bbbc3b12289133b4c00db74c42e3eb7b7e6e21f6673f93b9d188d9e59ee49b92[.]bin

General

Target
bbbc3b12289133b4c00db74c42e3eb7b7e6e21f6673f93b9d188d9e59ee49b92.bin
Size 509KB
Sample240710-1w181asdkn
SHA256 bbbc3b12289133b4c00db74c42e3eb7b7e6e21f6673f93b9d188d9e59ee49b92
MD5 39d98d888c75c2324ce068d3f056c8f6
SHA1 07a0693f61bcdab60850c33cc2bb7911faf20c78
SHA512 343d921b12d926eee9078e6fbc8e0392fc474b726c66d58cd195dddfbf171286bb68984d60b3c4143dd29b44d7b2c5404194527b1c1b5e23e1294de5b52105e4
SSDEEP 12288:Jv764H0dRSqj2E3eV/09CVcUtkhvpTUxX2/nj:BvUdRS3FTcUahvpYdsnj
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE

Requests dangerous framework permissions 7 IoCs

description	ioc
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE

File Explorer

bbbc3b12289133b4c00db74c42e3eb7b7e6e21f6673f93b9d188d9e59ee49b92.bin

.apk 509KB

bbbc3b12289133b4c00db74c42e3eb7b7e6e21f6673f93b9d188d9e59ee49b92.bin

SHA256 bbbc3b12289133b4c00db74c42e3eb7b7e6e21f6673f93b9d188d9e59ee49b92
MD5 39d98d888c75c2324ce068d3f056c8f6
SHA1 07a0693f61bcdab60850c33cc2bb7911faf20c78
SHA512 343d921b12d926eee9078e6fbc8e0392fc474b726c66d58cd195dddfbf171286bb68984d60b3c4143dd29b44d7b2c5404194527b1c1b5e23e1294de5b52105e4
SSDEEP 12288:Jv764H0dRSqj2E3eV/09CVcUtkhvpTUxX2/nj:BvUdRS3FTcUahvpYdsnj
MD5 SHA1 SHA512 SSDEEP

android arch:arm64 arch:arm arch:x86 arch:x64

com.oncewondert

Android Permissions

bbbc3b12289133b4c00db74c42e3eb7b7e6e21f6673f93b9d188d9e59ee49b92.bin

Permissions

android.permission.READ_EXTERNAL_STORAGE

android.permission.INSTALL_SHORTCUT

android.permission.CLEAR_APP_CACHE

android.permission.USE_FINGERPRINT

android.permission.BATTERY_STATS

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.INTERNET

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.WAKE_LOCK

android.permission.CALL_PHONE

android.permission.USES_POLICY_FORCE_LOCK

android.permission.VIBRATE

android.permission.REQUEST_COMPANION_RUN_IN_BACKGROUND

android.permission.REQUEST_COMPANION_USE_DATA_IN_BACKGROUND

android.permission.REQUEST_DELETE_PACKAGES

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_SETTINGS

android.permission.REORDER_TASKS

android.permission.QUERY_ALL_PACKAGES

android.permission.READ_PHONE_STATE

bbbc3b12289133b4c00db74c42e3eb7b7e6e21f6673f93b9d188d9e59ee49b92.bin

com.oncewondert.p020b

com.oncewondert.p024e

com.oncewondert.p012p

com.oncewondert.p037f

com.oncewondert.p077m

com.oncewondert.p049j

com.oncewondert.p010h

com.oncewondert.p054j

com.oncewondert.p083j

com.oncewondert.p085b

com.oncewondert.p024f

com.oncewondert.p012n

com.oncewondert.p093t

com.oncewondert.p081k

com.oncewondert.p070c

com.oncewondert.p017q

com.oncewondert.p099b

com.oncewondert.p023j

com.oncewondert.p082u

com.oncewondert.p091u

com.oncewondert.p059p

com.oncewondert.p044h

com.oncewondert.p014u

com.oncewondert.p050h

com.oncewondert.p013o

com.oncewondert.p068g

com.oncewondert.p087o

com.oncewondert.p067n

com.oncewondert.p031o

com.oncewondert.p037g

com.oncewondert.p026m

com.oncewondert.p099v

Sharing

General

Malware Config

Signatures

File Explorer

bbbc3b12289133b4c00db74c42e3eb7b7e6e21f6673f93b9d188d9e59ee49b92.bin

com.oncewondert.p020b

com.oncewondert.p024e

com.oncewondert.p012p

com.oncewondert.p037f

com.oncewondert.p077m

com.oncewondert.p049j

com.oncewondert.p010h

com.oncewondert.p054j

com.oncewondert.p083j

com.oncewondert.p085b

com.oncewondert.p024f

com.oncewondert.p012n

com.oncewondert.p093t

com.oncewondert.p081k

com.oncewondert.p070c

com.oncewondert.p017q

com.oncewondert.p099b

com.oncewondert.p023j

com.oncewondert.p082u

com.oncewondert.p091u

com.oncewondert.p059p

com.oncewondert.p044h

com.oncewondert.p014u

com.oncewondert.p050h

com.oncewondert.p013o

com.oncewondert.p068g

com.oncewondert.p087o

com.oncewondert.p067n

com.oncewondert.p031o

com.oncewondert.p037g

com.oncewondert.p026m

com.oncewondert.p099v

Android Permissions

bbbc3b12289133b4c00db74c42e3eb7b7e6e21f6673f93b9d188d9e59ee49b92.bin