56ed5c90b67c4483b0d09ac1b068f7d74cc966b7c73cfe9456cebf7bf11af1a9[.]bin

General

Target
56ed5c90b67c4483b0d09ac1b068f7d74cc966b7c73cfe9456cebf7bf11af1a9.bin
Size 509KB
Sample240623-1yn2fstgrg
SHA256 56ed5c90b67c4483b0d09ac1b068f7d74cc966b7c73cfe9456cebf7bf11af1a9
MD5 64abf3e216bb08871951e9d9c25b861d
SHA1 07c216102a464b51049550730ebabbb4df1de9ba
SHA512 570bfae72f9ad4486d28854dff46263ea6587ad4a49dbad12a8922db9ed5dd6f9a835f2e2bf915e6d76f3a67431865e5be57ba7ded4ca541bf5a4a501050dc3d
SSDEEP 12288:xzvEbc2Pn8SMj2tnsCTg6ABIcMBv0aRislj/h94sSPD3N4e:NEg8nJMjTOABI1MaRiUJiLD3z
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE

Requests dangerous framework permissions 8 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE

File Explorer

56ed5c90b67c4483b0d09ac1b068f7d74cc966b7c73cfe9456cebf7bf11af1a9.bin

.apk 509KB

56ed5c90b67c4483b0d09ac1b068f7d74cc966b7c73cfe9456cebf7bf11af1a9.bin

SHA256 56ed5c90b67c4483b0d09ac1b068f7d74cc966b7c73cfe9456cebf7bf11af1a9
MD5 64abf3e216bb08871951e9d9c25b861d
SHA1 07c216102a464b51049550730ebabbb4df1de9ba
SHA512 570bfae72f9ad4486d28854dff46263ea6587ad4a49dbad12a8922db9ed5dd6f9a835f2e2bf915e6d76f3a67431865e5be57ba7ded4ca541bf5a4a501050dc3d
SSDEEP 12288:xzvEbc2Pn8SMj2tnsCTg6ABIcMBv0aRislj/h94sSPD3N4e:NEg8nJMjTOABI1MaRiUJiLD3z
MD5 SHA1 SHA512 SSDEEP

android arch:arm64 arch:arm arch:x86 arch:x64

com.roomis21

Android Permissions

56ed5c90b67c4483b0d09ac1b068f7d74cc966b7c73cfe9456cebf7bf11af1a9.bin

Permissions

android.permission.ADD_VOICEMAIL

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.INTERNET

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.WAKE_LOCK

android.permission.CALL_PHONE

android.permission.USES_POLICY_FORCE_LOCK

android.permission.VIBRATE

android.permission.REQUEST_COMPANION_RUN_IN_BACKGROUND

android.permission.REQUEST_COMPANION_USE_DATA_IN_BACKGROUND

android.permission.REQUEST_DELETE_PACKAGES

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_SETTINGS

android.permission.REORDER_TASKS

android.permission.QUERY_ALL_PACKAGES

android.permission.READ_PHONE_STATE

56ed5c90b67c4483b0d09ac1b068f7d74cc966b7c73cfe9456cebf7bf11af1a9.bin

com.roomis21.p082q

com.roomis21.p069c

com.roomis21.p065x

com.roomis21.p080b

com.roomis21.p090o

com.roomis21.p026s

com.roomis21.p078a

com.roomis21.p049p

com.roomis21.p095l

com.roomis21.p083i

com.roomis21.p080e

com.roomis21.p025q

com.roomis21.p018h

com.roomis21.p035b

com.roomis21.p083h

com.roomis21.p014p

com.roomis21.p086z

com.roomis21.p050d

com.roomis21.p037o

com.roomis21.p099w

com.roomis21.p086l

com.roomis21.p094l

com.roomis21.p083x

com.roomis21.p074v

com.roomis21.p013z

com.roomis21.p083l

com.roomis21.p056e

com.roomis21.p036u

com.roomis21.p030p

com.roomis21.p064h

com.roomis21.p086x

Sharing

General

Malware Config

Signatures

File Explorer

56ed5c90b67c4483b0d09ac1b068f7d74cc966b7c73cfe9456cebf7bf11af1a9.bin

com.roomis21.p082q

com.roomis21.p069c

com.roomis21.p065x

com.roomis21.p080b

com.roomis21.p090o

com.roomis21.p026s

com.roomis21.p078a

com.roomis21.p049p

com.roomis21.p095l

com.roomis21.p083i

com.roomis21.p080e

com.roomis21.p025q

com.roomis21.p018h

com.roomis21.p035b

com.roomis21.p083h

com.roomis21.p014p

com.roomis21.p086z

com.roomis21.p050d

com.roomis21.p037o

com.roomis21.p099w

com.roomis21.p086l

com.roomis21.p094l

com.roomis21.p083x

com.roomis21.p074v

com.roomis21.p013z

com.roomis21.p083l

com.roomis21.p056e

com.roomis21.p036u

com.roomis21.p030p

com.roomis21.p064h

com.roomis21.p086x

Android Permissions

56ed5c90b67c4483b0d09ac1b068f7d74cc966b7c73cfe9456cebf7bf11af1a9.bin