5626e792407cef19b980bbd2328232a4da9a6ea03bedbd3087e62fa23c746fd7[.]bin

General

Target
5626e792407cef19b980bbd2328232a4da9a6ea03bedbd3087e62fa23c746fd7.bin
Size 436KB
Sample240613-c2ckts1eqg
SHA256 5626e792407cef19b980bbd2328232a4da9a6ea03bedbd3087e62fa23c746fd7
MD5 0a3cb727ec748c06f0b549ca3f4cb920
SHA1 e61cfed12f969fdb043c7fc5e44ea73bfd323f58
SHA512 8e3738688f935e277012acd25ee666dc92599f9da5f9e018917fccd697efac3593456377e2b5f9428d45e791d9142250af0523c7ac840c717866a31b36762448
SSDEEP 12288:IAcWyysVeDaNju9+HkAbtT4q3QOvVlOtT:Yys7udAbHt8tT
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE

Requests dangerous framework permissions 11 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an application a broad access to external storage in scoped storage.	android.permission.MANAGE_EXTERNAL_STORAGE

File Explorer

5626e792407cef19b980bbd2328232a4da9a6ea03bedbd3087e62fa23c746fd7.bin

.apk 436KB

5626e792407cef19b980bbd2328232a4da9a6ea03bedbd3087e62fa23c746fd7.bin

SHA256 5626e792407cef19b980bbd2328232a4da9a6ea03bedbd3087e62fa23c746fd7
MD5 0a3cb727ec748c06f0b549ca3f4cb920
SHA1 e61cfed12f969fdb043c7fc5e44ea73bfd323f58
SHA512 8e3738688f935e277012acd25ee666dc92599f9da5f9e018917fccd697efac3593456377e2b5f9428d45e791d9142250af0523c7ac840c717866a31b36762448
SSDEEP 12288:IAcWyysVeDaNju9+HkAbtT4q3QOvVlOtT:Yys7udAbHt8tT
MD5 SHA1 SHA512 SSDEEP

android arch:arm

lgolxye.xmedxeqxg.ddmwdv

Android Permissions

5626e792407cef19b980bbd2328232a4da9a6ea03bedbd3087e62fa23c746fd7.bin

Permissions

android.qnwkcr.hmpixnp.wlgbbhcv

android.ygvnxs.uoqhie.dtikvpac

android.lqszwv.dhnkfpic.rxzpd

android.pfdaxxa.tcjlz.mdev

android.qxwofi.cgdh.uaxj

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.VIBRATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WAKE_LOCK

android.permission.INTERNET

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_CONTACTS

android.permission.READ_PHONE_STATE

android.permission.GET_ACCOUNTS

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.FOREGROUND_SERVICE

android.permission.POST_NOTIFICATIONS

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.MANAGE_EXTERNAL_STORAGE

5626e792407cef19b980bbd2328232a4da9a6ea03bedbd3087e62fa23c746fd7.bin

fmm7.xulfdm

fmm7.fd

fmm7.cyinm

fmm7.yc

fmm7.frt

fmm7.strb

fmm7.tpzxrfi

fmm7.f

fmm7.g

fmm7.h

fmm7.xikf

fmm7.czs

fmm7.tbbvt

fmm7.a

fmm7.b

fmm7.q

fmm7.d

fmm7.e

fmm7.s

fmm7.z

fmm7.i

fmm7.kcmkai

fmm7.xynzvah

fmm7.yfhvrua

fmm7.ayvks

Sharing

General

Malware Config

Signatures

File Explorer

5626e792407cef19b980bbd2328232a4da9a6ea03bedbd3087e62fa23c746fd7.bin

fmm7.xulfdm

fmm7.fd

fmm7.cyinm

fmm7.yc

fmm7.frt

fmm7.strb

fmm7.tpzxrfi

fmm7.f

fmm7.g

fmm7.h

fmm7.xikf

fmm7.czs

fmm7.tbbvt

fmm7.a

fmm7.b

fmm7.q

fmm7.d

fmm7.e

fmm7.s

fmm7.z

fmm7.i

fmm7.kcmkai

fmm7.xynzvah

fmm7.yfhvrua

fmm7.ayvks

Android Permissions

5626e792407cef19b980bbd2328232a4da9a6ea03bedbd3087e62fa23c746fd7.bin