86252698af146c10b8425559815113a6b79c4adfa56273e466235ec497775330[.]bin

General

Target
86252698af146c10b8425559815113a6b79c4adfa56273e466235ec497775330.bin
Size 517KB
Sample240612-2f3ybstape
SHA256 86252698af146c10b8425559815113a6b79c4adfa56273e466235ec497775330
MD5 5b068fe1a003f9a3bd1efb9ec2fe944d
SHA1 7649bf074984e795780117328c36f692298bfd2e
SHA512 c726515e00fd26f80972cfaf381bc128c231766b17845f319cdc4ab3e851fb1350aed0773aac202af3bab80e38ce26a3f701300fe26229dc35f87e402268d65e
SSDEEP 12288:oEnICxcCUXYOBptvrBaGdiO4hHRRYFBMpEhuer21kME/ll2VaTX:oEnjxcCDmphGO4VRyrhXC1kME9l1T
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE

Requests dangerous framework permissions 6 IoCs

description	ioc
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE

File Explorer

86252698af146c10b8425559815113a6b79c4adfa56273e466235ec497775330.bin

.apk 517KB

86252698af146c10b8425559815113a6b79c4adfa56273e466235ec497775330.bin

SHA256 86252698af146c10b8425559815113a6b79c4adfa56273e466235ec497775330
MD5 5b068fe1a003f9a3bd1efb9ec2fe944d
SHA1 7649bf074984e795780117328c36f692298bfd2e
SHA512 c726515e00fd26f80972cfaf381bc128c231766b17845f319cdc4ab3e851fb1350aed0773aac202af3bab80e38ce26a3f701300fe26229dc35f87e402268d65e
SSDEEP 12288:oEnICxcCUXYOBptvrBaGdiO4hHRRYFBMpEhuer21kME/ll2VaTX:oEnjxcCDmphGO4VRyrhXC1kME9l1T
MD5 SHA1 SHA512 SSDEEP

android arch:x64 arch:arm64 arch:x86 arch:arm

com.keepnorth3

Android Permissions

86252698af146c10b8425559815113a6b79c4adfa56273e466235ec497775330.bin

Permissions

android.permission.USE_FINGERPRINT

android.permission.BATTERY_STATS

android.permission.CLEAR_APP_CACHE

android.permission.INSTALL_SHORTCUT

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.INTERNET

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.WAKE_LOCK

android.permission.CALL_PHONE

android.permission.USES_POLICY_FORCE_LOCK

android.permission.VIBRATE

android.permission.REQUEST_COMPANION_RUN_IN_BACKGROUND

android.permission.REQUEST_COMPANION_USE_DATA_IN_BACKGROUND

android.permission.REQUEST_DELETE_PACKAGES

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_SETTINGS

android.permission.REORDER_TASKS

android.permission.READ_PHONE_STATE

86252698af146c10b8425559815113a6b79c4adfa56273e466235ec497775330.bin

com.keepnorth3.p071e

com.keepnorth3.p054f

com.keepnorth3.p035e

com.keepnorth3.p096x

com.keepnorth3.p048b

com.keepnorth3.p016a

com.keepnorth3.p012w

com.keepnorth3.p025w

com.keepnorth3.p046j

com.keepnorth3.p065s

com.keepnorth3.p052a

com.keepnorth3.p030t

com.keepnorth3.p075q

com.keepnorth3.p013c

com.keepnorth3.p051v

com.keepnorth3.p011j

com.keepnorth3.p097w

com.keepnorth3.p065w

com.keepnorth3.p096c

com.keepnorth3.p094i

com.keepnorth3.p027j

com.keepnorth3.p096n

com.keepnorth3.p048z

com.keepnorth3.p045b

com.keepnorth3.p055m

com.keepnorth3.p059v

com.keepnorth3.p082b

com.keepnorth3.p088m

com.keepnorth3.p092u

com.keepnorth3.p024z

Sharing

General

Malware Config

Signatures

File Explorer

86252698af146c10b8425559815113a6b79c4adfa56273e466235ec497775330.bin

com.keepnorth3.p071e

com.keepnorth3.p054f

com.keepnorth3.p035e

com.keepnorth3.p096x

com.keepnorth3.p048b

com.keepnorth3.p016a

com.keepnorth3.p012w

com.keepnorth3.p025w

com.keepnorth3.p046j

com.keepnorth3.p065s

com.keepnorth3.p052a

com.keepnorth3.p030t

com.keepnorth3.p075q

com.keepnorth3.p013c

com.keepnorth3.p051v

com.keepnorth3.p011j

com.keepnorth3.p097w

com.keepnorth3.p065w

com.keepnorth3.p096c

com.keepnorth3.p094i

com.keepnorth3.p027j

com.keepnorth3.p096n

com.keepnorth3.p048z

com.keepnorth3.p045b

com.keepnorth3.p055m

com.keepnorth3.p059v

com.keepnorth3.p082b

com.keepnorth3.p088m

com.keepnorth3.p092u

com.keepnorth3.p024z

Android Permissions

86252698af146c10b8425559815113a6b79c4adfa56273e466235ec497775330.bin