37aef26149a421155360cdaf0666b9c0.bin
- SHA256 62eb0ded72d70954c97cf3fda3564ba6ef10c6f15577e7422cec57675af268f2
Password
infected
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
929055bd9495b324a48097d1b5ca516eb5a96d33bd9c2fe5f144a59dc315feeb.apk
Resource
android-x86-arm-20240603-en
android-9-x86
1 signatures
150 seconds
General
- Target 37aef26149a421155360cdaf0666b9c0.bin
- Size 2.8MB
- Sample240604-bypwbagf61
- SHA256 62eb0ded72d70954c97cf3fda3564ba6ef10c6f15577e7422cec57675af268f2
- MD5 87de738921f799f2ea86929db43b9202
- SHA1 d062fef100a9f046de51165469472833ac33bd06
- SHA512 c27ec1ed9875bc9994e6bcd596d3c0e1236d765e0440d2d395485f2f3db1a9260d0b154a82d775338b095fa69e341bfa06ee70f1fe40d83f91912113b1373bee
- SSDEEP 49152:yI7Ufva5Rnnj3ApmkMt9MtsCCvo83og9RRtkAllI9gYo1v89nhfQBmN:/sSJEpI9Mtb831haaEgYo1Ephf7
- MD5 SHA1 SHA512 SSDEEP
Score
6/10
Malware Config
Signatures
- Declares broadcast receivers with permission to handle system events 1 IoCs
description ioc Required by device admin receivers to bind with the system. Allows apps to manage device administration features. android.permission.BIND_DEVICE_ADMIN - Declares services with permission to bind to the system 2 IoCs
description ioc Required by accessibility services to bind with the system. Allows apps to access accessibility features. android.permission.BIND_ACCESSIBILITY_SERVICE Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device. android.permission.BIND_NOTIFICATION_LISTENER_SERVICE - Requests dangerous framework permissions 16 IoCs
description ioc Allows an application to read the user's contacts data. android.permission.READ_CONTACTS Allows an application to read SMS messages. android.permission.READ_SMS Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call. android.permission.CALL_PHONE Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE Allows the app to answer an incoming phone call. android.permission.ANSWER_PHONE_CALLS Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether. android.permission.PROCESS_OUTGOING_CALLS Allows an application to read the user's call log. android.permission.READ_CALL_LOG Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE Allows an app to access approximate location. android.permission.ACCESS_COARSE_LOCATION Allows an app to access precise location. android.permission.ACCESS_FINE_LOCATION Allows an application to read the user's calendar data. android.permission.READ_CALENDAR Allows an application to record audio. android.permission.RECORD_AUDIO Required to be able to access the camera device. android.permission.CAMERA Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps. android.permission.SYSTEM_ALERT_WINDOW Allows an application to collect component usage statistics. android.permission.PACKAGE_USAGE_STATS Allows an application to read or write the system settings. android.permission.WRITE_SETTINGS
File Explorer
-
37aef26149a421155360cdaf0666b9c0.bin.zip 2.8MB
-
929055bd9495b324a48097d1b5ca516eb5a96d33bd9c2fe5f144a59dc315feeb.apk.apk 3.2MB
929055bd9495b324a48097d1b5ca516eb5a96d33bd9c2fe5f144a59dc315feeb.apk
- SHA256 929055bd9495b324a48097d1b5ca516eb5a96d33bd9c2fe5f144a59dc315feeb
- MD5 37aef26149a421155360cdaf0666b9c0
- SHA1 7a49a8322edb2076450e54749aeed30bbbd10915
- SHA512 2175b6c6e4a63f4f6d5ac45327c16a01ddb71dd08c974bb311eeeaf4e8712604427a82b1ed87805527b065ad9b5d650ab90e7b928dd4fafbfc04d010b47855b9
- SSDEEP 98304:dJetZn5fPhBEmEkAIMwP1Gnxh941cYJwkEOy:z05fUmbA4P4r9ocnn/
- MD5 SHA1 SHA512 SSDEEP
Password
infected
com.erovriug.cjkipbcg
com.erovriug.cjkipbcg.JBkbAGWPTP
com.erovriug.cjkipbcg.permission.C2D_MESSAGE
android.permission.READ_CONTACTS
android.permission.READ_SMS
android.permission.CALL_PHONE
android.permission.READ_PHONE_STATE
android.permission.ANSWER_PHONE_CALLS
android.permission.PROCESS_OUTGOING_CALLS
android.permission.READ_LOGS
android.permission.READ_CALL_LOG
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.SDCARD_WRITE
android.permission.VIBRATE
android.permission.INTERNET
