400d1dde99702a445e268843bd54a7fcc7659a80a8abd0abe95c950098a7d03a[.]bin

General

Target
400d1dde99702a445e268843bd54a7fcc7659a80a8abd0abe95c950098a7d03a.bin
Size 509KB
Sample240519-1wsxmaca52
SHA256 400d1dde99702a445e268843bd54a7fcc7659a80a8abd0abe95c950098a7d03a
MD5 415a7fc313cd5cab0e6d716b4a6b77e3
SHA1 826b40506de7f9af6e2b2ec00b80d20cde8192d0
SHA512 49e329e8c420df1ec154d69d633d98d602948d74dc873434d2b76bbbaa225893a20f6102377cbc0751b26f8c3a69279f36e12d4ba6c65981f3d0f0a6c58d1b1f
SSDEEP 12288:vwDoqu0s7vIEFZLPck2Iz4efsRvh1o79XB:vwy0s7QEDKDAX
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE

Requests dangerous framework permissions 8 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS

File Explorer

400d1dde99702a445e268843bd54a7fcc7659a80a8abd0abe95c950098a7d03a.bin

.apk 509KB

400d1dde99702a445e268843bd54a7fcc7659a80a8abd0abe95c950098a7d03a.bin

SHA256 400d1dde99702a445e268843bd54a7fcc7659a80a8abd0abe95c950098a7d03a
MD5 415a7fc313cd5cab0e6d716b4a6b77e3
SHA1 826b40506de7f9af6e2b2ec00b80d20cde8192d0
SHA512 49e329e8c420df1ec154d69d633d98d602948d74dc873434d2b76bbbaa225893a20f6102377cbc0751b26f8c3a69279f36e12d4ba6c65981f3d0f0a6c58d1b1f
SSDEEP 12288:vwDoqu0s7vIEFZLPck2Iz4efsRvh1o79XB:vwy0s7QEDKDAX
MD5 SHA1 SHA512 SSDEEP

android arch:arm64 arch:arm arch:x86 arch:x64

com.sitstatef

Android Permissions

400d1dde99702a445e268843bd54a7fcc7659a80a8abd0abe95c950098a7d03a.bin

Permissions

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.USE_FINGERPRINT

android.permission.BATTERY_STATS

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.INTERNET

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.Manifest.permission.READ_PHONE_STATE

android.permission.SEND_SMS

android.permission.WAKE_LOCK

android.permission.READ_PHONE_STATE

android.permission.CALL_PHONE

android.permission.USES_POLICY_FORCE_LOCK

android.permission.VIBRATE

android.permission.REQUEST_COMPANION_RUN_IN_BACKGROUND

android.permission.REQUEST_COMPANION_USE_DATA_IN_BACKGROUND

android.permission.REQUEST_DELETE_PACKAGES

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_SETTINGS

android.permission.REORDER_TASKS

400d1dde99702a445e268843bd54a7fcc7659a80a8abd0abe95c950098a7d03a.bin

com.sitstatef.p010h

com.sitstatef.p065m

com.sitstatef.p070i

com.sitstatef.p015q

com.sitstatef.p050g

com.sitstatef.p053i

com.sitstatef.p075m

com.sitstatef.p062z

com.sitstatef.p046x

com.sitstatef.p057n

com.sitstatef.p069g

com.sitstatef.p019c

com.sitstatef.p032q

com.sitstatef.p038d

com.sitstatef.p019f

com.sitstatef.p065i

com.sitstatef.p050h

com.sitstatef.p077u

com.sitstatef.p057h

com.sitstatef.p077k

com.sitstatef.p037v

com.sitstatef.p071p

com.sitstatef.p035q

com.sitstatef.p098q

com.sitstatef.p029v

com.sitstatef.p047m

com.sitstatef.p053r

com.sitstatef.p015t

com.sitstatef.p087c

Sharing

General

Malware Config

Signatures

File Explorer

400d1dde99702a445e268843bd54a7fcc7659a80a8abd0abe95c950098a7d03a.bin

com.sitstatef.p010h

com.sitstatef.p065m

com.sitstatef.p070i

com.sitstatef.p015q

com.sitstatef.p050g

com.sitstatef.p053i

com.sitstatef.p075m

com.sitstatef.p062z

com.sitstatef.p046x

com.sitstatef.p057n

com.sitstatef.p069g

com.sitstatef.p019c

com.sitstatef.p032q

com.sitstatef.p038d

com.sitstatef.p019f

com.sitstatef.p065i

com.sitstatef.p050h

com.sitstatef.p077u

com.sitstatef.p057h

com.sitstatef.p077k

com.sitstatef.p037v

com.sitstatef.p071p

com.sitstatef.p035q

com.sitstatef.p098q

com.sitstatef.p029v

com.sitstatef.p047m

com.sitstatef.p053r

com.sitstatef.p015t

com.sitstatef.p087c

Android Permissions

400d1dde99702a445e268843bd54a7fcc7659a80a8abd0abe95c950098a7d03a.bin