dd366c0ed2bca2c2b49a11f850df84218d7edac5976d40756c83b64b94cc3886[.]bin

General

Target
dd366c0ed2bca2c2b49a11f850df84218d7edac5976d40756c83b64b94cc3886.bin
Size 509KB
Sample240728-1wsxmaxbpr
SHA256 dd366c0ed2bca2c2b49a11f850df84218d7edac5976d40756c83b64b94cc3886
MD5 1fc5273d41480dae4423fb5f427f7803
SHA1 79ae2d863fc4acf136a3d0bc7b57213a789a6d41
SHA512 1a3a58cf711cca4267e6e3bca3ea00ed6279b6bb5d4b5ebf4a3414974279dcc03766a2695c57fdd006514d148da71fd04b89f3faebc784c59e83e2e0dac18b17
SSDEEP 12288:6bWrsxy4k9/7MLyPDRWehgbRleCpkFNceJPjgUgHQZUnV:hrNj/jPYXbsFNceJPx0QCnV
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE

Requests dangerous framework permissions 8 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE

File Explorer

dd366c0ed2bca2c2b49a11f850df84218d7edac5976d40756c83b64b94cc3886.bin

.apk 509KB

dd366c0ed2bca2c2b49a11f850df84218d7edac5976d40756c83b64b94cc3886.bin

SHA256 dd366c0ed2bca2c2b49a11f850df84218d7edac5976d40756c83b64b94cc3886
MD5 1fc5273d41480dae4423fb5f427f7803
SHA1 79ae2d863fc4acf136a3d0bc7b57213a789a6d41
SHA512 1a3a58cf711cca4267e6e3bca3ea00ed6279b6bb5d4b5ebf4a3414974279dcc03766a2695c57fdd006514d148da71fd04b89f3faebc784c59e83e2e0dac18b17
SSDEEP 12288:6bWrsxy4k9/7MLyPDRWehgbRleCpkFNceJPjgUgHQZUnV:hrNj/jPYXbsFNceJPx0QCnV
MD5 SHA1 SHA512 SSDEEP

android arch:arm64 arch:arm arch:x86 arch:x64

com.leadany0

Android Permissions

dd366c0ed2bca2c2b49a11f850df84218d7edac5976d40756c83b64b94cc3886.bin

Permissions

android.permission.GET_PACKAGE_SIZE

android.permission.CLEAR_APP_CACHE

android.permission.BATTERY_STATS

android.permission.ADD_VOICEMAIL

android.permission.INSTALL_SHORTCUT

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.USE_FINGERPRINT

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.INTERNET

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.WAKE_LOCK

android.permission.CALL_PHONE

android.permission.USES_POLICY_FORCE_LOCK

android.permission.VIBRATE

android.permission.REQUEST_COMPANION_RUN_IN_BACKGROUND

android.permission.REQUEST_COMPANION_USE_DATA_IN_BACKGROUND

android.permission.REQUEST_DELETE_PACKAGES

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_SETTINGS

android.permission.REORDER_TASKS

android.permission.QUERY_ALL_PACKAGES

android.permission.READ_PHONE_STATE

dd366c0ed2bca2c2b49a11f850df84218d7edac5976d40756c83b64b94cc3886.bin

com.leadany0.p051j

com.leadany0.p025t

com.leadany0.p091u

com.leadany0.p019u

com.leadany0.p090v

com.leadany0.p070c

com.leadany0.p092l

com.leadany0.p049y

com.leadany0.p061j

com.leadany0.p022o

com.leadany0.p050p

com.leadany0.p023v

com.leadany0.p054o

com.leadany0.p029p

com.leadany0.p070y

com.leadany0.p017g

com.leadany0.p038t

com.leadany0.p052g

com.leadany0.p087c

com.leadany0.p045s

com.leadany0.p063o

com.leadany0.p079q

com.leadany0.p064t

com.leadany0.p048q

com.leadany0.p069x

com.leadany0.p095z

com.leadany0.p084l

com.leadany0.p048d

com.leadany0.p076d

com.leadany0.p094z

com.leadany0.p079y

Sharing

General

Malware Config

Signatures

File Explorer

dd366c0ed2bca2c2b49a11f850df84218d7edac5976d40756c83b64b94cc3886.bin

com.leadany0.p051j

com.leadany0.p025t

com.leadany0.p091u

com.leadany0.p019u

com.leadany0.p090v

com.leadany0.p070c

com.leadany0.p092l

com.leadany0.p049y

com.leadany0.p061j

com.leadany0.p022o

com.leadany0.p050p

com.leadany0.p023v

com.leadany0.p054o

com.leadany0.p029p

com.leadany0.p070y

com.leadany0.p017g

com.leadany0.p038t

com.leadany0.p052g

com.leadany0.p087c

com.leadany0.p045s

com.leadany0.p063o

com.leadany0.p079q

com.leadany0.p064t

com.leadany0.p048q

com.leadany0.p069x

com.leadany0.p095z

com.leadany0.p084l

com.leadany0.p048d

com.leadany0.p076d

com.leadany0.p094z

com.leadany0.p079y

Android Permissions

dd366c0ed2bca2c2b49a11f850df84218d7edac5976d40756c83b64b94cc3886.bin