bea3f6dd90868f3739c8529f223358917e0331d6f3610a77d25d12eac0c741f6[.]bin

General

Target
bea3f6dd90868f3739c8529f223358917e0331d6f3610a77d25d12eac0c741f6.bin
Size 509KB
Sample240710-1w1mgavcmd
SHA256 bea3f6dd90868f3739c8529f223358917e0331d6f3610a77d25d12eac0c741f6
MD5 4e79e588e46e16a91038dc25c504112a
SHA1 45287b63ec508305e12a36a8439e834b94aca1ce
SHA512 cb9f836d66d139c3114856195a7ae0847a21b7d3491e9c15f580cd1580a553918687168a8e029143c31225498b536473eab6b41bcd96b9d172810b84eee672ec
SSDEEP 12288:9Y5shxXUwJvVrRj9dgyUbKmQE9Ejcdfdq7dbz7UD5o5CinF:9UeXJZdkKmDEjcK7xID5o51nF
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE

Requests dangerous framework permissions 7 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE

File Explorer

bea3f6dd90868f3739c8529f223358917e0331d6f3610a77d25d12eac0c741f6.bin

.apk 509KB

bea3f6dd90868f3739c8529f223358917e0331d6f3610a77d25d12eac0c741f6.bin

SHA256 bea3f6dd90868f3739c8529f223358917e0331d6f3610a77d25d12eac0c741f6
MD5 4e79e588e46e16a91038dc25c504112a
SHA1 45287b63ec508305e12a36a8439e834b94aca1ce
SHA512 cb9f836d66d139c3114856195a7ae0847a21b7d3491e9c15f580cd1580a553918687168a8e029143c31225498b536473eab6b41bcd96b9d172810b84eee672ec
SSDEEP 12288:9Y5shxXUwJvVrRj9dgyUbKmQE9Ejcdfdq7dbz7UD5o5CinF:9UeXJZdkKmDEjcK7xID5o51nF
MD5 SHA1 SHA512 SSDEEP

android arch:arm64 arch:arm arch:x86 arch:x64

com.stepstreetmmsa

Android Permissions

bea3f6dd90868f3739c8529f223358917e0331d6f3610a77d25d12eac0c741f6.bin

Permissions

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.USE_FINGERPRINT

android.permission.ADD_VOICEMAIL

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.INTERNET

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.WAKE_LOCK

android.permission.CALL_PHONE

android.permission.USES_POLICY_FORCE_LOCK

android.permission.VIBRATE

android.permission.REQUEST_COMPANION_RUN_IN_BACKGROUND

android.permission.REQUEST_COMPANION_USE_DATA_IN_BACKGROUND

android.permission.REQUEST_DELETE_PACKAGES

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_SETTINGS

android.permission.REORDER_TASKS

android.permission.QUERY_ALL_PACKAGES

android.permission.READ_PHONE_STATE

bea3f6dd90868f3739c8529f223358917e0331d6f3610a77d25d12eac0c741f6.bin

com.stepstreetmmsa.p047a

com.stepstreetmmsa.p020m

com.stepstreetmmsa.p083m

com.stepstreetmmsa.p041g

com.stepstreetmmsa.p095a

com.stepstreetmmsa.p045t

com.stepstreetmmsa.p024a

com.stepstreetmmsa.p060t

com.stepstreetmmsa.p033l

com.stepstreetmmsa.p088s

com.stepstreetmmsa.p091d

com.stepstreetmmsa.p013i

com.stepstreetmmsa.p089a

com.stepstreetmmsa.p065n

com.stepstreetmmsa.p028p

com.stepstreetmmsa.p034z

com.stepstreetmmsa.p025m

com.stepstreetmmsa.p061o

com.stepstreetmmsa.p059j

com.stepstreetmmsa.p070h

com.stepstreetmmsa.p063j

com.stepstreetmmsa.p051e

com.stepstreetmmsa.p017c

com.stepstreetmmsa.p094m

com.stepstreetmmsa.p037d

com.stepstreetmmsa.p028a

com.stepstreetmmsa.p028f

com.stepstreetmmsa.p030q

com.stepstreetmmsa.p093c

com.stepstreetmmsa.p025i

Sharing

General

Malware Config

Signatures

File Explorer

bea3f6dd90868f3739c8529f223358917e0331d6f3610a77d25d12eac0c741f6.bin

com.stepstreetmmsa.p047a

com.stepstreetmmsa.p020m

com.stepstreetmmsa.p083m

com.stepstreetmmsa.p041g

com.stepstreetmmsa.p095a

com.stepstreetmmsa.p045t

com.stepstreetmmsa.p024a

com.stepstreetmmsa.p060t

com.stepstreetmmsa.p033l

com.stepstreetmmsa.p088s

com.stepstreetmmsa.p091d

com.stepstreetmmsa.p013i

com.stepstreetmmsa.p089a

com.stepstreetmmsa.p065n

com.stepstreetmmsa.p028p

com.stepstreetmmsa.p034z

com.stepstreetmmsa.p025m

com.stepstreetmmsa.p061o

com.stepstreetmmsa.p059j

com.stepstreetmmsa.p070h

com.stepstreetmmsa.p063j

com.stepstreetmmsa.p051e

com.stepstreetmmsa.p017c

com.stepstreetmmsa.p094m

com.stepstreetmmsa.p037d

com.stepstreetmmsa.p028a

com.stepstreetmmsa.p028f

com.stepstreetmmsa.p030q

com.stepstreetmmsa.p093c

com.stepstreetmmsa.p025i

Android Permissions

bea3f6dd90868f3739c8529f223358917e0331d6f3610a77d25d12eac0c741f6.bin