5b79995e97163006aacaf285076d6dde[.]apk

General

Target
5b79995e97163006aacaf285076d6dde.apk
Size 509KB
Sample240711-jdj4bsycjd
SHA256 1eeac092537fcc88ae707fe2fd43d5cb6562da67d7a7988dda03e00b90b5aacd
MD5 5b79995e97163006aacaf285076d6dde
SHA1 20c5325a9e2ba1026f40f5dd5dd17d8690b7d731
SHA512 89c171be92d7dc243fe2e6b53382da5d51667df6f9446517fed625c794ea38e38d9595cf4a9ffb43dd9e0d1fbeadff349277e4da019d18fd845a247fc134ca60
SSDEEP 12288:SX7v2XSDJoyDKB20KenJ7JC9gISS21gOR8op9jEkfnj:UT2XS1hKBdBJC6Iji8m9j3fnj
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE

Requests dangerous framework permissions 7 IoCs

description	ioc
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE

File Explorer

5b79995e97163006aacaf285076d6dde.apk

.apk 509KB

5b79995e97163006aacaf285076d6dde.apk

SHA256 1eeac092537fcc88ae707fe2fd43d5cb6562da67d7a7988dda03e00b90b5aacd
MD5 5b79995e97163006aacaf285076d6dde
SHA1 20c5325a9e2ba1026f40f5dd5dd17d8690b7d731
SHA512 89c171be92d7dc243fe2e6b53382da5d51667df6f9446517fed625c794ea38e38d9595cf4a9ffb43dd9e0d1fbeadff349277e4da019d18fd845a247fc134ca60
SSDEEP 12288:SX7v2XSDJoyDKB20KenJ7JC9gISS21gOR8op9jEkfnj:UT2XS1hKBdBJC6Iji8m9j3fnj
MD5 SHA1 SHA512 SSDEEP

android arch:arm64 arch:arm arch:x86 arch:x64

com.boyknowtwe

Android Permissions

5b79995e97163006aacaf285076d6dde.apk

Permissions

android.permission.INSTALL_SHORTCUT

android.permission.USE_FINGERPRINT

android.permission.READ_EXTERNAL_STORAGE

android.permission.GET_PACKAGE_SIZE

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.INTERNET

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.WAKE_LOCK

android.permission.CALL_PHONE

android.permission.USES_POLICY_FORCE_LOCK

android.permission.VIBRATE

android.permission.REQUEST_COMPANION_RUN_IN_BACKGROUND

android.permission.REQUEST_COMPANION_USE_DATA_IN_BACKGROUND

android.permission.REQUEST_DELETE_PACKAGES

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_SETTINGS

android.permission.REORDER_TASKS

android.permission.QUERY_ALL_PACKAGES

android.permission.READ_PHONE_STATE

5b79995e97163006aacaf285076d6dde.apk

com.boyknowtwe.p019i

com.boyknowtwe.p040m

com.boyknowtwe.p038p

com.boyknowtwe.p092g

com.boyknowtwe.p089p

com.boyknowtwe.p080m

com.boyknowtwe.p052b

com.boyknowtwe.p078x

com.boyknowtwe.p032z

com.boyknowtwe.p040z

com.boyknowtwe.p087h

com.boyknowtwe.p031v

com.boyknowtwe.p068t

com.boyknowtwe.p010k

com.boyknowtwe.p053e

com.boyknowtwe.p051u

com.boyknowtwe.p060t

com.boyknowtwe.p052w

com.boyknowtwe.p075z

com.boyknowtwe.p096c

com.boyknowtwe.p067e

com.boyknowtwe.p033v

com.boyknowtwe.p041y

com.boyknowtwe.p070o

com.boyknowtwe.p068z

com.boyknowtwe.p014v

com.boyknowtwe.p053s

com.boyknowtwe.p099t

com.boyknowtwe.p011v

com.boyknowtwe.p066y

com.boyknowtwe.p080r

Sharing

General

Malware Config

Signatures

File Explorer

5b79995e97163006aacaf285076d6dde.apk

com.boyknowtwe.p019i

com.boyknowtwe.p040m

com.boyknowtwe.p038p

com.boyknowtwe.p092g

com.boyknowtwe.p089p

com.boyknowtwe.p080m

com.boyknowtwe.p052b

com.boyknowtwe.p078x

com.boyknowtwe.p032z

com.boyknowtwe.p040z

com.boyknowtwe.p087h

com.boyknowtwe.p031v

com.boyknowtwe.p068t

com.boyknowtwe.p010k

com.boyknowtwe.p053e

com.boyknowtwe.p051u

com.boyknowtwe.p060t

com.boyknowtwe.p052w

com.boyknowtwe.p075z

com.boyknowtwe.p096c

com.boyknowtwe.p067e

com.boyknowtwe.p033v

com.boyknowtwe.p041y

com.boyknowtwe.p070o

com.boyknowtwe.p068z

com.boyknowtwe.p014v

com.boyknowtwe.p053s

com.boyknowtwe.p099t

com.boyknowtwe.p011v

com.boyknowtwe.p066y

com.boyknowtwe.p080r

Android Permissions

5b79995e97163006aacaf285076d6dde.apk