DOC2024[.]apk | Triage™

General

Target
DOC2024.apk
Size 2.2MB
Sample240610-bgen1sae45
SHA256 9d8cf0447a7be78976a08b26f0c47643e842132b0cdfb8f8041bf99114905b61
MD5 2d919fa75dfba37ab16e3141c5a46e65
SHA1 c11f5fd51bfd760c1a8831efb670a8ba870878fd
SHA512 db1d28661fe85258ce76b756c787b8ee6ceca58a52c02dfb4055c1e38177da6aafc9f6ec02bb83b57690b3eafa34e986a4cb79c80987817ce69c4daa4e3f63c9
SSDEEP 24576:4CM4Kk+gCQaJeQN7R6vCdccg/EALNNQaMXJqJ/2b6/UsOrqeuf14GAwd5L2lQ4KB:E4Gfmxcg/FQJK/hDL4KBlm80frOV
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 10 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to monitor incoming MMS messages.	android.permission.RECEIVE_MMS
Allows read access to the device's phone number(s).	android.permission.READ_PHONE_NUMBERS
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS

File Explorer

DOC2024.apk

.apk 2.2MB

DOC2024.apk

SHA256 9d8cf0447a7be78976a08b26f0c47643e842132b0cdfb8f8041bf99114905b61
MD5 2d919fa75dfba37ab16e3141c5a46e65
SHA1 c11f5fd51bfd760c1a8831efb670a8ba870878fd
SHA512 db1d28661fe85258ce76b756c787b8ee6ceca58a52c02dfb4055c1e38177da6aafc9f6ec02bb83b57690b3eafa34e986a4cb79c80987817ce69c4daa4e3f63c9
SSDEEP 24576:4CM4Kk+gCQaJeQN7R6vCdccg/EALNNQaMXJqJ/2b6/UsOrqeuf14GAwd5L2lQ4KB:E4Gfmxcg/FQJK/hDL4KBlm80frOV
MD5 SHA1 SHA512 SSDEEP

android arch:arm64 arch:arm arch:x86 arch:x64

xwfkkzmhtqacdh.scivosxjssu.qbtxybzbwsrxcce

Android Permissions

DOC2024.apk

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.READ_CONTACTS

android.permission.CALL_PHONE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.POST_NOTIFICATIONS

