1a2564deee63efcde8a9c68c615762e39bfda3b4ed7b56913a14f8f8c959c78a[.]bin

General

Target
1a2564deee63efcde8a9c68c615762e39bfda3b4ed7b56913a14f8f8c959c78a.bin
Size 3.4MB
Sample240805-1xd5vstdnb
SHA256 1a2564deee63efcde8a9c68c615762e39bfda3b4ed7b56913a14f8f8c959c78a
MD5 d798d1e85f367e0c3bacebb8ed7b42c8
SHA1 c3e9a0cd393480fe05cb66dfe0929b479e0d2fb3
SHA512 919e48f8114991a93708c1967d2429018804b052b488a3d6363d2ca69035d937f51b8ae84efc29197eefd11641660e39f7bbe9a219a223cc842b6cdf5e072304
SSDEEP 98304:z/8S9xHTQa7uY+EaTLhRvObeeLz+YQpwgY7dNjWYEz6/L:YS9xzt+x4TzypwP73U6/L
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE

Requests dangerous framework permissions 6 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to send SMS messages.	android.permission.SEND_SMS

File Explorer

1a2564deee63efcde8a9c68c615762e39bfda3b4ed7b56913a14f8f8c959c78a.bin

.apk 3.4MB

1a2564deee63efcde8a9c68c615762e39bfda3b4ed7b56913a14f8f8c959c78a.bin

SHA256 1a2564deee63efcde8a9c68c615762e39bfda3b4ed7b56913a14f8f8c959c78a
MD5 d798d1e85f367e0c3bacebb8ed7b42c8
SHA1 c3e9a0cd393480fe05cb66dfe0929b479e0d2fb3
SHA512 919e48f8114991a93708c1967d2429018804b052b488a3d6363d2ca69035d937f51b8ae84efc29197eefd11641660e39f7bbe9a219a223cc842b6cdf5e072304
SSDEEP 98304:z/8S9xHTQa7uY+EaTLhRvObeeLz+YQpwgY7dNjWYEz6/L:YS9xzt+x4TzypwP73U6/L
MD5 SHA1 SHA512 SSDEEP

android

glk33e.dkdyu.iiyee

Android Permissions

1a2564deee63efcde8a9c68c615762e39bfda3b4ed7b56913a14f8f8c959c78a.bin

Permissions

android.permission.INTERNET

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.READ_PHONE_STATE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.RECEIVE_SMS

android.permission.CALL_PHONE

android.permission.READ_SMS

android.permission.REQUEST_DELETE_PACKAGES

android.permission.FOREGROUND_SERVICE

android.permission.READ_CONTACTS

android.permission.WAKE_LOCK

android.permission.QUERY_ALL_PACKAGES

android.permission.SEND_SMS

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_SMS

1a2564deee63efcde8a9c68c615762e39bfda3b4ed7b56913a14f8f8c959c78a.bin

soft.gamers.ware.p7f4f39ef

soft.gamers.ware.p09c2abd4

soft.gamers.ware.pf5d79f28

soft.gamers.ware.pcf00ea27

soft.gamers.ware.p5696260e

soft.gamers.ware.p2eb95fb9

soft.gamers.ware.pffccc2a9

soft.gamers.ware.p92aeeabd

soft.gamers.ware.p46076f13

soft.gamers.ware.pbbde2f5d

marlboro.advance.light.p6615cc6e

marlboro.advance.light.p8afcce24

Sharing

General

Malware Config

Signatures

File Explorer

1a2564deee63efcde8a9c68c615762e39bfda3b4ed7b56913a14f8f8c959c78a.bin

soft.gamers.ware.p7f4f39ef

soft.gamers.ware.p09c2abd4

soft.gamers.ware.pf5d79f28

soft.gamers.ware.pcf00ea27

soft.gamers.ware.p5696260e

soft.gamers.ware.p2eb95fb9

soft.gamers.ware.pffccc2a9

soft.gamers.ware.p92aeeabd

soft.gamers.ware.p46076f13

soft.gamers.ware.pbbde2f5d

marlboro.advance.light.p6615cc6e

marlboro.advance.light.p8afcce24

Android Permissions

1a2564deee63efcde8a9c68c615762e39bfda3b4ed7b56913a14f8f8c959c78a.bin