786c539a57b1e9e33ce06da7092ef6cba3d0779601506e7ad95287e9516f0a0f[.]bin

General

Target
786c539a57b1e9e33ce06da7092ef6cba3d0779601506e7ad95287e9516f0a0f.bin
Size 509KB
Sample240623-225n2szhkj
SHA256 786c539a57b1e9e33ce06da7092ef6cba3d0779601506e7ad95287e9516f0a0f
MD5 5967e8d04d673cce820499a6ca7bc1b5
SHA1 422c512f4111db2ee5f47e57dddcf82edbe44046
SHA512 150ce8fac65e5cd3905ca2fe81215fefc809cf9293e49ad9aeafae0a58f40f819ee4e280739124c9b0c943709fba1c7ab3e5e98c09540a4249dabc24e2f0dbf4
SSDEEP 12288:hk5CLWN9XNh85XHNFWlbNf/HfzH3KD4Oces69oA0NimlhWrJ:3Li9d2ElbNf3z4c6OicA
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE

Requests dangerous framework permissions 8 IoCs

description	ioc
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE

File Explorer

786c539a57b1e9e33ce06da7092ef6cba3d0779601506e7ad95287e9516f0a0f.bin

.apk 509KB

786c539a57b1e9e33ce06da7092ef6cba3d0779601506e7ad95287e9516f0a0f.bin

SHA256 786c539a57b1e9e33ce06da7092ef6cba3d0779601506e7ad95287e9516f0a0f
MD5 5967e8d04d673cce820499a6ca7bc1b5
SHA1 422c512f4111db2ee5f47e57dddcf82edbe44046
SHA512 150ce8fac65e5cd3905ca2fe81215fefc809cf9293e49ad9aeafae0a58f40f819ee4e280739124c9b0c943709fba1c7ab3e5e98c09540a4249dabc24e2f0dbf4
SSDEEP 12288:hk5CLWN9XNh85XHNFWlbNf/HfzH3KD4Oces69oA0NimlhWrJ:3Li9d2ElbNf3z4c6OicA
MD5 SHA1 SHA512 SSDEEP

android arch:arm64 arch:arm arch:x86 arch:x64

com.wondersaw0

Android Permissions

786c539a57b1e9e33ce06da7092ef6cba3d0779601506e7ad95287e9516f0a0f.bin

Permissions

android.permission.CLEAR_APP_CACHE

android.permission.BATTERY_STATS

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.INTERNET

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.WAKE_LOCK

android.permission.CALL_PHONE

android.permission.USES_POLICY_FORCE_LOCK

android.permission.VIBRATE

android.permission.REQUEST_COMPANION_RUN_IN_BACKGROUND

android.permission.REQUEST_COMPANION_USE_DATA_IN_BACKGROUND

android.permission.REQUEST_DELETE_PACKAGES

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_SETTINGS

android.permission.REORDER_TASKS

android.permission.QUERY_ALL_PACKAGES

android.permission.READ_PHONE_STATE

786c539a57b1e9e33ce06da7092ef6cba3d0779601506e7ad95287e9516f0a0f.bin

com.wondersaw0.p056z

com.wondersaw0.p089m

com.wondersaw0.p053z

com.wondersaw0.p083g

com.wondersaw0.p032k

com.wondersaw0.p089n

com.wondersaw0.p035k

com.wondersaw0.p057z

com.wondersaw0.p037m

com.wondersaw0.p022t

com.wondersaw0.p094j

com.wondersaw0.p078o

com.wondersaw0.p028z

com.wondersaw0.p056v

com.wondersaw0.p027u

com.wondersaw0.p038o

com.wondersaw0.p073b

com.wondersaw0.p029n

com.wondersaw0.p046v

com.wondersaw0.p032r

com.wondersaw0.p015l

com.wondersaw0.p078w

com.wondersaw0.p078f

com.wondersaw0.p099s

com.wondersaw0.p031c

com.wondersaw0.p015u

com.wondersaw0.p027d

com.wondersaw0.p096g

com.wondersaw0.p036u

com.wondersaw0.p067p

com.wondersaw0.p086v

Sharing

General

Malware Config

Signatures

File Explorer

786c539a57b1e9e33ce06da7092ef6cba3d0779601506e7ad95287e9516f0a0f.bin

com.wondersaw0.p056z

com.wondersaw0.p089m

com.wondersaw0.p053z

com.wondersaw0.p083g

com.wondersaw0.p032k

com.wondersaw0.p089n

com.wondersaw0.p035k

com.wondersaw0.p057z

com.wondersaw0.p037m

com.wondersaw0.p022t

com.wondersaw0.p094j

com.wondersaw0.p078o

com.wondersaw0.p028z

com.wondersaw0.p056v

com.wondersaw0.p027u

com.wondersaw0.p038o

com.wondersaw0.p073b

com.wondersaw0.p029n

com.wondersaw0.p046v

com.wondersaw0.p032r

com.wondersaw0.p015l

com.wondersaw0.p078w

com.wondersaw0.p078f

com.wondersaw0.p099s

com.wondersaw0.p031c

com.wondersaw0.p015u

com.wondersaw0.p027d

com.wondersaw0.p096g

com.wondersaw0.p036u

com.wondersaw0.p067p

com.wondersaw0.p086v

Android Permissions

786c539a57b1e9e33ce06da7092ef6cba3d0779601506e7ad95287e9516f0a0f.bin