android.permission.READ_SMS

android.permission.RECEIVE_SMS

android.permission.REORDER_TASKS

android.permission.WRITE_SMS

android.permission.SEND_SMS

android.permission.RECEIVE_MMS

android.permission.READ_PHONE_NUMBERS

android.permission.FOREGROUND_SERVICE

android.permission.USE_FULL_SCREEN_INTENT

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.REQUEST_DELETE_PACKAGES

android.permission.GET_ACCOUNTS

android.permission.AUTHENTICATE_ACCOUNTS

android.permission.WRITE_SYNC_SETTINGS

DOC2024.apk

xwfkkzmhtqacdh.scivosxjssu.qbtxybzbwsrxcce.pqfzrwlflkecfsd

xwfkkzmhtqacdh.scivosxjssu.qbtxybzbwsrxcce.bmkswdagjgfvw

xwfkkzmhtqacdh.scivosxjssu.qbtxybzbwsrxcce.msdmixoslhqwmu.fjvnruimdcvtqam

xwfkkzmhtqacdh.scivosxjssu.qbtxybzbwsrxcce.vowyirvimz

xwfkkzmhtqacdh.scivosxjssu.qbtxybzbwsrxcce.msdmixoslhqwmu.zwziztdilzdbume

xwfkkzmhtqacdh.scivosxjssu.qbtxybzbwsrxcce.msdmixoslhqwmu.xvhyyzjtop

xwfkkzmhtqacdh.scivosxjssu.qbtxybzbwsrxcce.zeeepqczlynjd

xwfkkzmhtqacdh.scivosxjssu.qbtxybzbwsrxcce.rygrjawqnan

xynouu.athiuoa.htzkjvb.bojvw.srlreee

xwfkkzmhtqacdh.scivosxjssu.qbtxybzbwsrxcce.xwcmxesok

xynouu.athiuoa.htzkjvb.unkzg.dbjdpp

xynouu.athiuoa.htzkjvb.unkzg.ayann

xynouu.athiuoa.htzkjvb.unkzg.lcwpvtz

xynouu.athiuoa.htzkjvb.unkzg.ldxyjpu

xynouu.athiuoa.htzkjvb.unkzg.nuicbu

xynouu.athiuoa.htzkjvb.unkzg.hstmll

xwfkkzmhtqacdh.scivosxjssu.qbtxybzbwsrxcce.zejafrqmppw$MyReceiver

xwfkkzmhtqacdh.scivosxjssu.qbtxybzbwsrxcce.lajxuwrsjuvduoe

xwfkkzmhtqacdh.scivosxjssu.qbtxybzbwsrxcce.laxtsxenmle

xwfkkzmhtqacdh.scivosxjssu.qbtxybzbwsrxcce.hkhnlgwvnnwadt

xynouu.athiuoa.htzkjvb.oodcv.ywhoii

xynouu.athiuoa.htzkjvb.eroyidub.rivjiobb

androidx.startup.InitializationProvider

net.grandcentrix.tray.provider.TrayContentProvider

Sharing

General

Malware Config

Signatures

File Explorer

DOC2024.apk

xwfkkzmhtqacdh.scivosxjssu.qbtxybzbwsrxcce.pqfzrwlflkecfsd

xwfkkzmhtqacdh.scivosxjssu.qbtxybzbwsrxcce.bmkswdagjgfvw

xwfkkzmhtqacdh.scivosxjssu.qbtxybzbwsrxcce.msdmixoslhqwmu.fjvnruimdcvtqam

xwfkkzmhtqacdh.scivosxjssu.qbtxybzbwsrxcce.vowyirvimz

xwfkkzmhtqacdh.scivosxjssu.qbtxybzbwsrxcce.msdmixoslhqwmu.zwziztdilzdbume

xwfkkzmhtqacdh.scivosxjssu.qbtxybzbwsrxcce.msdmixoslhqwmu.xvhyyzjtop

xwfkkzmhtqacdh.scivosxjssu.qbtxybzbwsrxcce.zeeepqczlynjd

xwfkkzmhtqacdh.scivosxjssu.qbtxybzbwsrxcce.rygrjawqnan

xynouu.athiuoa.htzkjvb.bojvw.srlreee

xwfkkzmhtqacdh.scivosxjssu.qbtxybzbwsrxcce.xwcmxesok

xynouu.athiuoa.htzkjvb.unkzg.dbjdpp

xynouu.athiuoa.htzkjvb.unkzg.ayann

xynouu.athiuoa.htzkjvb.unkzg.lcwpvtz

xynouu.athiuoa.htzkjvb.unkzg.ldxyjpu

xynouu.athiuoa.htzkjvb.unkzg.nuicbu

xynouu.athiuoa.htzkjvb.unkzg.hstmll

xwfkkzmhtqacdh.scivosxjssu.qbtxybzbwsrxcce.zejafrqmppw$MyReceiver

xwfkkzmhtqacdh.scivosxjssu.qbtxybzbwsrxcce.lajxuwrsjuvduoe

xwfkkzmhtqacdh.scivosxjssu.qbtxybzbwsrxcce.laxtsxenmle

xwfkkzmhtqacdh.scivosxjssu.qbtxybzbwsrxcce.hkhnlgwvnnwadt

xynouu.athiuoa.htzkjvb.oodcv.ywhoii

xynouu.athiuoa.htzkjvb.eroyidub.rivjiobb

androidx.startup.InitializationProvider

net.grandcentrix.tray.provider.TrayContentProvider

Android Permissions

DOC2024.apk