ef39fd17c1ac9a23f1d12caeff119f7b2d42d019287c2e3e4df5eabdc9a06caf[.]bin

General

Target
ef39fd17c1ac9a23f1d12caeff119f7b2d42d019287c2e3e4df5eabdc9a06caf.bin
Size 436KB
Sample240613-blv7kaydrc
SHA256 ef39fd17c1ac9a23f1d12caeff119f7b2d42d019287c2e3e4df5eabdc9a06caf
MD5 850e4f84fd5f7ce6fd08c685d332610a
SHA1 1bd076e7cef8a337ffca98ee02a591197d6d1e39
SHA512 a408950d8135662feaeecff659002fdb0b18cacb7003ae9a9532353e84f4dd5c938873f613b285bcf8f5541e824420a97b79e15f05d50d75fd756dd05eefde77
SSDEEP 6144:GIIaQYiSWTql6+iK6edDusVeDaOJ3CBtKXyFju92/HAjjcJ1ttT6zziXXjhVmuP8:pAcWyysVeDaNju9+HkAbtT4qELHssQnS
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE

Requests dangerous framework permissions 11 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an application a broad access to external storage in scoped storage.	android.permission.MANAGE_EXTERNAL_STORAGE

File Explorer

ef39fd17c1ac9a23f1d12caeff119f7b2d42d019287c2e3e4df5eabdc9a06caf.bin

.apk 436KB

ef39fd17c1ac9a23f1d12caeff119f7b2d42d019287c2e3e4df5eabdc9a06caf.bin

SHA256 ef39fd17c1ac9a23f1d12caeff119f7b2d42d019287c2e3e4df5eabdc9a06caf
MD5 850e4f84fd5f7ce6fd08c685d332610a
SHA1 1bd076e7cef8a337ffca98ee02a591197d6d1e39
SHA512 a408950d8135662feaeecff659002fdb0b18cacb7003ae9a9532353e84f4dd5c938873f613b285bcf8f5541e824420a97b79e15f05d50d75fd756dd05eefde77
SSDEEP 6144:GIIaQYiSWTql6+iK6edDusVeDaOJ3CBtKXyFju92/HAjjcJ1ttT6zziXXjhVmuP8:pAcWyysVeDaNju9+HkAbtT4qELHssQnS
MD5 SHA1 SHA512 SSDEEP

android arch:arm

hknmbqk.ceplfqiis.cpvxwx

Android Permissions

ef39fd17c1ac9a23f1d12caeff119f7b2d42d019287c2e3e4df5eabdc9a06caf.bin

Permissions

android.ytotxky.hteutmv.njiznmvz

android.knhsoobh.fnwozz.nuuclcvg

android.athucjxg.djkhdxgw.dvmbf

android.pkgwf.xiqjq.msxa

android.loatwvj.fbvz.uuyf

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.VIBRATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WAKE_LOCK

android.permission.INTERNET

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_CONTACTS

android.permission.READ_PHONE_STATE

android.permission.GET_ACCOUNTS

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.FOREGROUND_SERVICE

android.permission.POST_NOTIFICATIONS

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.MANAGE_EXTERNAL_STORAGE

ef39fd17c1ac9a23f1d12caeff119f7b2d42d019287c2e3e4df5eabdc9a06caf.bin

pfj7.sxrhnk

pfj7.fd

pfj7.kcios

pfj7.ay

pfj7.obd

pfj7.gjvi

pfj7.rutuaph

pfj7.f

pfj7.g

pfj7.h

pfj7.evuo

pfj7.tgy

pfj7.cbpws

pfj7.a

pfj7.b

pfj7.q

pfj7.d

pfj7.e

pfj7.s

pfj7.z

pfj7.i

pfj7.bmcqod

pfj7.qduzxmx

pfj7.hghiaww

pfj7.acpmj

Sharing

General

Malware Config

Signatures

File Explorer

ef39fd17c1ac9a23f1d12caeff119f7b2d42d019287c2e3e4df5eabdc9a06caf.bin

pfj7.sxrhnk

pfj7.fd

pfj7.kcios

pfj7.ay

pfj7.obd

pfj7.gjvi

pfj7.rutuaph

pfj7.f

pfj7.g

pfj7.h

pfj7.evuo

pfj7.tgy

pfj7.cbpws

pfj7.a

pfj7.b

pfj7.q

pfj7.d

pfj7.e

pfj7.s

pfj7.z

pfj7.i

pfj7.bmcqod

pfj7.qduzxmx

pfj7.hghiaww

pfj7.acpmj

Android Permissions

ef39fd17c1ac9a23f1d12caeff119f7b2d42d019287c2e3e4df5eabdc9a06caf.bin