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_NETWORK_STATE
android.permission.READ_CALENDAR
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.RECORD_AUDIO
android.permission.CAMERA
android.permission.WAKE_LOCK
com.google.android.c2dm.permission.RECEIVE
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.GET_TASKS
android.permission.BIND_DEVICE_ADMIN
android.permission.CHANGE_NETWORK_STATE
android.permission.ACCESS_SUPERUSER
android.permission.SYSTEM_ALERT_WINDOW
android.permission.PACKAGE_USAGE_STATS
android.permission.USES_POLICY_WIPE_DATA
android.permission.BLUETOOTH
android.permission.BLUETOOTH_ADMIN
android.permission.WRITE_SETTINGS
android.permission.WRITE_SECURE_SETTINGS
android.permission.BROADCAST_STICKY
android.permission.GET_PACKAGE_SIZE
android.permission.WRITE_SYNC_SETTINGS
android.permission.CHANGE_WIFI_MULTICAST_STATE
android.permission.BATTERY_STATS
android.permission.CHANGE_CONFIGURATION
android.permission.FOREGROUND_SERVICE
com.erovriug.cjkipbcg.JBkbAGWPTP
android.intent.action.MAIN
com.erovriug.cjkipbcg.SkBvUtDzub
android.intent.action.MAIN
com.erovriug.cjkipbcg.AppProfileActivity
com.erovriug.cjkipbcg.rDyugYsmDJ
com.EaFyPXkHVIu.zcbCfGvOFUgmSXkLOW.gwgTRGjgnusHuJ
com.NULcYNgROkBfh.HSpFzhVOEiZbILAXNM.WmQKRvwHtpHchBPtfU
com.HKoEFVGYWLCJtbUt.PQuSSNUmwG.YMYfNFBYwR
com.UySadYHyXYuKxDfDfoqN.DZJIqldMZPG.ACKnctcjmj
com.ISjGngkTEFsPy.DXEjFiywaB.DXodFVZiXvyYkgBx
com.aBYaajOehfbbMyOseHU.awFMlBfEINQyslaH.vJSyjnQDzFL
com.XqOyZJZvZzPNA.HIJDpUyCOaiOwQ.nBAhXSntsXL
com.erovriug.cjkipbcg.Register
com.erovriug.cjkipbcg.protocol.KzGAmJWQRP
com.erovriug.cjkipbcg.core.ioJEguqXjo
com.erovriug.cjkipbcg.core.kXHvCoByia
com.erovriug.cjkipbcg.SettingsActivity
com.erovriug.cjkipbcg.rIxxwVkZAC
com.erovriug.cjkipbcg.ANtCyipaIr
com.erovriug.cjkipbcg.HZfUhsNOFc
com.erovriug.cjkipbcg.NewAppSetting
com.erovriug.cjkipbcg.MWoMcIgRkc
com.erovriug.cjkipbcg.AaHkRHfJNd
org.appspot.apprtc.zVEvqLeEki
com.erovriug.cjkipbcg.hRooWuHdkN
com.google.android.gms.common.api.GoogleApiActivity
com.EDpFbaQwFOqYnTxbCM.WQCpVdTucFzAdOO.BwACXoxoHVQTG
com.XuZfoQwDYnmPvWvssdHT.GoWyftJxascaiRYYGgCD.dLgddIwCsC
com.erovriug.cjkipbcg.core.oZlmvPCpon
com.erovriug.cjkipbcg.core.qWaRbcQtrm
com.erovriug.cjkipbcg.securechannel.SfLsUcgMGh
com.google.firebase.iid.FirebaseInstanceIdService
com.google.firebase.INSTANCE_ID_EVENT
com.erovriug.cjkipbcg.bkpNTZegAF
com.google.firebase.MESSAGING_EVENT
com.erovriug.cjkipbcg.PiaAtcCFPe
com.google.firebase.INSTANCE_ID_EVENT
com.erovriug.cjkipbcg.core.listener.BIWPNjBvYy
android.accessibilityservice.AccessibilityService
com.erovriug.cjkipbcg.core.listener.mSDoTWExxj
com.erovriug.cjkipbcg.util.YdrJVSdjrE
com.erovriug.cjkipbcg.core.listener.mJQqVmJHDn
android.service.notification.NotificationListenerService
com.google.firebase.messaging.FirebaseMessagingService
com.google.firebase.MESSAGING_EVENT
com.wwKjtIJOSmNOfnVCtJ.ycrTUvMHfr.lEnnFCJRjBboXbcxwbEX
com.LIlGpgeeQOK.mrUCUzNMqUuHcbwaVfcO.iPVUIfwwBHCweVksoZqM
com.erovriug.cjkipbcg.core.aiIbvJFMUv
com.erovriug.cjkipbcg.core.aiIbvJFMUv.TIMER_ALARM
com.erovriug.cjkipbcg.core.UCCsZHSOcd
com.erovriug.cjkipbcg.core.UCCsZHSOcd.START
com.erovriug.cjkipbcg.core.UCCsZHSOcd.STOP
com.erovriug.cjkipbcg.core.IvTztWuDcs
android.intent.action.NEW_OUTGOING_CALL
android.provider.Telephony.SMS_RECEIVED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.USER_PRESENT
android.intent.action.BOOT_COMPLETED
android.intent.action.ACTION_SHUTDOWN
android.intent.action.PHONE_STATE
android.intent.action.SIM_STATE_CHANGED
android.intent.action.PACKAGE_REMOVED
android.intent.action.PACKAGE_ADDED
com.erovriug.cjkipbcg.MLuAtEzMLi
com.google.android.c2dm.intent.REGISTRATION
com.google.android.c2dm.intent.RECEIVE
com.google.android.c2dm.intent.RETRY
com.google.firebase.iid.FirebaseInstanceIdInternalReceiver
com.google.firebase.iid.FirebaseInstanceIdReceiver
com.google.android.c2dm.intent.RECEIVE
com.google.android.c2dm.intent.REGISTRATION
com.google.android.c2dm.intent.RECEIVE
com.erovriug.cjkipbcg.core.anxTWdlTZk
android.app.action.DEVICE_ADMIN_ENABLED