Overview

overview

10

Static

static

10

5815a29e5f...8a.apk

android-9-x86

8

5815a29e5f...8a.apk

android-10-x64

8

5815a29e5f...8a.apk

android-11-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5815a29e5fc062840f4bc9620a8b618a

  • Size

    3.9MB

  • MD5

    5815a29e5fc062840f4bc9620a8b618a

  • SHA1

    8ddf03b7b7e130113b4685ccfa80ba790ba5f847

  • SHA256

    cbbbd1a3eae287286ca6d28628d98c78c971964aa4a725c094a2f6ebf1061edc

  • SHA512

    3a85344642b91462e6248108dd6fed59f0ea1a7ee222e2d720d79febe4828fc826d3b46d319eb11c1029c6a2e8541b4d608cf1f31db8e7c215015ced2317be89

  • SSDEEP

    98304:EikNJQQyLRdnrTPIUL4VfSytWvlNMxNRcXpJ0ADxnIC:jkNS9LPvPDkBelNAcZJPn1

Score
10/10
ahmyth

Malware Config

Extracted

Family

ahmyth

C2

http://193.161.193.99:27229

Signatures

  • Ahmyth family
    ahmyth
  • Requests dangerous framework permissions 11 IoCs

Files

  • 5815a29e5fc062840f4bc9620a8b618a
    .apk android

    com.coronavirus.info

    com.coronavirus.info.ui.MainActivity


Android Permissions

5815a29e5fc062840f4bc9620a8b618a

Permissions

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.WAKE_LOCK

com.google.android.c2dm.permission.RECEIVE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.CAMERA

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.READ_PHONE_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.READ_CALL_LOG

android.permission.RECORD_AUDIO

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.READ_CONTACTS