General

  • Target

    Solara2.apk

  • Size

    263KB

  • MD5

    1fe40bc0add37795d6e000b7e4c7f9ee

  • SHA1

    b29e32be555c04b9c45fef5560895989afdc6e72

  • SHA256

    eefa0558adcb9710d0026d8ab7f3577d82b1c8e66285a5cab8f810a38e73df5d

  • SHA512

    f2d402bfa0449348d269a54558a1a0a32b51ae1b780e81c6e26a9b082171d0c8f846e2fba60e2745ba360a07697153ba62309c7d92651ce0ad92f43e1ea4dca6

  • SSDEEP

    6144:v3d5ueGqFuCCVs8EZ8YwdYSL42FeTYC0HC2vyTYFsiYNR90V:l5MqFgnEZVu42uYCACJmS9+

Score
10/10

Malware Config

Extracted

Family

ahmyth

C2

http://41.216.183.32:4545

Signatures

  • Ahmyth family
  • Requests dangerous framework permissions 10 IoCs

Files

  • Solara2.apk
    .apk android

    ahmyth.mine.king.ahmyth

    ahmyth.mine.king.ahmyth.MainActivity


Android Permissions

Solara2.apk

Permissions

android.permission.WAKE_LOCK

android.permission.CAMERA

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.READ_PHONE_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.READ_CALL_LOG

android.permission.RECORD_AUDIO

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.ACCESS_FINE_LOCATION

android.permission.READ_CONTACTS