d8d8131ee4a6a7c93bae3395cff2823a3f7855d5915b348ec683c601e64bb52e[.]bin

General

Target
d8d8131ee4a6a7c93bae3395cff2823a3f7855d5915b348ec683c601e64bb52e.bin
Size 509KB
Sample240503-gd4fvsae78
SHA256 d8d8131ee4a6a7c93bae3395cff2823a3f7855d5915b348ec683c601e64bb52e
MD5 15a31cb785c3e739437636c2b01cce4d
SHA1 612f01b711915e3276e69d642152bc56e7c0af8a
SHA512 ff851ae7913724c957e7bbf0cbbd55ae0aa7e9077431fa9b9d2b6deaf698c6e3148adc0a734f0cbb7917fe926697fb338efbf321b68f9fa178a2f2872b33b5a4
SSDEEP 12288:VliS13voAYL69Pd50uxTQ3rWIC10+fqtgwn5gnQ:zl5oju9F5t87WS+fTS5gnQ
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE

Requests dangerous framework permissions 8 IoCs

description	ioc
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS

File Explorer

d8d8131ee4a6a7c93bae3395cff2823a3f7855d5915b348ec683c601e64bb52e.bin

.apk 509KB

d8d8131ee4a6a7c93bae3395cff2823a3f7855d5915b348ec683c601e64bb52e.bin

SHA256 d8d8131ee4a6a7c93bae3395cff2823a3f7855d5915b348ec683c601e64bb52e
MD5 15a31cb785c3e739437636c2b01cce4d
SHA1 612f01b711915e3276e69d642152bc56e7c0af8a
SHA512 ff851ae7913724c957e7bbf0cbbd55ae0aa7e9077431fa9b9d2b6deaf698c6e3148adc0a734f0cbb7917fe926697fb338efbf321b68f9fa178a2f2872b33b5a4
SSDEEP 12288:VliS13voAYL69Pd50uxTQ3rWIC10+fqtgwn5gnQ:zl5oju9F5t87WS+fTS5gnQ
MD5 SHA1 SHA512 SSDEEP

android arch:arm64 arch:arm arch:x86 arch:x64

com.roundmuch38

Android Permissions

d8d8131ee4a6a7c93bae3395cff2823a3f7855d5915b348ec683c601e64bb52e.bin

Permissions

android.permission.INSTALL_SHORTCUT

android.permission.BATTERY_STATS

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.CLEAR_APP_CACHE

android.permission.GET_PACKAGE_SIZE

android.permission.USE_FINGERPRINT

android.permission.ADD_VOICEMAIL

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.INTERNET

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.Manifest.permission.READ_PHONE_STATE

android.permission.SEND_SMS

android.permission.WAKE_LOCK

android.permission.READ_PHONE_STATE

android.permission.CALL_PHONE

android.permission.USES_POLICY_FORCE_LOCK

android.permission.VIBRATE

android.permission.REQUEST_COMPANION_RUN_IN_BACKGROUND

android.permission.REQUEST_COMPANION_USE_DATA_IN_BACKGROUND

android.permission.REQUEST_DELETE_PACKAGES

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_SETTINGS

android.permission.REORDER_TASKS

d8d8131ee4a6a7c93bae3395cff2823a3f7855d5915b348ec683c601e64bb52e.bin

com.roundmuch38.p096y

com.roundmuch38.p090r

com.roundmuch38.p078b

com.roundmuch38.p097k

com.roundmuch38.p069a

com.roundmuch38.p086c

com.roundmuch38.p011f

com.roundmuch38.p018i

com.roundmuch38.p081c

com.roundmuch38.p043x

com.roundmuch38.p044k

com.roundmuch38.p098o

com.roundmuch38.p034i

com.roundmuch38.p098p

com.roundmuch38.p025c

com.roundmuch38.p088d

com.roundmuch38.p065c

com.roundmuch38.p083q

com.roundmuch38.p064z

com.roundmuch38.p068i

com.roundmuch38.p068k

com.roundmuch38.p043k

com.roundmuch38.p089l

com.roundmuch38.p069d

com.roundmuch38.p023m

com.roundmuch38.p029c

com.roundmuch38.p029e

com.roundmuch38.p056u

com.roundmuch38.p091h

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

d8d8131ee4a6a7c93bae3395cff2823a3f7855d5915b348ec683c601e64bb52e.bin

com.roundmuch38.p096y

com.roundmuch38.p090r

com.roundmuch38.p078b

com.roundmuch38.p097k

com.roundmuch38.p069a

com.roundmuch38.p086c

com.roundmuch38.p011f

com.roundmuch38.p018i

com.roundmuch38.p081c

com.roundmuch38.p043x

com.roundmuch38.p044k

com.roundmuch38.p098o

com.roundmuch38.p034i

com.roundmuch38.p098p

com.roundmuch38.p025c

com.roundmuch38.p088d

com.roundmuch38.p065c

com.roundmuch38.p083q

com.roundmuch38.p064z

com.roundmuch38.p068i

com.roundmuch38.p068k

com.roundmuch38.p043k

com.roundmuch38.p089l

com.roundmuch38.p069d

com.roundmuch38.p023m

com.roundmuch38.p029c

com.roundmuch38.p029e

com.roundmuch38.p056u

com.roundmuch38.p091h

Android Permissions

d8d8131ee4a6a7c93bae3395cff2823a3f7855d5915b348ec683c601e64bb52e.bin