c3cd96bfad61dad8b6fb2ba016f1eecd5be68c6ce15e8a16f3f90c9dae358c1c[.]bin

General

Target
c3cd96bfad61dad8b6fb2ba016f1eecd5be68c6ce15e8a16f3f90c9dae358c1c.bin
Size 136KB
Sample240804-124lbaxgnp
SHA256 c3cd96bfad61dad8b6fb2ba016f1eecd5be68c6ce15e8a16f3f90c9dae358c1c
MD5 80313d90929a608d2736fd9347c51f1e
SHA1 a9045b948e4f0c782b830b5552f5a598f15a893b
SHA512 87cf25337ff1a16497087094bedfb24164dd184c7e6025ba2bcdc6855c7204e1c8d328f43b92ef495c1957258646ef88c095771a67c4f3f0565882be040ac02a
SSDEEP 3072:HE6P0dBd6PBwuagMneRLDeUBJVLCAaZaaLHoKIG9rG2LjInisUzeD:DP0dK6uaPnYLDeUBJRDaZaaN/9rG2LMl
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE

Requests dangerous framework permissions 6 IoCs

description	ioc
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE

File Explorer

c3cd96bfad61dad8b6fb2ba016f1eecd5be68c6ce15e8a16f3f90c9dae358c1c.bin

.apk 136KB

c3cd96bfad61dad8b6fb2ba016f1eecd5be68c6ce15e8a16f3f90c9dae358c1c.bin

SHA256 c3cd96bfad61dad8b6fb2ba016f1eecd5be68c6ce15e8a16f3f90c9dae358c1c
MD5 80313d90929a608d2736fd9347c51f1e
SHA1 a9045b948e4f0c782b830b5552f5a598f15a893b
SHA512 87cf25337ff1a16497087094bedfb24164dd184c7e6025ba2bcdc6855c7204e1c8d328f43b92ef495c1957258646ef88c095771a67c4f3f0565882be040ac02a
SSDEEP 3072:HE6P0dBd6PBwuagMneRLDeUBJVLCAaZaaLHoKIG9rG2LjInisUzeD:DP0dK6uaPnYLDeUBJRDaZaaN/9rG2LMl
MD5 SHA1 SHA512 SSDEEP

android

ru.lesson.destruction

Android Permissions

c3cd96bfad61dad8b6fb2ba016f1eecd5be68c6ce15e8a16f3f90c9dae358c1c.bin

Permissions

android.permission.READ_CONTACTS

android.permission.SEND_SMS

android.permission.READ_SMS

android.permission.WRITE_SMS

android.permission.RECEIVE_SMS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WAKE_LOCK

android.permission.READ_PHONE_STATE

android.permission.INTERNET

android.permission.CALL_PHONE

com.android.alarm.permission.SET_ALARM

android.permission.BIND_ACCESSIBILITY_SERVICE

c3cd96bfad61dad8b6fb2ba016f1eecd5be68c6ce15e8a16f3f90c9dae358c1c.bin

ru.lesson.destruction.Clay

ru.lesson.destruction.Reckless

ru.lesson.destruction.MonstrousParticipate

ru.lesson.destruction.Manual

ru.lesson.destruction.ClosedBury

ru.lesson.destruction.Navy

ru.lesson.destruction.Jail

ru.lesson.destruction.NotionRefrigerator

ru.lesson.destruction.SeriousAction

ru.lesson.destruction.PaintAdopt

Sharing

General

Malware Config

Signatures

File Explorer

c3cd96bfad61dad8b6fb2ba016f1eecd5be68c6ce15e8a16f3f90c9dae358c1c.bin

ru.lesson.destruction.Clay

ru.lesson.destruction.Reckless

ru.lesson.destruction.MonstrousParticipate

ru.lesson.destruction.Manual

ru.lesson.destruction.ClosedBury

ru.lesson.destruction.Navy

ru.lesson.destruction.Jail

ru.lesson.destruction.NotionRefrigerator

ru.lesson.destruction.SeriousAction

ru.lesson.destruction.PaintAdopt

Android Permissions

c3cd96bfad61dad8b6fb2ba016f1eecd5be68c6ce15e8a16f3f90c9dae358c1c.bin