61cf6fcf001c00522bfb216d5c2066b007bce5ea06fee0d169011a8a03d085ed[.]bin

General

Target
61cf6fcf001c00522bfb216d5c2066b007bce5ea06fee0d169011a8a03d085ed.bin
Size 509KB
Sample240624-1wsxmaxcjp
SHA256 61cf6fcf001c00522bfb216d5c2066b007bce5ea06fee0d169011a8a03d085ed
MD5 d26e25c14234512b3b950780001514ce
SHA1 acda37317a824f40f51436587ec395ac302f80fa
SHA512 5e78f4d29c370bcd836a9fa2d9c5dee6a50c8b2d20cb3963174acd5d32d5b337e4ac4caaf211b98bbaba36ba23ddc850efac3decd4c9acc09f903315ba3a485c
SSDEEP 12288:iB9L5DLVRqRpViMv+P7gSSoTqjUL62Vf3GCRuDIflFRnVrT1XZsYpiWWg:4lDLLC7QsUTIIVf2ComlFRnN1XjIg
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE

Requests dangerous framework permissions 7 IoCs

description	ioc
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE

File Explorer

61cf6fcf001c00522bfb216d5c2066b007bce5ea06fee0d169011a8a03d085ed.bin

.apk 509KB

61cf6fcf001c00522bfb216d5c2066b007bce5ea06fee0d169011a8a03d085ed.bin

SHA256 61cf6fcf001c00522bfb216d5c2066b007bce5ea06fee0d169011a8a03d085ed
MD5 d26e25c14234512b3b950780001514ce
SHA1 acda37317a824f40f51436587ec395ac302f80fa
SHA512 5e78f4d29c370bcd836a9fa2d9c5dee6a50c8b2d20cb3963174acd5d32d5b337e4ac4caaf211b98bbaba36ba23ddc850efac3decd4c9acc09f903315ba3a485c
SSDEEP 12288:iB9L5DLVRqRpViMv+P7gSSoTqjUL62Vf3GCRuDIflFRnVrT1XZsYpiWWg:4lDLLC7QsUTIIVf2ComlFRnN1XjIg
MD5 SHA1 SHA512 SSDEEP

android arch:arm64 arch:arm arch:x86 arch:x64

com.nightthinkx

Android Permissions

61cf6fcf001c00522bfb216d5c2066b007bce5ea06fee0d169011a8a03d085ed.bin

Permissions

android.permission.ADD_VOICEMAIL

android.permission.USE_FINGERPRINT

android.permission.INSTALL_SHORTCUT

android.permission.GET_PACKAGE_SIZE

android.permission.READ_EXTERNAL_STORAGE

android.permission.CLEAR_APP_CACHE

android.permission.BATTERY_STATS

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.INTERNET

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.WAKE_LOCK

android.permission.CALL_PHONE

android.permission.USES_POLICY_FORCE_LOCK

android.permission.VIBRATE

android.permission.REQUEST_COMPANION_RUN_IN_BACKGROUND

android.permission.REQUEST_COMPANION_USE_DATA_IN_BACKGROUND

android.permission.REQUEST_DELETE_PACKAGES

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_SETTINGS

android.permission.REORDER_TASKS

android.permission.QUERY_ALL_PACKAGES

android.permission.READ_PHONE_STATE

61cf6fcf001c00522bfb216d5c2066b007bce5ea06fee0d169011a8a03d085ed.bin

com.nightthinkx.p017h

com.nightthinkx.p075u

com.nightthinkx.p070c

com.nightthinkx.p069n

com.nightthinkx.p092b

com.nightthinkx.p035u

com.nightthinkx.p030s

com.nightthinkx.p030w

com.nightthinkx.p088s

com.nightthinkx.p052t

com.nightthinkx.p081f

com.nightthinkx.p045j

com.nightthinkx.p070r

com.nightthinkx.p096y

com.nightthinkx.p028j

com.nightthinkx.p048w

com.nightthinkx.p051j

com.nightthinkx.p033t

com.nightthinkx.p098u

com.nightthinkx.p058z

com.nightthinkx.p043m

com.nightthinkx.p088q

com.nightthinkx.p016y

com.nightthinkx.p036i

com.nightthinkx.p022p

com.nightthinkx.p071n

com.nightthinkx.p084s

com.nightthinkx.p015b

com.nightthinkx.p049b

Sharing

General

Malware Config

Signatures

File Explorer

61cf6fcf001c00522bfb216d5c2066b007bce5ea06fee0d169011a8a03d085ed.bin

com.nightthinkx.p017h

com.nightthinkx.p075u

com.nightthinkx.p070c

com.nightthinkx.p069n

com.nightthinkx.p092b

com.nightthinkx.p035u

com.nightthinkx.p030s

com.nightthinkx.p030w

com.nightthinkx.p088s

com.nightthinkx.p052t

com.nightthinkx.p081f

com.nightthinkx.p045j

com.nightthinkx.p070r

com.nightthinkx.p096y

com.nightthinkx.p028j

com.nightthinkx.p048w

com.nightthinkx.p051j

com.nightthinkx.p033t

com.nightthinkx.p098u

com.nightthinkx.p058z

com.nightthinkx.p043m

com.nightthinkx.p088q

com.nightthinkx.p016y

com.nightthinkx.p036i

com.nightthinkx.p022p

com.nightthinkx.p071n

com.nightthinkx.p084s

com.nightthinkx.p015b

com.nightthinkx.p049b

Android Permissions

61cf6fcf001c00522bfb216d5c2066b007bce5ea06fee0d169011a8a03d085ed.bin