799f804c9c2a12456481993fcc29f6751879bedf51b9aeb1794fb6b882efe746[.]bin

General

Target
799f804c9c2a12456481993fcc29f6751879bedf51b9aeb1794fb6b882efe746.bin
Size 541KB
Sample240601-2cc8hahe64
SHA256 799f804c9c2a12456481993fcc29f6751879bedf51b9aeb1794fb6b882efe746
MD5 871236f1cb461a3a3c79f347e99ad407
SHA1 cec904a290c4d1a408215de7e3f98252358e6ff0
SHA512 c116cd979ddaf9d96d9b269858372a1275b7370a30bebd139c07b97e0bc99ab29c121546f01224dbad0f397a148c0393361699d2da8536c940d5ef7477d8bb46
SSDEEP 12288:NBJ12fLIDDGCMOpJdazKNdoQlggTExqBD2Udh/QKhBWR:LJEDI/GCxv6KNdo4zQxqBDRdW
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE

Requests dangerous framework permissions 8 IoCs

description	ioc
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS

File Explorer

799f804c9c2a12456481993fcc29f6751879bedf51b9aeb1794fb6b882efe746.bin

.apk 541KB

799f804c9c2a12456481993fcc29f6751879bedf51b9aeb1794fb6b882efe746.bin

SHA256 799f804c9c2a12456481993fcc29f6751879bedf51b9aeb1794fb6b882efe746
MD5 871236f1cb461a3a3c79f347e99ad407
SHA1 cec904a290c4d1a408215de7e3f98252358e6ff0
SHA512 c116cd979ddaf9d96d9b269858372a1275b7370a30bebd139c07b97e0bc99ab29c121546f01224dbad0f397a148c0393361699d2da8536c940d5ef7477d8bb46
SSDEEP 12288:NBJ12fLIDDGCMOpJdazKNdoQlggTExqBD2Udh/QKhBWR:LJEDI/GCxv6KNdo4zQxqBDRdW
MD5 SHA1 SHA512 SSDEEP

android arch:arm64 arch:arm arch:x86 arch:x64

com.pictureriveruqp

Android Permissions

799f804c9c2a12456481993fcc29f6751879bedf51b9aeb1794fb6b882efe746.bin

Permissions

android.permission.BATTERY_STATS

android.permission.READ_EXTERNAL_STORAGE

android.permission.CLEAR_APP_CACHE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.USE_FINGERPRINT

android.permission.INSTALL_SHORTCUT

android.permission.ADD_VOICEMAIL

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.INTERNET

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.Manifest.permission.READ_PHONE_STATE

android.permission.SEND_SMS

android.permission.WAKE_LOCK

android.permission.READ_PHONE_STATE

android.permission.CALL_PHONE

android.permission.USES_POLICY_FORCE_LOCK

android.permission.VIBRATE

android.permission.REQUEST_COMPANION_RUN_IN_BACKGROUND

android.permission.REQUEST_COMPANION_USE_DATA_IN_BACKGROUND

android.permission.REQUEST_DELETE_PACKAGES

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_SETTINGS

android.permission.REORDER_TASKS

Sharing

General

Malware Config

Signatures

File Explorer

799f804c9c2a12456481993fcc29f6751879bedf51b9aeb1794fb6b882efe746.bin

com.pictureriveruqp.p077e

com.pictureriveruqp.p064i

com.pictureriveruqp.p034q

com.pictureriveruqp.p072j

com.pictureriveruqp.p022g

com.pictureriveruqp.p025z

com.pictureriveruqp.p053x

com.pictureriveruqp.p012c

com.pictureriveruqp.p096m

com.pictureriveruqp.p080j

com.pictureriveruqp.p077y

com.pictureriveruqp.p018v

com.pictureriveruqp.lxquwnbtqnzczki

com.pictureriveruqp.rqyqnrmyvk

com.pictureriveruqp.vmgdgjnhvow

com.pictureriveruqp.xchyjjunivyncxi

com.pictureriveruqp.bnbjhbscgayixvr

com.pictureriveruqp.krjvycpppwqfgwn

com.pictureriveruqp.p068s

com.pictureriveruqp.p030v

com.pictureriveruqp.p099t

com.pictureriveruqp.LogSrv

com.pictureriveruqp.p058z

com.pictureriveruqp.p027s

com.pictureriveruqp.p043h

com.pictureriveruqp.p069a

com.pictureriveruqp.p063y

com.pictureriveruqp.p043q

com.pictureriveruqp.p056y

com.pictureriveruqp.p055m

com.pictureriveruqp.yswnroangesaiku

com.pictureriveruqp.llwoakyzejqfes

com.pictureriveruqp.oymikxjynmqrk

com.pictureriveruqp.yevhzfrcpsjm

com.pictureriveruqp.jhmwlvkleaigztt

com.pictureriveruqp.qymhwkglbeq

com.pictureriveruqp.xypirmaufivalcn

com.pictureriveruqp.p050t

com.pictureriveruqp.p041c

com.pictureriveruqp.p046e

com.pictureriveruqp.p031w

com.pictureriveruqp.p019y

com.pictureriveruqp.p087i

com.pictureriveruqp.p089w

com.pictureriveruqp.p065w

com.pictureriveruqp.rmlpfltichtv

com.pictureriveruqp.kkvrktxxlkq

com.pictureriveruqp.rxjveridawqei

com.pictureriveruqp.aelmeymbsmmjy

com.pictureriveruqp.cqkpnflkeflg

com.pictureriveruqp.lsoymsaxvrvokvz

com.pictureriveruqp.djpnkztnmfufv

Android Permissions

799f804c9c2a12456481993fcc29f6751879bedf51b9aeb1794fb6b882efe746.bin