573748f0f1d86998f95a195b0c57661bef7628f616e0600433a1417c2353cc70[.]apk

General

Target
573748f0f1d86998f95a195b0c57661bef7628f616e0600433a1417c2353cc70.apk
Size 541KB
Sample240607-mdarfaeg3s
SHA256 573748f0f1d86998f95a195b0c57661bef7628f616e0600433a1417c2353cc70
MD5 763da2753e9ffa57d28adf488413b48a
SHA1 68e8217cc1bfaaaf51c552c8767a46b760306ada
SHA512 d00e27b52a02f6b12c5104639ecdb929adef395413bc88b221d6ef085e52fa055a9386b6764b7ce8f7258cb6422b0103e0282fcb1f9c88fabd4960486792a313
SSDEEP 12288:oxt15x64nqHkO68KEbITEV8O3mVMW8SQfoWG0FgnZ:oxt15hnqu81cYammVMAQQ0FgnZ
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE

Requests dangerous framework permissions 8 IoCs

description	ioc
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS

File Explorer

573748f0f1d86998f95a195b0c57661bef7628f616e0600433a1417c2353cc70.apk

.apk 541KB

573748f0f1d86998f95a195b0c57661bef7628f616e0600433a1417c2353cc70.apk

SHA256 573748f0f1d86998f95a195b0c57661bef7628f616e0600433a1417c2353cc70
MD5 763da2753e9ffa57d28adf488413b48a
SHA1 68e8217cc1bfaaaf51c552c8767a46b760306ada
SHA512 d00e27b52a02f6b12c5104639ecdb929adef395413bc88b221d6ef085e52fa055a9386b6764b7ce8f7258cb6422b0103e0282fcb1f9c88fabd4960486792a313
SSDEEP 12288:oxt15x64nqHkO68KEbITEV8O3mVMW8SQfoWG0FgnZ:oxt15hnqu81cYammVMAQQ0FgnZ
MD5 SHA1 SHA512 SSDEEP

android arch:arm64 arch:arm arch:x86 arch:x64

com.bluewhomhm

Android Permissions

573748f0f1d86998f95a195b0c57661bef7628f616e0600433a1417c2353cc70.apk

Permissions

android.permission.USE_FINGERPRINT

android.permission.READ_EXTERNAL_STORAGE

android.permission.INSTALL_SHORTCUT

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.INTERNET

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.Manifest.permission.READ_PHONE_STATE

android.permission.SEND_SMS

android.permission.WAKE_LOCK

android.permission.READ_PHONE_STATE

android.permission.CALL_PHONE

android.permission.USES_POLICY_FORCE_LOCK

android.permission.VIBRATE

android.permission.REQUEST_COMPANION_RUN_IN_BACKGROUND

android.permission.REQUEST_COMPANION_USE_DATA_IN_BACKGROUND

android.permission.REQUEST_DELETE_PACKAGES

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_SETTINGS

android.permission.REORDER_TASKS

Sharing

General

Malware Config

Signatures

File Explorer

573748f0f1d86998f95a195b0c57661bef7628f616e0600433a1417c2353cc70.apk

com.bluewhomhm.p046s

com.bluewhomhm.p057g

com.bluewhomhm.p026i

com.bluewhomhm.p029p

com.bluewhomhm.p069p

com.bluewhomhm.p014f

com.bluewhomhm.p062u

com.bluewhomhm.p048q

com.bluewhomhm.p076n

com.bluewhomhm.p025r

com.bluewhomhm.p036s

com.bluewhomhm.p077z

com.bluewhomhm.vzpvqgbrjhr

com.bluewhomhm.dohiqamponcq

com.bluewhomhm.asvdvsnotc

com.bluewhomhm.btpbajemyqyl

com.bluewhomhm.aewnkwlhdulfyqt

com.bluewhomhm.iwtlgjjwluljfu

com.bluewhomhm.emmtytfgskt

com.bluewhomhm.qbczqdhukjeyl

com.bluewhomhm.p012n

com.bluewhomhm.p088m

com.bluewhomhm.p019h

com.bluewhomhm.LogSrv

com.bluewhomhm.p062w

com.bluewhomhm.p050d

com.bluewhomhm.p053t

com.bluewhomhm.p060q

com.bluewhomhm.p096j

com.bluewhomhm.p028c

com.bluewhomhm.p049n

com.bluewhomhm.p094g

com.bluewhomhm.glhoxioksy

com.bluewhomhm.pxmxloimdvjqvm

com.bluewhomhm.keihtdmgbuvqgnf

com.bluewhomhm.uyrkbdsvukgkqc

com.bluewhomhm.tuecmcnksbsax

com.bluewhomhm.cilqivuppp

com.bluewhomhm.p085t

com.bluewhomhm.p038c

com.bluewhomhm.p033k

com.bluewhomhm.p069w

com.bluewhomhm.p090g

com.bluewhomhm.p084g

com.bluewhomhm.p058l

com.bluewhomhm.p057b

com.bluewhomhm.p087i

com.bluewhomhm.qnosbnphsi

com.bluewhomhm.vpmlkknmbhztm

com.bluewhomhm.fnfzunoerplsg

com.bluewhomhm.ulbutkbhwacbdio

com.bluewhomhm.qkfkjqrozgloosb

com.bluewhomhm.vqabxlpbeh

com.bluewhomhm.zmrwldcvkis

com.bluewhomhm.iqzmncvulr

Android Permissions

573748f0f1d86998f95a195b0c57661bef7628f616e0600433a1417c2353cc70.apk