d2b88c8a3338fbce930eebf2efaaa0df4672143ee6bb2fbc55bf17105f5a3756.bin
- SHA256 d2b88c8a3338fbce930eebf2efaaa0df4672143ee6bb2fbc55bf17105f5a3756
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
WhatsApp.apk
Resource
android-x86-arm-20240624-en
android-9-x86
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
WhatsApp.apk
Resource
android-x64-20240624-en
android-10-x64
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
WhatsApp.apk
Resource
android-x64-arm64-20240624-en
android-11-x64
2 signatures
150 seconds
Behavioral task
behavioral4
Sample
vk_dex.apk
Resource
android-x86-arm-20240624-en
android-9-x86
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
vk_dex.apk
Resource
android-x64-20240624-en
android-10-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
vk_dex.apk
Resource
android-x64-arm64-20240624-en
android-11-x64
0 signatures
150 seconds
General
- Target d2b88c8a3338fbce930eebf2efaaa0df4672143ee6bb2fbc55bf17105f5a3756.bin
- Size 3.8MB
- Sample240625-1yllbswdqe
- SHA256 d2b88c8a3338fbce930eebf2efaaa0df4672143ee6bb2fbc55bf17105f5a3756
- MD5 cd498fd651a8542baf831dc39d81d3d3
- SHA1 f70265825cefe9240bf2670ea0751b7997d51024
- SHA512 7186fe7e02c102b1239e2a9e575485f677a3056fa88b3ee963137ea44edf18156591c567682c1dc369c814d47876237b1080d177e517ed09f06fd3f50730bcab
- SSDEEP 98304:5js3W3PDrXViF1xmw69KrsZQzCw/cPbIfo5fJ:W3Ges9KraQPcjIfoP
- MD5 SHA1 SHA512 SSDEEP
Score
6/10
Malware Config
Signatures
- Declares services with permission to bind to the system 2 IoCs
description ioc Required by accessibility services to bind with the system. Allows apps to access accessibility features. android.permission.BIND_ACCESSIBILITY_SERVICE Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device. android.permission.BIND_NOTIFICATION_LISTENER_SERVICE - Requests dangerous framework permissions 12 IoCs
description ioc Allows an application to record audio. android.permission.RECORD_AUDIO Allows an application to collect component usage statistics. android.permission.PACKAGE_USAGE_STATS Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps. android.permission.SYSTEM_ALERT_WINDOW Allows an application to read the user's contacts data. android.permission.READ_CONTACTS Allows an application to read SMS messages. android.permission.READ_SMS Allows an application to receive SMS messages. android.permission.RECEIVE_SMS Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call. android.permission.CALL_PHONE Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE Allows an application to send SMS messages. android.permission.SEND_SMS Allows an app to access precise location. android.permission.ACCESS_FINE_LOCATION
File Explorer
-
d2b88c8a3338fbce930eebf2efaaa0df4672143ee6bb2fbc55bf17105f5a3756.bin.zip 3.8MB
-
WhatsApp.apk.apk 3.8MB
-
vk_dex.apk.apk 106KB
WhatsApp.apk
- SHA256 1941f273125921dcb46c2646e8b6ef58588712d733966def792228dd6d9ce5bb
- MD5 bb8459442d76afba871622a4bd4b4e41
