.slavery.shuttle.innufv

elect.slavery.shuttle.dvrjfort

elect.slavery.shuttle.iqfugxmzzrp

elect.slavery.shuttle.wgo

elect.slavery.shuttle.qjtopk

elect.slavery.shuttle.kxagxayk

elect.slavery.shuttle.rxvfesaifujkyjl

elect.slavery.shuttle.cuy

elect.slavery.shuttle.dljbdtg

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

548346ff3b5bb8a9f0da40fd4ebdcb2a

elect.slavery.shuttle.tquzjonc

com.google.android.gms.common.api.GoogleApiActivity

elect.slavery.shuttle.yivrhwjcvzqrxch

elect.slavery.shuttle.ezjpmpwydi

elect.slavery.shuttle.dhsndz

elect.slavery.shuttle.gmqcwofhlbokbyo

elect.slavery.shuttle.socyfom

elect.slavery.shuttle.qrnmwzfsz

elect.slavery.shuttle.xnkfefeq

elect.slavery.shuttle.hbkk

elect.slavery.shuttle.ftt

elect.slavery.shuttle.zzq

elect.slavery.shuttle.prlibivfruyg

elect.slavery.shuttle.nukblrdhynugexa

elect.slavery.shuttle.apkajcwdstywaqr

elect.slavery.shuttle.zzvpruhg

elect.slavery.shuttle.qwmpnsfh

elect.slavery.shuttle.rxc

elect.slavery.shuttle.aurycwa

elect.slavery.shuttle.puvsmvrvgvsrvv

elect.slavery.shuttle.innufv

elect.slavery.shuttle.dvrjfort

elect.slavery.shuttle.iqfugxmzzrp

elect.slavery.shuttle.wgo

elect.slavery.shuttle.qjtopk

elect.slavery.shuttle.kxagxayk

elect.slavery.shuttle.rxvfesaifujkyjl

elect.slavery.shuttle.cuy

elect.slavery.shuttle.dljbdtg

Android Permissions

548346ff3b5bb8a9f0da40fd4ebdcb2a