General

  • Target

    27673f8ada69fa490edf9b00770befd9e6943a6599023cbbd364f8a92de2e78c.bin

  • Size

    1.3MB

  • MD5

    80145add42cef85a6b24588b7abae624

  • SHA1

    3b66cda495f70f851e352460ce09a4c8d1999b9c

  • SHA256

    27673f8ada69fa490edf9b00770befd9e6943a6599023cbbd364f8a92de2e78c

  • SHA512

    49dbd34d49a76417501ed201034d605b3b293019a918dd4fef5e44e9c5d84dbb73114fb78d9ac57449cbe3e6605a1f62ed37c9ed5d5b6fc556cccc6674296ab9

  • SSDEEP

    24576:YWn7/Ax0FCwrlVi+uqvARvlKYQz4UNFK1EoZ2FN6ZO3Uqa:YUNVi+uqvAR8YpUKtuNDPa

Score
6/10

Malware Config

Signatures

  • Declares services with permission to bind to the system 4 IoCs
  • Requests dangerous framework permissions 2 IoCs

Files

  • 27673f8ada69fa490edf9b00770befd9e6943a6599023cbbd364f8a92de2e78c.bin
    .apk android arch:arm64 arch:arm arch:x86 arch:x64

    kha.prog.mikrotik

    kha.prog.mikrotik.MainActivity


Android Permissions

27673f8ada69fa490edf9b00770befd9e6943a6599023cbbd364f8a92de2e78c.bin

Permissions

android.permission.CHANGE_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.ACCESS_WIFI_STATE

com.android.vending.BILLING

android.permission.FOREGROUND_SERVICE

android.permission.WAKE_LOCK

android.permission.POST_NOTIFICATIONS

android.permission.NEARBY_WIFI_DEVICES