7474cbb1ad4f438e636cdd7eece595ac5fc29b6893f478ef1b86b4da4281138e[.]bin

General

Target
7474cbb1ad4f438e636cdd7eece595ac5fc29b6893f478ef1b86b4da4281138e.bin
Size 3.5MB
Sample240805-1xb1hatdmg
SHA256 7474cbb1ad4f438e636cdd7eece595ac5fc29b6893f478ef1b86b4da4281138e
MD5 8c788037c0044b96d63d4cde857d827e
SHA1 264fd077014e3c1ed843d12d7111de1e7586c1ee
SHA512 902db8578682f058c6bd689fcac8ff5b5f4a97c39b4cea10bb7047a8c7699bd34c96a01fcf8b601419c42b50725e4a53560fb09db66b57361f6ca34abffa2b0a
SSDEEP 98304:hzWUKLGedqxHfjhdba/10L7XHi95l1JUUBbhAsKaNG3eD8T:tjKvqFjh5a6L7E/hcNT
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE

Requests dangerous framework permissions 6 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to send SMS messages.	android.permission.SEND_SMS

File Explorer

7474cbb1ad4f438e636cdd7eece595ac5fc29b6893f478ef1b86b4da4281138e.bin

.apk 3.5MB

7474cbb1ad4f438e636cdd7eece595ac5fc29b6893f478ef1b86b4da4281138e.bin

SHA256 7474cbb1ad4f438e636cdd7eece595ac5fc29b6893f478ef1b86b4da4281138e
MD5 8c788037c0044b96d63d4cde857d827e
SHA1 264fd077014e3c1ed843d12d7111de1e7586c1ee
SHA512 902db8578682f058c6bd689fcac8ff5b5f4a97c39b4cea10bb7047a8c7699bd34c96a01fcf8b601419c42b50725e4a53560fb09db66b57361f6ca34abffa2b0a
SSDEEP 98304:hzWUKLGedqxHfjhdba/10L7XHi95l1JUUBbhAsKaNG3eD8T:tjKvqFjh5a6L7E/hcNT
MD5 SHA1 SHA512 SSDEEP

android

com.dytake.downloader

Android Permissions

7474cbb1ad4f438e636cdd7eece595ac5fc29b6893f478ef1b86b4da4281138e.bin

Permissions

android.permission.INTERNET

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.READ_PHONE_STATE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.RECEIVE_SMS

android.permission.CALL_PHONE

android.permission.READ_SMS

android.permission.REQUEST_DELETE_PACKAGES

android.permission.FOREGROUND_SERVICE

android.permission.READ_CONTACTS

android.permission.WAKE_LOCK

android.permission.QUERY_ALL_PACKAGES

android.permission.SEND_SMS

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_SMS

7474cbb1ad4f438e636cdd7eece595ac5fc29b6893f478ef1b86b4da4281138e.bin

com.dytake.downloader.pd65a3908

com.dytake.downloader.pd5268ea0

com.dytake.downloader.pc6b1d968

com.dytake.downloader.pe0042ed7

com.dytake.downloader.p01f0dec7

com.dytake.downloader.p6b7c3806

com.dytake.downloader.p90c59aaa

com.dytake.downloader.p412a2c1d

com.dytake.downloader.p3e7d7e52

com.dytake.downloader.p86fefe68

com.dytake.downloader.p0a4d3ee0

com.dytake.downloader.pd0e3c242

Sharing

General

Malware Config

Signatures

File Explorer

7474cbb1ad4f438e636cdd7eece595ac5fc29b6893f478ef1b86b4da4281138e.bin

com.dytake.downloader.pd65a3908

com.dytake.downloader.pd5268ea0

com.dytake.downloader.pc6b1d968

com.dytake.downloader.pe0042ed7

com.dytake.downloader.p01f0dec7

com.dytake.downloader.p6b7c3806

com.dytake.downloader.p90c59aaa

com.dytake.downloader.p412a2c1d

com.dytake.downloader.p3e7d7e52

com.dytake.downloader.p86fefe68

com.dytake.downloader.p0a4d3ee0

com.dytake.downloader.pd0e3c242

Android Permissions

7474cbb1ad4f438e636cdd7eece595ac5fc29b6893f478ef1b86b4da4281138e.bin