General

  • Target

    gen_signed.apk

  • Size

    2.2MB

  • MD5

    2b779765085d3fc8d6c8ed89bb1a9ad4

  • SHA1

    c4d1b948e0034c39d1a296c22902a2749665bbce

  • SHA256

    a1ce38a2a041622669297a29bbf0e5126f2a7be0081cd77e150c3127413c51cd

  • SHA512

    c42f7f538a13b53c8c8906b8e55e53e5a96472c3b3833bdbda7be432ec27254e86074a3aa5c161613bb553c5438d24c68b304fab4ea610ce4e2a7a993971c4e3

  • SSDEEP

    49152:dIFHE0BSE0GSg1B5m6PkPmk3prHWLlOYGBK3TfKQYNE3XgT94nM:CZb5m6Nk9HecYGBK3kS3XgZ/

Score
10/10

Malware Config

Extracted

Family

ahmyth

C2

http://192.168.1.38:42474

Signatures

  • Ahmyth family
  • Requests dangerous framework permissions 10 IoCs

Files

  • gen_signed.apk
    .apk android arch:arm

    ahmyth.mine.king.ahmyth

    ahmyth.mine.king.ahmyth.MainActivity


Android Permissions

gen_signed.apk

Permissions

android.permission.WAKE_LOCK

android.permission.CAMERA

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.READ_PHONE_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.READ_CALL_LOG

android.permission.RECORD_AUDIO

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.ACCESS_FINE_LOCATION

android.permission.READ_CONTACTS