- SHA1 b64e61a7e61ad28c1f36bdef62176c608d8da2dd
- SHA512 800d27b65d20c1acdf2b5e2becf6c1b55360397fef1fedf7bb057d362484e2cf3a4ef18e71cd092d784cf54b35583251a3908932f224367bb69f5341eac9937d
- SSDEEP 98304:1js3W3PDrXViF1xmw69KrsZQzCw/cPbIfo5fF:C3Ges9KraQPcjIfo/
- MD5 SHA1 SHA512 SSDEEP
com.xtuamuxlmp.cknsqskvtdi
com.xtuamuxlmp.cknsqskvtdi.lusataylxynlf.qSBDuepgUMq
android.permission.RECORD_AUDIO
android.permission.PACKAGE_USAGE_STATS
android.permission.WAKE_LOCK
android.permission.SYSTEM_ALERT_WINDOW
android.permission.READ_CONTACTS
android.permission.READ_SMS
android.permission.RECEIVE_SMS
android.permission.RECEIVE_BOOT_COMPLETED
com.sec.android.provider.badge.permission.WRITE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_NETWORK_STATE
android.permission.CALL_PHONE
android.permission.WRITE_SMS
android.permission.USE_FULL_SCREEN_INTENT
android.permission.READ_PHONE_STATE
android.permission.READ_EXTERNAL_STORAGE
android.permission.REQUEST_DELETE_PACKAGES
android.permission.INTERNET
android.permission.GET_TASKS
android.permission.SEND_SMS
android.permission.FOREGROUND_SERVICE
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_NOTIFICATION_POLICY
com.xtuamuxlmp.cknsqskvtdi.jwjjfxsiqwf.OUYnlNzSVrXk
com.xtuamuxlmp.cknsqskvtdi.ypoUBQewyXDHN
com.xtuamuxlmp.cknsqskvtdi.ocaobxcorip.diauyttqffzbvcgmplwqz.VBsVeFyPyjtW
com.xtuamuxlmp.cknsqskvtdi.ocaobxcorip.grFMeaoFjmg
com.xtuamuxlmp.cknsqskvtdi.fsszadbmnaaedtwf.dbtyjszqyjdqwykzxj.ypojzfewsublmf.FsFrsgSqHnmk
com.xtuamuxlmp.cknsqskvtdi.iHtzUaWZxvYoari
com.xtuamuxlmp.cknsqskvtdi.lusataylxynlf.vZSWqPPZXcwUvlQHo
com.xtuamuxlmp.cknsqskvtdi.tknfwafsundst.WoQoYjNsnONQyxvr
com.xtuamuxlmp.cknsqskvtdi.lnysfixbzelvhoqhy.ctzhmmqpfjpcagdb.jwftnrabymoni.uSSVrVrNpyZZs
com.xtuamuxlmp.cknsqskvtdi.fsszadbmnaaedtwf.dbtyjszqyjdqwykzxj.ypojzfewsublmf.ZlkjNttDxWsHNDzeps
com.xtuamuxlmp.cknsqskvtdi.SendSms
android.intent.action.SENDTO
android.intent.action.SEND
com.xtuamuxlmp.cknsqskvtdi.qvjcrkgesphacwahvi.vxjtaWuoFZHQSpMZ
com.xtuamuxlmp.cknsqskvtdi.vnjgwfuwbneumsc.jsSQQgrrQMwxNlkWO
com.google.android.gms.common.api.GoogleApiActivity
com.xtuamuxlmp.cknsqskvtdi.lusataylxynlf.qSBDuepgUMq
android.intent.action.MAIN
com.xtuamuxlmp.cknsqskvtdi.fsszadbmnaaedtwf.dbtyjszqyjdqwykzxj.ypojzfewsublmf.BrZaiwxBrmuzwP
com.xtuamuxlmp.cknsqskvtdi.ocaobxcorip.diauyttqffzbvcgmplwqz.NvSgSzBPtOnnzVrYVX
com.xtuamuxlmp.cknsqskvtdi.ocaobxcorip.ZiwBnlkwWcwVUoUzQ
com.xtuamuxlmp.cknsqskvtdi.fsszadbmnaaedtwf.HvtSOpkZBywegXW
com.xtuamuxlmp.cknsqskvtdi.lnysfixbzelvhoqhy.kXcHNktvsqXevwkrwZvM
com.xtuamuxlmp.cknsqskvtdi.astpwymughlwucmu.vzBelBPiPYqS
com.xtuamuxlmp.cknsqskvtdi.xuaohksanshjhcogxexf.UnHNOxyrSrsmxypiMF
com.xtuamuxlmp.cknsqskvtdi.tknfwafsundst.mkiznwgwjezddvh.bkuqevktffyuwd.SQyNpipkolQgliXcy
com.xtuamuxlmp.cknsqskvtdi.fsszadbmnaaedtwf.dbtyjszqyjdqwykzxj.ypojzfewsublmf.NStNZjyivxNecjH
com.xtuamuxlmp.cknsqskvtdi.xuaohksanshjhcogxexf.nwovrxsusmbsplch.ezYlBiyWxPqjmqjogHem
