VirusShare_82374d1d167ae09b3719ac7bde7086e8

General

Target
VirusShare_82374d1d167ae09b3719ac7bde7086e8
Size 183KB
Sample240610-mc88lsgd42
SHA256 49da23e9e35c7f6e7efbd351ef7aef10cc3830572a02e2dd5db2cba1ee669206
MD5 82374d1d167ae09b3719ac7bde7086e8
SHA1 cd8fd66101036d84b3a47d0bdca2d15bc90929ad
SHA512 f6ccec6ceb343c4979455a923d4b92c524c9befc32707fe5b9c871d1d4d5b5d5d4faede5709efcc7c1a4f7eab966e896cbe74491caaf431af3cabb54a2b32f71
SSDEEP 3072:t87hGdgvs7aBX79DCuF9hDTiWSqEERHORETkeI5X9SibUqsdm+J20fAK+VpkTCr/:y7sdyHBX75CuF9tTiW/HORE65cyUqePk
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Requests dangerous framework permissions 7 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS

File Explorer

VirusShare_82374d1d167ae09b3719ac7bde7086e8

.apk 183KB

VirusShare_82374d1d167ae09b3719ac7bde7086e8

SHA256 49da23e9e35c7f6e7efbd351ef7aef10cc3830572a02e2dd5db2cba1ee669206
MD5 82374d1d167ae09b3719ac7bde7086e8
SHA1 cd8fd66101036d84b3a47d0bdca2d15bc90929ad
SHA512 f6ccec6ceb343c4979455a923d4b92c524c9befc32707fe5b9c871d1d4d5b5d5d4faede5709efcc7c1a4f7eab966e896cbe74491caaf431af3cabb54a2b32f71
SSDEEP 3072:t87hGdgvs7aBX79DCuF9hDTiWSqEERHORETkeI5X9SibUqsdm+J20fAK+VpkTCr/:y7sdyHBX75CuF9tTiW/HORE65cyUqePk
MD5 SHA1 SHA512 SSDEEP

android

com.ivan.dorn

Android Permissions

VirusShare_82374d1d167ae09b3719ac7bde7086e8

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WAKE_LOCK

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.CAMERA

android.permission.READ_CONTACTS

android.permission.GET_TASKS

android.permission.WRITE_SETTINGS

VirusShare_82374d1d167ae09b3719ac7bde7086e8

com.ivan.dorn.amen

com.ivan.dorn.selfa

com.ivan.dorn.toki

com.ivan.dorn.qcp

com.ivan.dorn.xrb

com.ivan.dorn.vha

com.ivan.dorn.visu

com.ivan.dorn.gods

Sharing

General

Malware Config

Signatures

File Explorer

VirusShare_82374d1d167ae09b3719ac7bde7086e8

com.ivan.dorn.amen

com.ivan.dorn.selfa

com.ivan.dorn.toki

com.ivan.dorn.qcp

com.ivan.dorn.xrb

com.ivan.dorn.vha

com.ivan.dorn.visu

com.ivan.dorn.gods

Android Permissions

VirusShare_82374d1d167ae09b3719ac7bde7086e8