Hadise İfşa[.]ver[.]1[.]0[.]build[.]1[.]apk

General

Target
Hadise İfşa.ver.1.0.build.1.apk
Size 2.2MB
Sample240802-rmsqtsscmd
SHA256 4aa281c6840591127f3e01d89f0c5da4e17fb46132486a871c989c5025f04cac
MD5 6da5c4e5ecd7550dfd105e0aed822dbf
SHA1 18b28535113c0b0506e7e3e641fad46f8ff1f576
SHA512 4f0a8e8d7670841b2a3f89e14ca0aa23c87b5d5a9e536f595a77f030dbf09caa83737dfdf82ea51e33daf44e44cb84cfdcbea48228d726b8d88696ce5d620953
SSDEEP 49152:/EfByVLZRmnmZ8jD+hrswMg+YXfjdwjjCQQMV2zDOSVRkk+bTm:MfBIQmZ8jShdjvjoCKVSDOiRkk+bi
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE

Requests dangerous framework permissions 9 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows read access to the device's phone number(s).	android.permission.READ_PHONE_NUMBERS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW

File Explorer

Hadise İfşa.ver.1.0.build.1.apk

.apk 2.2MB

Hadise İfşa.ver.1.0.build.1.apk

SHA256 4aa281c6840591127f3e01d89f0c5da4e17fb46132486a871c989c5025f04cac
MD5 6da5c4e5ecd7550dfd105e0aed822dbf
SHA1 18b28535113c0b0506e7e3e641fad46f8ff1f576
SHA512 4f0a8e8d7670841b2a3f89e14ca0aa23c87b5d5a9e536f595a77f030dbf09caa83737dfdf82ea51e33daf44e44cb84cfdcbea48228d726b8d88696ce5d620953
SSDEEP 49152:/EfByVLZRmnmZ8jD+hrswMg+YXfjdwjjCQQMV2zDOSVRkk+bTm:MfBIQmZ8jShdjvjoCKVSDOiRkk+bi
MD5 SHA1 SHA512 SSDEEP

android

com.mind.rude

Android Permissions

Hadise İfşa.ver.1.0.build.1.apk

Permissions

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.ACTION_MANAGE_OVERLAY_PERMISSION

android.permission.READ_PHONE_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.RECEIVE_LAUNCH_BROADCASTS

android.permission.REQUEST_DELETE_PACKAGES

android.permission.SEND_SMS

android.permission.INTERNET

android.permission.CALL_PHONE

android.permission.READ_PHONE_NUMBERS

android.permission.WAKE_LOCK

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.permission.QUICKBOOT_POWERON

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.DISABLE_KEYGUARD

android.permission.GET_TASKS

android.permission.READ_CONTACTS

android.permission.QUERY_ALL_PACKAGES

android.permission.SYSTEM_ALERT_WINDOW

Hadise İfşa.ver.1.0.build.1.apk

com.vapor.used.yqwxwngx.buwfhjsfiujfsd

com.google.android.gms.common.api.GoogleApiActivity

com.vapor.used.hmssqgwfhwxualln.crqvvpzbkojrtzmy

com.vapor.used.iggpdpspzksh

com.vapor.used.yqwxwngx.ecbssm

com.vapor.used.yqwxwngx.avnrgf

com.vapor.used.xummcfjp

com.vapor.used.yqwxwngx.lhkr

com.vapor.used.yqwxwngx.qsmring

com.vapor.used.wfbl.umyvx

com.vapor.used.wfbl.bupnq

com.vapor.used.jcckcbfvk

com.vapor.used.wfbl.xnbd

com.vapor.used.wfbl.imthheevwcvzywn

com.vapor.used.wfbl.pwjoervqnn

com.vapor.used.wfbl.rdvjpctyoer

com.vapor.used.wfbl.rkzagn

com.vapor.used.hmssqgwfhwxualln.ovlwbtphj

com.vapor.used.iirjcehwbgbyjdqz

com.vapor.used.afegvxfhqjlzo.gdzm

Sharing

General

Malware Config

Signatures

File Explorer

Hadise İfşa.ver.1.0.build.1.apk

com.vapor.used.yqwxwngx.buwfhjsfiujfsd

com.google.android.gms.common.api.GoogleApiActivity

com.vapor.used.hmssqgwfhwxualln.crqvvpzbkojrtzmy

com.vapor.used.iggpdpspzksh

com.vapor.used.yqwxwngx.ecbssm

com.vapor.used.yqwxwngx.avnrgf

com.vapor.used.xummcfjp

com.vapor.used.yqwxwngx.lhkr

com.vapor.used.yqwxwngx.qsmring

com.vapor.used.wfbl.umyvx

com.vapor.used.wfbl.bupnq

com.vapor.used.jcckcbfvk

com.vapor.used.wfbl.xnbd

com.vapor.used.wfbl.imthheevwcvzywn

com.vapor.used.wfbl.pwjoervqnn

com.vapor.used.wfbl.rdvjpctyoer

com.vapor.used.wfbl.rkzagn

com.vapor.used.hmssqgwfhwxualln.ovlwbtphj

com.vapor.used.iirjcehwbgbyjdqz

com.vapor.used.afegvxfhqjlzo.gdzm

Android Permissions

Hadise İfşa.ver.1.0.build.1.apk