b5af1a536603415f87fa400f9c10277ef2a439fc0428f07ad774d1a365b7ef12[.]bin

General

Target
b5af1a536603415f87fa400f9c10277ef2a439fc0428f07ad774d1a365b7ef12.bin
Size 509KB
Sample240803-1wy4ms1dpc
SHA256 b5af1a536603415f87fa400f9c10277ef2a439fc0428f07ad774d1a365b7ef12
MD5 c1c7a3d9d0469da9d003dbdc281c9f05
SHA1 7ce3ac631950bd1618db79f2d1672d907a9714a1
SHA512 50f1b32feeedc3e0162e503f594ea21724d005e16f852d9a3998cb814cdc3dd63ff00aba823f4fcbd1f61b59790f88d7734eccfc26ad556efc17cf8655f1f859
SSDEEP 12288:hvC0jLKYNPYDGbacMxAAK0PLI8dlquxfD6oH5kBnuo:RCEnNPYDqlceSK2D6oHGBnr
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE

Requests dangerous framework permissions 8 IoCs

description	ioc
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE

File Explorer

b5af1a536603415f87fa400f9c10277ef2a439fc0428f07ad774d1a365b7ef12.bin

.apk 509KB

b5af1a536603415f87fa400f9c10277ef2a439fc0428f07ad774d1a365b7ef12.bin

SHA256 b5af1a536603415f87fa400f9c10277ef2a439fc0428f07ad774d1a365b7ef12
MD5 c1c7a3d9d0469da9d003dbdc281c9f05
SHA1 7ce3ac631950bd1618db79f2d1672d907a9714a1
SHA512 50f1b32feeedc3e0162e503f594ea21724d005e16f852d9a3998cb814cdc3dd63ff00aba823f4fcbd1f61b59790f88d7734eccfc26ad556efc17cf8655f1f859
SSDEEP 12288:hvC0jLKYNPYDGbacMxAAK0PLI8dlquxfD6oH5kBnuo:RCEnNPYDqlceSK2D6oHGBnr
MD5 SHA1 SHA512 SSDEEP

android arch:arm64 arch:arm arch:x86 arch:x64

com.newhelp2

Android Permissions

b5af1a536603415f87fa400f9c10277ef2a439fc0428f07ad774d1a365b7ef12.bin

Permissions

android.permission.READ_EXTERNAL_STORAGE

android.permission.GET_PACKAGE_SIZE

android.permission.INSTALL_SHORTCUT

android.permission.CLEAR_APP_CACHE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.USE_FINGERPRINT

android.permission.ADD_VOICEMAIL

android.permission.BATTERY_STATS

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.INTERNET

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.WAKE_LOCK

android.permission.CALL_PHONE

android.permission.USES_POLICY_FORCE_LOCK

android.permission.VIBRATE

android.permission.REQUEST_COMPANION_RUN_IN_BACKGROUND

android.permission.REQUEST_COMPANION_USE_DATA_IN_BACKGROUND

android.permission.REQUEST_DELETE_PACKAGES

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_SETTINGS

android.permission.REORDER_TASKS

android.permission.QUERY_ALL_PACKAGES

android.permission.READ_PHONE_STATE

b5af1a536603415f87fa400f9c10277ef2a439fc0428f07ad774d1a365b7ef12.bin

com.newhelp2.p082e

com.newhelp2.p086z

com.newhelp2.p038q

com.newhelp2.p086p

com.newhelp2.p024s

com.newhelp2.p074m

com.newhelp2.p017i

com.newhelp2.p079i

com.newhelp2.p043s

com.newhelp2.p075s

com.newhelp2.p096z

com.newhelp2.p091i

com.newhelp2.p068d

com.newhelp2.p038d

com.newhelp2.p047w

com.newhelp2.p068y

com.newhelp2.p076o

com.newhelp2.p076g

com.newhelp2.p038w

com.newhelp2.p037b

com.newhelp2.p069a

com.newhelp2.p067n

com.newhelp2.p055l

com.newhelp2.p082n

com.newhelp2.p012n

com.newhelp2.p021m

com.newhelp2.p019o

com.newhelp2.p065a

com.newhelp2.p054j

com.newhelp2.p040d

Sharing

General

Malware Config

Signatures

File Explorer

b5af1a536603415f87fa400f9c10277ef2a439fc0428f07ad774d1a365b7ef12.bin

com.newhelp2.p082e

com.newhelp2.p086z

com.newhelp2.p038q

com.newhelp2.p086p

com.newhelp2.p024s

com.newhelp2.p074m

com.newhelp2.p017i

com.newhelp2.p079i

com.newhelp2.p043s

com.newhelp2.p075s

com.newhelp2.p096z

com.newhelp2.p091i

com.newhelp2.p068d

com.newhelp2.p038d

com.newhelp2.p047w

com.newhelp2.p068y

com.newhelp2.p076o

com.newhelp2.p076g

com.newhelp2.p038w

com.newhelp2.p037b

com.newhelp2.p069a

com.newhelp2.p067n

com.newhelp2.p055l

com.newhelp2.p082n

com.newhelp2.p012n

com.newhelp2.p021m

com.newhelp2.p019o

com.newhelp2.p065a

com.newhelp2.p054j

com.newhelp2.p040d

Android Permissions

b5af1a536603415f87fa400f9c10277ef2a439fc0428f07ad774d1a365b7ef12.bin