664c1b4ef5e7caa17e3caa5a4bc0dcfe6fba23beb866ca8959a3791512d33798[.]bin

General

Target
664c1b4ef5e7caa17e3caa5a4bc0dcfe6fba23beb866ca8959a3791512d33798.bin
Size 3.8MB
Sample240804-129sbssblc
SHA256 664c1b4ef5e7caa17e3caa5a4bc0dcfe6fba23beb866ca8959a3791512d33798
MD5 ff0861b94469b50816dd80f3a8c5ddfa
SHA1 749f8aa6ab57f7c2059312e7304edecd5391cf30
SHA512 76e658539bb17db06b03f6a13b7bae1b0852657cb956e8f1a365e06c01dc6ff1468b366b39e7f8a75b2edc76e0dd3979136ffe0ed8eed9343dd833b2af492a79
SSDEEP 98304:qKUkN1yVuEGZwi2T8fd1iNGhGQTEQu9fzdP:mk6IFqMbfXWrl
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE

Requests dangerous framework permissions 6 IoCs

description	ioc
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE

File Explorer

664c1b4ef5e7caa17e3caa5a4bc0dcfe6fba23beb866ca8959a3791512d33798.bin

.apk 3.8MB

664c1b4ef5e7caa17e3caa5a4bc0dcfe6fba23beb866ca8959a3791512d33798.bin

SHA256 664c1b4ef5e7caa17e3caa5a4bc0dcfe6fba23beb866ca8959a3791512d33798
MD5 ff0861b94469b50816dd80f3a8c5ddfa
SHA1 749f8aa6ab57f7c2059312e7304edecd5391cf30
SHA512 76e658539bb17db06b03f6a13b7bae1b0852657cb956e8f1a365e06c01dc6ff1468b366b39e7f8a75b2edc76e0dd3979136ffe0ed8eed9343dd833b2af492a79
SSDEEP 98304:qKUkN1yVuEGZwi2T8fd1iNGhGQTEQu9fzdP:mk6IFqMbfXWrl
MD5 SHA1 SHA512 SSDEEP

android

com.tencent.mm

Android Permissions

664c1b4ef5e7caa17e3caa5a4bc0dcfe6fba23beb866ca8959a3791512d33798.bin

Permissions

android.permission.INTERNET

android.permission.READ_CONTACTS

android.permission.WRITE_SMS

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.RECEIVE_SMS

android.permission.READ_PHONE_STATE

android.permission.QUERY_ALL_PACKAGES

android.permission.WAKE_LOCK

android.permission.FOREGROUND_SERVICE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.CALL_PHONE

android.permission.REQUEST_DELETE_PACKAGES

664c1b4ef5e7caa17e3caa5a4bc0dcfe6fba23beb866ca8959a3791512d33798.bin

com.tencent.mm.BrowserActivity

com.tencent.mm.CardActivity

com.tencent.mm.SmsThreadActivity

com.tencent.mm.ComposeSmsActivity

com.tencent.mm.MainActivity

com.tencent.mm.IntentStarter

com.mcal.apkprotector.activities.CopyClipActivity

com.tencent.mm.MyNotificationListener

com.tencent.mm.ForegroundService

com.tencent.mm.HeadlessSmsSendService

com.tencent.mm.MyAccessibilityService

com.tencent.mm.SmsReceiver

com.tencent.mm.MmsReceiver

com.tencent.mm.BootReceiver

Sharing

General

Malware Config

Signatures

File Explorer

664c1b4ef5e7caa17e3caa5a4bc0dcfe6fba23beb866ca8959a3791512d33798.bin

com.tencent.mm.BrowserActivity

com.tencent.mm.CardActivity

com.tencent.mm.SmsThreadActivity

com.tencent.mm.ComposeSmsActivity

com.tencent.mm.MainActivity

com.tencent.mm.IntentStarter

com.mcal.apkprotector.activities.CopyClipActivity

com.tencent.mm.MyNotificationListener

com.tencent.mm.ForegroundService

com.tencent.mm.HeadlessSmsSendService

com.tencent.mm.MyAccessibilityService

com.tencent.mm.SmsReceiver

com.tencent.mm.MmsReceiver

com.tencent.mm.BootReceiver

Android Permissions

664c1b4ef5e7caa17e3caa5a4bc0dcfe6fba23beb866ca8959a3791512d33798.bin