cc0baf15ed7406cfd19465495b75c29e381db401188c9f14f10654da775a3ab6[.]bin

General

Target
cc0baf15ed7406cfd19465495b75c29e381db401188c9f14f10654da775a3ab6.bin
Size 505KB
Sample240630-14m2caxcmb
SHA256 cc0baf15ed7406cfd19465495b75c29e381db401188c9f14f10654da775a3ab6
MD5 9343c9fc162ca2952b61de9f3fbc49ac
SHA1 d6857dd489a61101accd159bbea6ca4b4210469b
SHA512 e223919b4bc5ef029f98d172c06734cc90b41aeab01ef6b6f47c1a0b11a142d3dcf36c2f7a3d3b6eb613860804978bb1aa38fc439fd75d06adb4403bdbaf25ae
SSDEEP 12288:VpighaDnQHxuR9gCd5tOounxAH0fCFML3OYXCqWc24:94zAxuR9T70ouxACC6LZCqWs
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE

Requests dangerous framework permissions 7 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE

File Explorer

cc0baf15ed7406cfd19465495b75c29e381db401188c9f14f10654da775a3ab6.bin

.apk 505KB

cc0baf15ed7406cfd19465495b75c29e381db401188c9f14f10654da775a3ab6.bin

SHA256 cc0baf15ed7406cfd19465495b75c29e381db401188c9f14f10654da775a3ab6
MD5 9343c9fc162ca2952b61de9f3fbc49ac
SHA1 d6857dd489a61101accd159bbea6ca4b4210469b
SHA512 e223919b4bc5ef029f98d172c06734cc90b41aeab01ef6b6f47c1a0b11a142d3dcf36c2f7a3d3b6eb613860804978bb1aa38fc439fd75d06adb4403bdbaf25ae
SSDEEP 12288:VpighaDnQHxuR9gCd5tOounxAH0fCFML3OYXCqWc24:94zAxuR9T70ouxACC6LZCqWs
MD5 SHA1 SHA512 SSDEEP

android arch:arm64 arch:arm arch:x86 arch:x64

com.quickletter5

Android Permissions

cc0baf15ed7406cfd19465495b75c29e381db401188c9f14f10654da775a3ab6.bin

Permissions

android.permission.CLEAR_APP_CACHE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.USE_FINGERPRINT

android.permission.GET_PACKAGE_SIZE

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.INTERNET

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.WAKE_LOCK

android.permission.CALL_PHONE

android.permission.USES_POLICY_FORCE_LOCK

android.permission.VIBRATE

android.permission.REQUEST_COMPANION_RUN_IN_BACKGROUND

android.permission.REQUEST_COMPANION_USE_DATA_IN_BACKGROUND

android.permission.REQUEST_DELETE_PACKAGES

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_SETTINGS

android.permission.REORDER_TASKS

android.permission.QUERY_ALL_PACKAGES

android.permission.READ_PHONE_STATE

cc0baf15ed7406cfd19465495b75c29e381db401188c9f14f10654da775a3ab6.bin

com.quickletter5.p065c

com.quickletter5.p085w

com.quickletter5.p082k

com.quickletter5.p098s

com.quickletter5.p083b

com.quickletter5.p086t

com.quickletter5.p093l

com.quickletter5.p079m

com.quickletter5.p086u

com.quickletter5.p077z

com.quickletter5.p040z

com.quickletter5.p014k

com.quickletter5.p098p

com.quickletter5.p033j

com.quickletter5.p084h

com.quickletter5.p031c

com.quickletter5.p014y

com.quickletter5.p044g

com.quickletter5.p040r

com.quickletter5.p073t

com.quickletter5.p028a

com.quickletter5.p092k

com.quickletter5.p083q

com.quickletter5.p043u

com.quickletter5.p056n

com.quickletter5.p047x

com.quickletter5.p048f

com.quickletter5.p078a

com.quickletter5.p071o

Sharing

General

Malware Config

Signatures

File Explorer

cc0baf15ed7406cfd19465495b75c29e381db401188c9f14f10654da775a3ab6.bin

com.quickletter5.p065c

com.quickletter5.p085w

com.quickletter5.p082k

com.quickletter5.p098s

com.quickletter5.p083b

com.quickletter5.p086t

com.quickletter5.p093l

com.quickletter5.p079m

com.quickletter5.p086u

com.quickletter5.p077z

com.quickletter5.p040z

com.quickletter5.p014k

com.quickletter5.p098p

com.quickletter5.p033j

com.quickletter5.p084h

com.quickletter5.p031c

com.quickletter5.p014y

com.quickletter5.p044g

com.quickletter5.p040r

com.quickletter5.p073t

com.quickletter5.p028a

com.quickletter5.p092k

com.quickletter5.p083q

com.quickletter5.p043u

com.quickletter5.p056n

com.quickletter5.p047x

com.quickletter5.p048f

com.quickletter5.p078a

com.quickletter5.p071o

Android Permissions

cc0baf15ed7406cfd19465495b75c29e381db401188c9f14f10654da775a3ab6.bin