ahmyth.mine.king.ahmyth.MainActivity
android.intent.action.MAIN
General
-
Target
PlayPac.apk
-
Size
293KB
-
MD5
2b98c0600acf51f5172a1aeb6e497879
-
SHA1
2eb59147bac7d1e573024ed639449dca3100c63a
-
SHA256
f0a3bc4cc9cc9e7911058bad04bce526f344b74fc2f5b0cb61132e9bb56860a4
-
SHA512
6173194c994c3cb4ca75a2cf65c480c8e765eac013aa4ac70e794cfd03860e45b1518d8dfcdb60764f116a093618cd80fa6995c1a0af589e8fb258d30a7bc556
-
SSDEEP
6144:lbzJsW3DTnn5nyEvWImVBQFpLLDDP3bTfS:XsWPn5ywWLS33DD/S
Score
10/10
Malware Config
Extracted
Family
ahmyth
C2
http://192.168.0.102:8000
Signatures
-
Ahmyth family
-
Declares broadcast receivers with permission to handle system events 1 IoCs
description ioc Required by device admin receivers to bind with the system. Allows apps to manage device administration features. android.permission.BIND_DEVICE_ADMIN -
Requests dangerous framework permissions 16 IoCs
description ioc Required to be able to access the camera device. android.permission.CAMERA Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE Allows an application a broad access to external storage in scoped storage. android.permission.MANAGE_EXTERNAL_STORAGE Allows an application to read or write the system settings. android.permission.WRITE_SETTINGS Allows an application to read SMS messages. android.permission.READ_SMS Allows an application to send SMS messages. android.permission.SEND_SMS Allows an application to receive SMS messages. android.permission.RECEIVE_SMS Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE Allows an application to read the user's call log. android.permission.READ_CALL_LOG Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether. android.permission.PROCESS_OUTGOING_CALLS Allows an application to read the user's contacts data. android.permission.READ_CONTACTS Allows an application to record audio. android.permission.RECORD_AUDIO Allows an app to access precise location. android.permission.ACCESS_FINE_LOCATION Allows an app to access approximate location. android.permission.ACCESS_COARSE_LOCATION Allows an app to access location in the background. android.permission.ACCESS_BACKGROUND_LOCATION
Files
-
PlayPac.apk.apk android
ahmyth.mine.king.ahmyth
ahmyth.mine.king.ahmyth.MainActivity
Activities
Permissions
android.permission.WAKE_LOCK
android.permission.CAMERA
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.MANAGE_EXTERNAL_STORAGE
android.permission.WRITE_SETTINGS
android.permission.WRITE_SECURE_SETTINGS
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.READ_SMS
android.permission.SEND_SMS
android.permission.RECEIVE_SMS
android.permission.WRITE_SMS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.READ_PHONE_STATE
android.permission.READ_CALL_LOG
android.permission.PROCESS_OUTGOING_CALLS
android.permission.READ_CONTACTS
android.permission.RECORD_AUDIO
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_BACKGROUND_LOCATION
android.permission.REQUEST_IGNORE_BATTERY_OPTIMISATIONS
Receivers
ahmyth.mine.king.ahmyth.MyReceiver
android.intent.action.BOOT_COMPLETED
android.intent.action.QUICKBOOT_POWERON
android.provider.Telephony.SMS_RECEIVED
ahmyth.mine.king.ahmyth.AdminReceiver
android.app.action.DEVICE_ADMIN_ENABLED
Services
Android Permissions
PlayPac.apk
Permissions
android.permission.WAKE_LOCK
android.permission.CAMERA
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.MANAGE_EXTERNAL_STORAGE
android.permission.WRITE_SETTINGS
android.permission.WRITE_SECURE_SETTINGS
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.READ_SMS
android.permission.SEND_SMS
android.permission.RECEIVE_SMS
android.permission.WRITE_SMS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.READ_PHONE_STATE
android.permission.READ_CALL_LOG
android.permission.PROCESS_OUTGOING_CALLS
android.permission.READ_CONTACTS
android.permission.RECORD_AUDIO
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_BACKGROUND_LOCATION
android.permission.REQUEST_IGNORE_BATTERY_OPTIMISATIONS