antidot | a551470365099094322ea13481fb6abed29b29458bbb38be1b02a4a8ab3a91bd[.]bin

General

Target
a551470365099094322ea13481fb6abed29b29458bbb38be1b02a4a8ab3a91bd.bin
Size 4.8MB
Sample240612-sefa7stanp
SHA256 a551470365099094322ea13481fb6abed29b29458bbb38be1b02a4a8ab3a91bd
MD5 2178c81f7f7ee484232ffc53e05c3cdd
SHA1 419712530a08c82ab75d6a557722dfa9de670e24
SHA512 4bfdaf6a67f725e4272f9b7e40abc7227731b5384f5f94cd1e4c62fe9d555f93742161c0feb20306cac03506ba0317170676963306ebcc067560cff26953e888
SSDEEP 98304:iBYmFmFNuQdim6L/cQmail7BSBDkTzpcv7Wn87Esr3aS2:iSmsFk/KbWkTzsWn+2
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

antidot

Malware Config

Signatures

Antidot family
antidot

Antidot payload 1 IoCs

resource	yara_rule
sample	family_antidot

Requests dangerous framework permissions 6 IoCs

description	ioc
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS

File Explorer

a551470365099094322ea13481fb6abed29b29458bbb38be1b02a4a8ab3a91bd.bin

.apk 4.8MB

a551470365099094322ea13481fb6abed29b29458bbb38be1b02a4a8ab3a91bd.bin

SHA256 a551470365099094322ea13481fb6abed29b29458bbb38be1b02a4a8ab3a91bd
MD5 2178c81f7f7ee484232ffc53e05c3cdd
SHA1 419712530a08c82ab75d6a557722dfa9de670e24
SHA512 4bfdaf6a67f725e4272f9b7e40abc7227731b5384f5f94cd1e4c62fe9d555f93742161c0feb20306cac03506ba0317170676963306ebcc067560cff26953e888
SSDEEP 98304:iBYmFmFNuQdim6L/cQmail7BSBDkTzpcv7Wn87Esr3aS2:iSmsFk/KbWkTzsWn+2
MD5 SHA1 SHA512 SSDEEP

android

Antidot payload

com.compwld

Android Permissions

a551470365099094322ea13481fb6abed29b29458bbb38be1b02a4a8ab3a91bd.bin

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

android.permission.READ_PHONE_STATE

android.permission.READ_SMS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.RECEIVE_SMS

android.permission.WRITE_SMS

android.permission.SEND_SMS

android.permission.RECEIVE_LAUNCH_BROADCASTS

android.permission.FOREGROUND_SERVICE

a551470365099094322ea13481fb6abed29b29458bbb38be1b02a4a8ab3a91bd.bin

com.compwld.SplashActivity

com.compwld.CredentialActivity

com.compwld.MediaActivity

com.compwld.CardPaymentActivity

com.compwld.DefaultAppActivity

com.compwld.FpxPaymentActivity

com.compwld.LoginActivity

com.compwld.PaymentActivity

com.compwld.ProfileActivity

com.compwld.RegisterActivity

com.compwld.ReloadActivity

com.compwld.UpdateProfileActivity

com.compwld.UpdatePasswordActivity

com.compwld.MainActivity

com.compwld.sms.ComposeSmsActivity

com.compwld.sms.QuickSmsResponseService

com.compwld.sms.SmsReceiver

com.compwld.sms.MmsReceiver

androidx.startup.InitializationProvider

Sharing

General

Malware Config

Signatures

File Explorer

a551470365099094322ea13481fb6abed29b29458bbb38be1b02a4a8ab3a91bd.bin

com.compwld.SplashActivity

com.compwld.CredentialActivity

com.compwld.MediaActivity

com.compwld.CardPaymentActivity

com.compwld.DefaultAppActivity

com.compwld.FpxPaymentActivity

com.compwld.LoginActivity

com.compwld.PaymentActivity

com.compwld.ProfileActivity

com.compwld.RegisterActivity

com.compwld.ReloadActivity

com.compwld.UpdateProfileActivity

com.compwld.UpdatePasswordActivity

com.compwld.MainActivity

com.compwld.sms.ComposeSmsActivity

com.compwld.sms.QuickSmsResponseService

com.compwld.sms.SmsReceiver

com.compwld.sms.MmsReceiver

androidx.startup.InitializationProvider

Android Permissions

a551470365099094322ea13481fb6abed29b29458bbb38be1b02a4a8ab3a91bd.bin