23a78510f80cbf49012fb6093b484e7651cc13f20efc08f2e8a7ec84a75793a0[.]bin

General

Target
23a78510f80cbf49012fb6093b484e7651cc13f20efc08f2e8a7ec84a75793a0.bin
Size 509KB
Sample240509-1xasfacb35
SHA256 23a78510f80cbf49012fb6093b484e7651cc13f20efc08f2e8a7ec84a75793a0
MD5 b1b37e25084c81c627b5f03d56cd8bb1
SHA1 ac57bed54205b8a50c4806759abfda2e2ebefa23
SHA512 6dcdc56c08b0185d2a4df615f0b6229ae16b2dd5fef1c3cc8b629d4f5dcd4d9d1f7914350c907327c779111e85e721f66ef8e613ad86f7bd3433fa424be9f88a
SSDEEP 12288:REjQYPfqf5eFsAvbp2Vo35kJu9LaaWe6X/I0nb:REsYSeFhYVe5VDdR0nb
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE

Requests dangerous framework permissions 8 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS

File Explorer

23a78510f80cbf49012fb6093b484e7651cc13f20efc08f2e8a7ec84a75793a0.bin

.apk 509KB

23a78510f80cbf49012fb6093b484e7651cc13f20efc08f2e8a7ec84a75793a0.bin

SHA256 23a78510f80cbf49012fb6093b484e7651cc13f20efc08f2e8a7ec84a75793a0
MD5 b1b37e25084c81c627b5f03d56cd8bb1
SHA1 ac57bed54205b8a50c4806759abfda2e2ebefa23
SHA512 6dcdc56c08b0185d2a4df615f0b6229ae16b2dd5fef1c3cc8b629d4f5dcd4d9d1f7914350c907327c779111e85e721f66ef8e613ad86f7bd3433fa424be9f88a
SSDEEP 12288:REjQYPfqf5eFsAvbp2Vo35kJu9LaaWe6X/I0nb:REsYSeFhYVe5VDdR0nb
MD5 SHA1 SHA512 SSDEEP

android arch:arm64 arch:arm arch:x86 arch:x64

com.portnightu

Android Permissions

23a78510f80cbf49012fb6093b484e7651cc13f20efc08f2e8a7ec84a75793a0.bin

Permissions

android.permission.GET_PACKAGE_SIZE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ADD_VOICEMAIL

android.permission.BATTERY_STATS

android.permission.CLEAR_APP_CACHE

android.permission.READ_EXTERNAL_STORAGE

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.INTERNET

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.Manifest.permission.READ_PHONE_STATE

android.permission.SEND_SMS

android.permission.WAKE_LOCK

android.permission.READ_PHONE_STATE

android.permission.CALL_PHONE

android.permission.USES_POLICY_FORCE_LOCK

android.permission.VIBRATE

android.permission.REQUEST_COMPANION_RUN_IN_BACKGROUND

android.permission.REQUEST_COMPANION_USE_DATA_IN_BACKGROUND

android.permission.REQUEST_DELETE_PACKAGES

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_SETTINGS

android.permission.REORDER_TASKS

23a78510f80cbf49012fb6093b484e7651cc13f20efc08f2e8a7ec84a75793a0.bin

com.portnightu.p025n

com.portnightu.p051o

com.portnightu.p042s

com.portnightu.p083e

com.portnightu.p068x

com.portnightu.p099x

com.portnightu.p089x

com.portnightu.p043q

com.portnightu.p075x

com.portnightu.p079r

com.portnightu.p021d

com.portnightu.p065w

com.portnightu.p068u

com.portnightu.p059b

com.portnightu.p099p

com.portnightu.p071x

com.portnightu.p087k

com.portnightu.p066d

com.portnightu.p082s

com.portnightu.p099a

com.portnightu.p080d

com.portnightu.p034d

com.portnightu.p042u

com.portnightu.p070d

com.portnightu.p025v

com.portnightu.p044z

com.portnightu.p093p

com.portnightu.p081i

com.portnightu.p094x

com.portnightu.p066m

com.portnightu.p032s

Sharing

General

Malware Config

Signatures

File Explorer

23a78510f80cbf49012fb6093b484e7651cc13f20efc08f2e8a7ec84a75793a0.bin

com.portnightu.p025n

com.portnightu.p051o

com.portnightu.p042s

com.portnightu.p083e

com.portnightu.p068x

com.portnightu.p099x

com.portnightu.p089x

com.portnightu.p043q

com.portnightu.p075x

com.portnightu.p079r

com.portnightu.p021d

com.portnightu.p065w

com.portnightu.p068u

com.portnightu.p059b

com.portnightu.p099p

com.portnightu.p071x

com.portnightu.p087k

com.portnightu.p066d

com.portnightu.p082s

com.portnightu.p099a

com.portnightu.p080d

com.portnightu.p034d

com.portnightu.p042u

com.portnightu.p070d

com.portnightu.p025v

com.portnightu.p044z

com.portnightu.p093p

com.portnightu.p081i

com.portnightu.p094x

com.portnightu.p066m

com.portnightu.p032s

Android Permissions

23a78510f80cbf49012fb6093b484e7651cc13f20efc08f2e8a7ec84a75793a0.bin