6597f606ee49ac3d26ce5370f8944bf238aa56c368b82dab99f080abb6832fc1[.]bin

General

Target
6597f606ee49ac3d26ce5370f8944bf238aa56c368b82dab99f080abb6832fc1.bin
Size 509KB
Sample240624-swee8ssflk
SHA256 6597f606ee49ac3d26ce5370f8944bf238aa56c368b82dab99f080abb6832fc1
MD5 b871012e4d3615db1c087d402902ff63
SHA1 845f9efb4619384608e2a9b7166cd401b2e4f06e
SHA512 55c99f30b5559d0dd56e2e492f5f685110f907420245c2c429699fc9dab4453e9e36369ed9040dd4c68f8926c9da489f1357cb53a03d11b74ec850253f32887d
SSDEEP 12288:x0LcEAthBsDxnHR8OKz0/4EWcGx3G/EA9jf/nf:xvEAthBIdGx2/EA9r/nf
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE

Requests dangerous framework permissions 6 IoCs

description	ioc
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE

File Explorer

6597f606ee49ac3d26ce5370f8944bf238aa56c368b82dab99f080abb6832fc1.bin

.apk 509KB

6597f606ee49ac3d26ce5370f8944bf238aa56c368b82dab99f080abb6832fc1.bin

SHA256 6597f606ee49ac3d26ce5370f8944bf238aa56c368b82dab99f080abb6832fc1
MD5 b871012e4d3615db1c087d402902ff63
SHA1 845f9efb4619384608e2a9b7166cd401b2e4f06e
SHA512 55c99f30b5559d0dd56e2e492f5f685110f907420245c2c429699fc9dab4453e9e36369ed9040dd4c68f8926c9da489f1357cb53a03d11b74ec850253f32887d
SSDEEP 12288:x0LcEAthBsDxnHR8OKz0/4EWcGx3G/EA9jf/nf:xvEAthBIdGx2/EA9r/nf
MD5 SHA1 SHA512 SSDEEP

android arch:arm64 arch:arm arch:x86 arch:x64

com.townrest62

Android Permissions

6597f606ee49ac3d26ce5370f8944bf238aa56c368b82dab99f080abb6832fc1.bin

Permissions

android.permission.INSTALL_SHORTCUT

android.permission.GET_PACKAGE_SIZE

android.permission.USE_FINGERPRINT

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.INTERNET

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.WAKE_LOCK

android.permission.CALL_PHONE

android.permission.USES_POLICY_FORCE_LOCK

android.permission.VIBRATE

android.permission.REQUEST_COMPANION_RUN_IN_BACKGROUND

android.permission.REQUEST_COMPANION_USE_DATA_IN_BACKGROUND

android.permission.REQUEST_DELETE_PACKAGES

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_SETTINGS

android.permission.REORDER_TASKS

android.permission.QUERY_ALL_PACKAGES

android.permission.READ_PHONE_STATE

6597f606ee49ac3d26ce5370f8944bf238aa56c368b82dab99f080abb6832fc1.bin

com.townrest62.p035y

com.townrest62.p075v

com.townrest62.p079n

com.townrest62.p022c

com.townrest62.p029v

com.townrest62.p029h

com.townrest62.p016a

com.townrest62.p017q

com.townrest62.p082s

com.townrest62.p074d

com.townrest62.p070m

com.townrest62.p065z

com.townrest62.p071a

com.townrest62.p048z

com.townrest62.p015p

com.townrest62.p042y

com.townrest62.p019z

com.townrest62.p051m

com.townrest62.p012d

com.townrest62.p021p

com.townrest62.p094l

com.townrest62.p031a

com.townrest62.p097v

com.townrest62.p019h

com.townrest62.p094n

com.townrest62.p044q

com.townrest62.p020s

com.townrest62.p039s

com.townrest62.p028v

com.townrest62.p010y

com.townrest62.p089d

Sharing

General

Malware Config

Signatures

File Explorer

6597f606ee49ac3d26ce5370f8944bf238aa56c368b82dab99f080abb6832fc1.bin

com.townrest62.p035y

com.townrest62.p075v

com.townrest62.p079n

com.townrest62.p022c

com.townrest62.p029v

com.townrest62.p029h

com.townrest62.p016a

com.townrest62.p017q

com.townrest62.p082s

com.townrest62.p074d

com.townrest62.p070m

com.townrest62.p065z

com.townrest62.p071a

com.townrest62.p048z

com.townrest62.p015p

com.townrest62.p042y

com.townrest62.p019z

com.townrest62.p051m

com.townrest62.p012d

com.townrest62.p021p

com.townrest62.p094l

com.townrest62.p031a

com.townrest62.p097v

com.townrest62.p019h

com.townrest62.p094n

com.townrest62.p044q

com.townrest62.p020s

com.townrest62.p039s

com.townrest62.p028v

com.townrest62.p010y

com.townrest62.p089d

Android Permissions

6597f606ee49ac3d26ce5370f8944bf238aa56c368b82dab99f080abb6832fc1.bin