VirusShare_f56079b95e34a175d880524b1b531272

General

Target
VirusShare_f56079b95e34a175d880524b1b531272
Size 186KB
Sample240610-md97asgd53
SHA256 002419b9823810ed04ebb0d3b1c3c8b1e296e0ab0526c384183f1423eab0cf77
MD5 f56079b95e34a175d880524b1b531272
SHA1 2fed6dd974a6a6f26213f4b5d047081bbb8974ae
SHA512 fe8ee07c1a8aa821692c656cb7d83eecd0db5842ba75a78e735a39d99dad9865a646643c7593d34a585d0bd9c276f2a68e5e7c585b65a7baadf1ed796dd57a7f
SSDEEP 3072:TTsXscIe3QLUdRHaZ+b2p3q7Yc1stdOGQRX9SW21JtmwUdsdriJ4rRXEEvqcSekn:TTSKUdR6ZL3q/6oGQRcrgVderLuEvN5G
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Requests dangerous framework permissions 7 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS

File Explorer

VirusShare_f56079b95e34a175d880524b1b531272

.apk 186KB

VirusShare_f56079b95e34a175d880524b1b531272

SHA256 002419b9823810ed04ebb0d3b1c3c8b1e296e0ab0526c384183f1423eab0cf77
MD5 f56079b95e34a175d880524b1b531272
SHA1 2fed6dd974a6a6f26213f4b5d047081bbb8974ae
SHA512 fe8ee07c1a8aa821692c656cb7d83eecd0db5842ba75a78e735a39d99dad9865a646643c7593d34a585d0bd9c276f2a68e5e7c585b65a7baadf1ed796dd57a7f
SSDEEP 3072:TTsXscIe3QLUdRHaZ+b2p3q7Yc1stdOGQRX9SW21JtmwUdsdriJ4rRXEEvqcSekn:TTSKUdR6ZL3q/6oGQRcrgVderLuEvN5G
MD5 SHA1 SHA512 SSDEEP

android

com.gnom.anton

Android Permissions

VirusShare_f56079b95e34a175d880524b1b531272

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WAKE_LOCK

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.CAMERA

android.permission.READ_CONTACTS

android.permission.GET_TASKS

android.permission.WRITE_SETTINGS

VirusShare_f56079b95e34a175d880524b1b531272

com.gnom.anton.mamA

com.gnom.anton.selfClass

com.gnom.anton.Short

com.gnom.anton.brab

com.gnom.anton.rYba

com.gnom.anton.Joba

com.gnom.anton.agruz

com.gnom.anton.cleangog

Sharing

General

Malware Config

Signatures

File Explorer

VirusShare_f56079b95e34a175d880524b1b531272

com.gnom.anton.mamA

com.gnom.anton.selfClass

com.gnom.anton.Short

com.gnom.anton.brab

com.gnom.anton.rYba

com.gnom.anton.Joba

com.gnom.anton.agruz

com.gnom.anton.cleangog

Android Permissions

VirusShare_f56079b95e34a175d880524b1b531272