d400d59f683f34145fe4daa5899083feb0d04cf302bea4278104e99f6b2856f8[.]bin

General

Target
d400d59f683f34145fe4daa5899083feb0d04cf302bea4278104e99f6b2856f8.bin
Size 436KB
Sample240529-2p5hhsdf62
SHA256 d400d59f683f34145fe4daa5899083feb0d04cf302bea4278104e99f6b2856f8
MD5 bcebbafad749ed94d075e14bf4ab4e80
SHA1 fb9567a6c98adc4dc79fbae617e9ce8877b3d3a6
SHA512 5585475fcdf30128a74f516c2ca7c02e48e5c638096a7633386f5846ae948e257f90aa3842f8fa9a8d024db90dedaf83504aebabeafac1f52261c4e489d980cc
SSDEEP 12288:kqCNwWrZi12AcWyysVeDaNju9+HkAbtT4qn:kJzkWys7udAb5
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE

Requests dangerous framework permissions 11 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an application a broad access to external storage in scoped storage.	android.permission.MANAGE_EXTERNAL_STORAGE

File Explorer

d400d59f683f34145fe4daa5899083feb0d04cf302bea4278104e99f6b2856f8.bin

.apk 436KB

d400d59f683f34145fe4daa5899083feb0d04cf302bea4278104e99f6b2856f8.bin

SHA256 d400d59f683f34145fe4daa5899083feb0d04cf302bea4278104e99f6b2856f8
MD5 bcebbafad749ed94d075e14bf4ab4e80
SHA1 fb9567a6c98adc4dc79fbae617e9ce8877b3d3a6
SHA512 5585475fcdf30128a74f516c2ca7c02e48e5c638096a7633386f5846ae948e257f90aa3842f8fa9a8d024db90dedaf83504aebabeafac1f52261c4e489d980cc
SSDEEP 12288:kqCNwWrZi12AcWyysVeDaNju9+HkAbtT4qn:kJzkWys7udAb5
MD5 SHA1 SHA512 SSDEEP

android arch:arm

eivf.edtrzz.yqo

Android Permissions

d400d59f683f34145fe4daa5899083feb0d04cf302bea4278104e99f6b2856f8.bin

Permissions

android.lotglu.avbtset.ypejuekg

android.cvpwc.ucvrfw.alxnrltv

android.wqkew.fbicsdwt.gpkkx

android.ffvere.eixjd.prfq

android.tgslsshe.rcxi.tnhj

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.VIBRATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WAKE_LOCK

android.permission.INTERNET

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_CONTACTS

android.permission.READ_PHONE_STATE

android.permission.GET_ACCOUNTS

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.FOREGROUND_SERVICE

android.permission.POST_NOTIFICATIONS

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.MANAGE_EXTERNAL_STORAGE

d400d59f683f34145fe4daa5899083feb0d04cf302bea4278104e99f6b2856f8.bin

hpg7.epobya

hpg7.fd

hpg7.wkojl

hpg7.og

hpg7.xqg

hpg7.zmwv

hpg7.nitdyhs

hpg7.f

hpg7.g

hpg7.h

hpg7.emfl

hpg7.uth

hpg7.ureji

hpg7.a

hpg7.b

hpg7.q

hpg7.d

hpg7.e

hpg7.s

hpg7.z

hpg7.i

hpg7.grutdk

hpg7.fczvqry

hpg7.tdscgru

hpg7.oxdly

Sharing

General

Malware Config

Signatures

File Explorer

d400d59f683f34145fe4daa5899083feb0d04cf302bea4278104e99f6b2856f8.bin

hpg7.epobya

hpg7.fd

hpg7.wkojl

hpg7.og

hpg7.xqg

hpg7.zmwv

hpg7.nitdyhs

hpg7.f

hpg7.g

hpg7.h

hpg7.emfl

hpg7.uth

hpg7.ureji

hpg7.a

hpg7.b

hpg7.q

hpg7.d

hpg7.e

hpg7.s

hpg7.z

hpg7.i

hpg7.grutdk

hpg7.fczvqry

hpg7.tdscgru

hpg7.oxdly

Android Permissions

d400d59f683f34145fe4daa5899083feb0d04cf302bea4278104e99f6b2856f8.bin