Android.7z
- SHA256 ad511e4bc1879ba45088d2baca30834de771b6903102b37e37ccc0ea183cc9a9
Password
infected
Behavioral task
behavioral1
Sample
Android.apk
Resource
android-x86-arm-20240514-en
android-9-x86
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
Android.apk
Resource
android-x64-20240514-en
android-10-x64
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
Android.apk
Resource
android-x64-arm64-20240514-en
android-11-x64
1 signatures
150 seconds
General
- Target Android.7z
- Size 9KB
- Sample240520-prmn9sba43
- SHA256 ad511e4bc1879ba45088d2baca30834de771b6903102b37e37ccc0ea183cc9a9
- MD5 d7d463a2970b377dafef47601bb35524
- SHA1 d036fe18778a8e02309d6382ed3403c7dad702b0
- SHA512 a51f5b4fef631a49c7051c5910a1852083f3be47d3d0bfbe1c72bb4b51ebe7deaab2ca1a367d883d134dabafb59bd43c660368f0138572a33d5d53b5b3daa29c
- SSDEEP 192:ccF/teo3Xdoj/VY1tBls8OX5fP1SIElQfwta07ff/ijgmxdk:cyDn45pfmAwta07f3Rsdk
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Malware Config
Signatures
- Metasploit family
- Metasploit payload 1 IoCs
resource yara_rule static1/unpack001/Android.apk family_metasploit - Requests dangerous framework permissions 15 IoCs
description ioc Allows an app to access approximate location. android.permission.ACCESS_COARSE_LOCATION Allows an app to access precise location. android.permission.ACCESS_FINE_LOCATION Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE Allows an application to send SMS messages. android.permission.SEND_SMS Allows an application to receive SMS messages. android.permission.RECEIVE_SMS Allows an application to record audio. android.permission.RECORD_AUDIO Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call. android.permission.CALL_PHONE Allows an application to read the user's contacts data. android.permission.READ_CONTACTS Allows an application to write the user's contacts data. android.permission.WRITE_CONTACTS Allows an application to read or write the system settings. android.permission.WRITE_SETTINGS Required to be able to access the camera device. android.permission.CAMERA Allows an application to read SMS messages. android.permission.READ_SMS Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE Allows an application to read the user's call log. android.permission.READ_CALL_LOG Allows an application to write and read the user's call log data. android.permission.WRITE_CALL_LOG
File Explorer
-
Android.7z.7z 9KB
-
Android.apk.apk 10KB
Android.apk
- SHA256 21d919a00066952f00ede7fd78e0fd066542df85ecd1dcd6a12c646afc1fdc15
- MD5 7c3233be2f0816ce915d41c2668890ec
- SHA1 60de0770d5e996ab0a7d4bbe5146ad596897ad9b
- SHA512 8c31b79230f29690073619bc9974d629be50a6a6e0acc8eea9462981c20bd87934253209b8587c761a9eaf4d01f4c1c263b6b2fa20aae210d24d061cbad6eb6c
- SSDEEP 192:ZLt7+5NrZjORiU8PtqTEmjKpeSZQmAvlKrmLGbHVAf8:ZLt0gRatgPiQ1S0GzVAE
- MD5 SHA1 SHA512 SSDEEP
-
Metasploit payload
com.metasploit.stage
.MainActivity
android.permission.INTERNET
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.READ_PHONE_STATE
android.permission.SEND_SMS
android.permission.RECEIVE_SMS
android.permission.RECORD_AUDIO
android.permission.CALL_PHONE
android.permission.READ_CONTACTS
android.permission.WRITE_CONTACTS
android.permission.WRITE_SETTINGS
android.permission.CAMERA
android.permission.READ_SMS
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.SET_WALLPAPER
android.permission.READ_CALL_LOG
android.permission.WRITE_CALL_LOG
android.permission.WAKE_LOCK
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS
.MainActivity
android.intent.action.MAIN
android.intent.action.VIEW
.MainService
.MainBroadcastReceiver
android.intent.action.BOOT_COMPLETED