com.xtuamuxlmp.cknsqskvtdi.astpwymughlwucmu.snygrmvpbgo.xFliWkmBqBstmQtUqvwFr
com.xtuamuxlmp.cknsqskvtdi.lnysfixbzelvhoqhy.rNmwXzBwQjZnVYUexclH
com.xtuamuxlmp.cknsqskvtdi.xuaohksanshjhcogxexf.PBXNNFjwyjaFSWOxipe
com.xtuamuxlmp.cknsqskvtdi.ikfxukjmocoimictsw.DlxmVsOuPBrjDiQmiPgO
android.intent.action.RESPOND_VIA_MESSAGE
com.xtuamuxlmp.cknsqskvtdi.lnysfixbzelvhoqhy.YWZYqQPFkXSm
com.xtuamuxlmp.cknsqskvtdi.ikfxukjmocoimictsw.uaXDznvnPkvuwaUnQkpot
com.xtuamuxlmp.cknsqskvtdi.vnjgwfuwbneumsc.ayxfotzszwmiy.jeZtZNXkPYNtrX
com.xtuamuxlmp.cknsqskvtdi.njmmgsejspu.aczegtsVUHkPeHmYHt
com.xtuamuxlmp.cknsqskvtdi.njmmgsejspu.XWjyoykOwVaxOtwcuZtlo
com.xtuamuxlmp.cknsqskvtdi.qvjcrkgesphacwahvi.fttzwozvdovttip.SDatinPVnqneZZ
com.xtuamuxlmp.cknsqskvtdi.tknfwafsundst.ijyrcyZnHvwgWeqkx
com.xtuamuxlmp.cknsqskvtdi.astpwymughlwucmu.snygrmvpbgo.OONmOBUDYvWByQ
android.accessibilityservice.AccessibilityService
com.xtuamuxlmp.cknsqskvtdi.astpwymughlwucmu.snygrmvpbgo.OiBeUanSZqky
android.service.notification.NotificationListenerService
com.xtuamuxlmp.cknsqskvtdi.xuaohksanshjhcogxexf.nwovrxsusmbsplch.uFUoXaFsHOXHwxFPtFaj
com.xtuamuxlmp.cknsqskvtdi.qvjcrkgesphacwahvi.fttzwozvdovttip.OotwPWlcxNMneYe
com.xtuamuxlmp.cknsqskvtdi.fsszadbmnaaedtwf.dbtyjszqyjdqwykzxj.ypojzfewsublmf.OBnmizcnWtkkP
com.xtuamuxlmp.cknsqskvtdi.tknfwafsundst.wrsvSuUcisWtgVV
com.xtuamuxlmp.cknsqskvtdi.jwjjfxsiqwf.rupdbgfrojthbe.klrizfbeqjooc.wPaoPlWxrnBgvi
com.xtuamuxlmp.cknsqskvtdi.qvjcrkgesphacwahvi.fttzwozvdovttip.qPjXqwvooSacXnjlsSe
com.xtuamuxlmp.cknsqskvtdi.lnysfixbzelvhoqhy.gsmvtBmUlDUWkzPvYWo
com.xtuamuxlmp.cknsqskvtdi.xuaohksanshjhcogxexf.SknDDnBBFvZcMsMoSS
com.xtuamuxlmp.cknsqskvtdi.tknfwafsundst.mkiznwgwjezddvh.bkuqevktffyuwd.WkUQgZiUzUpSwtVqw
android.provider.Telephony.WAP_PUSH_DELIVER
com.xtuamuxlmp.cknsqskvtdi.lusataylxynlf.sjiiqQtWvXPyjrkWWptD
android.provider.Telephony.SMS_DELIVER
com.xtuamuxlmp.cknsqskvtdi.vnjgwfuwbneumsc.nDoZtoxYYUQe
android.intent.action.PACKAGE_ADDED
android.intent.action.DREAMING_STOPPED
android.provider.Telephony.SMS_RECEIVED
android.intent.action.QUICKBOOT_POWERON
android.intent.action.PACKAGE_REMOVED
android.intent.action.BOOT_COMPLETED
com.htc.intent.action.QUICKBOOT_POWERON
android.net.wifi.WIFI_STATE_CHANGED
android.intent.action.SCREEN_ON
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.USER_PRESENT
android.intent.action.EXTERNAL_APPLICATIONS_AVAILABLE
com.xtuamuxlmp.cknsqskvtdi.qvjcrkgesphacwahvi.fttzwozvdovttip.kNmQqZyDsDqvauSYwUV
vk_dex.apk
- SHA256 da37cf4de83a645e1b3241879abe4a9e1a2fdb8a5e3f8bbe634509ac660a480d
- MD5 bc185a98eeb3c6854c2caa633295fa3b
- SHA1 cf0b10d87d8d6459ae5b74483d7020dd496800e1
- SHA512 5bb4bb3aaabf3fa44260c4aec4925fd60901eaf9be83ae661bbb013ca976dc9c4c5d2debea76fc8779ecbd01cf63221b8b6be9951139a972a3b82c92c0fc1c85
- SSDEEP 3072:nQnd9yPnoYlod2kB2zYrp42EUzHGSPIyPzKEmOZPGk9Nt:ywnblhW28ru2kSPIyPz7Gk9L
- MD5 SHA1 SHA512 SSDEEP