82b7101fb1b4dd4cae1390c619bbced74677c8b1971ae62f6e063a1d1fba0a43[.]bin

General

Target

82b7101fb1b4dd4cae1390c619bbced74677c8b1971ae62f6e063a1d1fba0a43.bin
Size

294KB
MD5

33b70f3ce0bc2cd325b6ef64a0cc705b
SHA1

a091bcaa083aa373e910b6bf1fea6eeebe546243
SHA256

82b7101fb1b4dd4cae1390c619bbced74677c8b1971ae62f6e063a1d1fba0a43
SHA512

622d8e1720ea7dc31d63efa21a1ed6866859c9b67de13bfe4247533d545d9b63f76883430e880e49244abefa1697df60c706e5759c106b649188bcc08cc37153
SSDEEP

6144:UY9s2Z/ffCgVWw8uPqIt++oepKMbfXl3nzT8/8QqBN0o4yODNfdu:yKz2uDnzKGXlPDtOp1u

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Requests dangerous framework permissions 10 IoCs

description	ioc
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether.	android.permission.PROCESS_OUTGOING_CALLS

Files

82b7101fb1b4dd4cae1390c619bbced74677c8b1971ae62f6e063a1d1fba0a43.bin
.apk android arch:arm

com.bafengcinama.mediaplayer

ui.MainActivity

Activities

ui.MainActivity

android.intent.action.MAIN

ui.AdminActivity

android.intent.action.MAIN

ui.ComposeNoteActivity

android.intent.action.SEND
android.intent.action.SENDTO

Permissions

android.permission.RECEIVE_BOOT_COMPLETED
android.permission.BIND_DEVICE_ADMIN
android.permission.WAKE_LOCK
com.android.alarm.permission.SET_ALARM
android.permission.RECEIVE_SMS
android.permission.READ_SMS
android.permission.SEND_SMS
android.permission.INTERNET
android.permission.READ_PHONE_STATE
android.permission.DEVICE_POWER
android.permission.ACCESS_NETWORK_STATE
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_CONTACTS
android.permission.VIBRATE
android.permission.CALL_PHONE
android.permission.SYSTEM_ALERT_WINDOW
android.permission.PROCESS_OUTGOING_CALLS
android.permission.MODIFY_PHONE_STATE
android.permission.WRITE_APN_SETTINGS
android.permission.CHANGE_WIFI_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_NETWORK_STATE

Receivers

oOO.ooooOOOooooO

android.intent.action.BOOT_COMPLETED
android.intent.action.ACTION_SHUTDOWN
android.intent.action.REBOOT
android.intent.action.USER_PRESENT
android.intent.action.PACKAGE_RESTARTED

oOO.ooOoOOOOooO

android.provider.Telephony.SDMS_DELIVER
android.provider.Telephony.SDMS_RECEIVED

oOO.oOooOOOooOooOo

android.intent.action.CLOSE_SYSTEM_DIALOGS

oOO.oOooOOoooooOOooOo

android.app.action.DEVICE_ADMIN_ENABLED

oOO.oOooOOOooooOo

android.intent.action.MAIN

oOO.ooOOOOoo

android.net.conn.CONNECTIVITY_CHANGE

oOOoO.ooOOOoOOooOoooo

android.intent.action.BOOT_COMPLETED

oOO.ooOOOoOOooOoooo

android.provider.Telephony.SMS_DELIVER
android.provider.Telephony.SMS_RECEIVED

oOO.ooOOOOOooO

android.provider.Telephony.WAP_PUSH_DELIVER

oOoooo.ooOOOoOOooOoooo

android.intent.action.BOOT_COMPLETED
android.intent.action.ACTION_SHUTDOWN
android.intent.action.REBOOT
android.intent.action.PACKAGE_RESTARTED

Services

service.MainService

android.intent.action.MAIN

service.HheadlessNoteSendSer

android.intent.action.RESPOND_VIA_MESSAGE

Android Permissions

82b7101fb1b4dd4cae1390c619bbced74677c8b1971ae62f6e063a1d1fba0a43.bin

Permissions

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.BIND_DEVICE_ADMIN

android.permission.WAKE_LOCK

com.android.alarm.permission.SET_ALARM

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.DEVICE_POWER

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_CONTACTS

android.permission.VIBRATE

android.permission.CALL_PHONE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.PROCESS_OUTGOING_CALLS

android.permission.MODIFY_PHONE_STATE

android.permission.WRITE_APN_SETTINGS

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_NETWORK_STATE

Sharing

General

Malware Config

Signatures

Files

com.bafengcinama.mediaplayer

ui.MainActivity

Activities

ui.MainActivity

ui.AdminActivity

ui.ComposeNoteActivity

Permissions

Receivers

oOO.ooooOOOooooO

oOO.ooOoOOOOooO

oOO.oOooOOOooOooOo

oOO.oOooOOoooooOOooOo

oOO.oOooOOOooooOo

oOO.ooOOOOoo

oOOoO.ooOOOoOOooOoooo

oOO.ooOOOoOOooOoooo

oOO.ooOOOOOooO

oOoooo.ooOOOoOOooOoooo

Services

service.MainService

service.HheadlessNoteSendSer

Android Permissions

82b7101fb1b4dd4cae1390c619bbced74677c8b1971ae62f6e063a1d1fba0a43.bin