657d6c7f79d60e0f7e3458d26fe5c0c1b0e1e1576dc07e47ac488ffda8f6f616[.]bin

General

Target
657d6c7f79d60e0f7e3458d26fe5c0c1b0e1e1576dc07e47ac488ffda8f6f616.bin
Size 4.1MB
Sample240509-1wvffsca94
SHA256 657d6c7f79d60e0f7e3458d26fe5c0c1b0e1e1576dc07e47ac488ffda8f6f616
MD5 604d98f084314d0b129ee4891d52c56c
SHA1 da82540643b52db25ce0d82ef896374d12053197
SHA512 1167dcf7c180cbf97449e0f960ee0b8fc09ba9c865497068f00b3f7523b01040a6b7bcb918ecf14c40ea40b4f8566c7cc871a27db84cb57f8d6c7b3e7056539e
SSDEEP 98304:EZ6Yvsd2ofreOoezlcpqG5P9SP68hQU5TiFBcCoFji:YvgXlcpq+VSP6MCo8
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE

Requests dangerous framework permissions 9 IoCs

description	ioc
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS

File Explorer

657d6c7f79d60e0f7e3458d26fe5c0c1b0e1e1576dc07e47ac488ffda8f6f616.bin

.apk 4.1MB

657d6c7f79d60e0f7e3458d26fe5c0c1b0e1e1576dc07e47ac488ffda8f6f616.bin

SHA256 657d6c7f79d60e0f7e3458d26fe5c0c1b0e1e1576dc07e47ac488ffda8f6f616
MD5 604d98f084314d0b129ee4891d52c56c
SHA1 da82540643b52db25ce0d82ef896374d12053197
SHA512 1167dcf7c180cbf97449e0f960ee0b8fc09ba9c865497068f00b3f7523b01040a6b7bcb918ecf14c40ea40b4f8566c7cc871a27db84cb57f8d6c7b3e7056539e
SSDEEP 98304:EZ6Yvsd2ofreOoezlcpqG5P9SP68hQU5TiFBcCoFji:YvgXlcpq+VSP6MCo8
MD5 SHA1 SHA512 SSDEEP

android

com.sonnokta

Android Permissions

657d6c7f79d60e0f7e3458d26fe5c0c1b0e1e1576dc07e47ac488ffda8f6f616.bin

Permissions

android.permission.GET_ACCOUNTS

android.permission.POST_NOTIFICATIONS

android.permission.READ_PRIVILEGED_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ADD_VOICEMAIL

android.permission.GET_PACKAGE_SIZE

android.permission.CLEAR_APP_CACHE

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.INTERNET

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.Manifest.permission.READ_PHONE_STATE

android.permission.SEND_SMS

android.permission.WAKE_LOCK

android.permission.READ_PHONE_STATE

android.permission.CALL_PHONE

android.permission.USES_POLICY_FORCE_LOCK

android.permission.VIBRATE

android.permission.REQUEST_COMPANION_RUN_IN_BACKGROUND

android.permission.REQUEST_COMPANION_USE_DATA_IN_BACKGROUND

android.permission.REQUEST_DELETE_PACKAGES

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_SETTINGS

android.permission.REORDER_TASKS

657d6c7f79d60e0f7e3458d26fe5c0c1b0e1e1576dc07e47ac488ffda8f6f616.bin

com.sonnokta.p079j

com.sonnokta.p025i

com.sonnokta.p059u

com.sonnokta.p085x

com.sonnokta.p036o

com.sonnokta.p036n

com.sonnokta.p016j

com.sonnokta.p049p

com.sonnokta.p025p

com.sonnokta.p057t

com.sonnokta.p059j

com.sonnokta.p075b

com.sonnokta.p027d

com.sonnokta.p041i

com.sonnokta.p054v

com.sonnokta.p071p

com.sonnokta.p067x

com.sonnokta.p044i

com.sonnokta.p023w

com.sonnokta.p025n

com.sonnokta.p073f

com.sonnokta.p042w

com.sonnokta.p095e

com.sonnokta.p053u

com.sonnokta.p050i

com.sonnokta.p077o

com.sonnokta.p043q

com.sonnokta.p032o

com.sonnokta.p086c

com.sonnokta.p088s

com.sonnokta.p047t

androidx.startup.InitializationProvider

Sharing

General

Malware Config

Signatures

File Explorer

657d6c7f79d60e0f7e3458d26fe5c0c1b0e1e1576dc07e47ac488ffda8f6f616.bin

com.sonnokta.p079j

com.sonnokta.p025i

com.sonnokta.p059u

com.sonnokta.p085x

com.sonnokta.p036o

com.sonnokta.p036n

com.sonnokta.p016j

com.sonnokta.p049p

com.sonnokta.p025p

com.sonnokta.p057t

com.sonnokta.p059j

com.sonnokta.p075b

com.sonnokta.p027d

com.sonnokta.p041i

com.sonnokta.p054v

com.sonnokta.p071p

com.sonnokta.p067x

com.sonnokta.p044i

com.sonnokta.p023w

com.sonnokta.p025n

com.sonnokta.p073f

com.sonnokta.p042w

com.sonnokta.p095e

com.sonnokta.p053u

com.sonnokta.p050i

com.sonnokta.p077o

com.sonnokta.p043q

com.sonnokta.p032o

com.sonnokta.p086c

com.sonnokta.p088s

com.sonnokta.p047t

androidx.startup.InitializationProvider

Android Permissions

657d6c7f79d60e0f7e3458d26fe5c0c1b0e1e1576dc07e47ac488ffda8f6f616.bin