E-IFADE-VATANDAS[.]apk

General

Target
E-IFADE-VATANDAS.apk
Size 1.1MB
Sample240805-gnvlpsycrj
SHA256 9bf9b54ff34459ea77c1d3c849de9bc557b40c9a13ac9e20254eaf1569ceb05e
MD5 bc5dc768e5d005ff2b8e0ecdb84fe048
SHA1 cf87b335e4b086f03dfa9e5d8e129844584b7601
SHA512 5e23581beb23eafb9690ca58045271dddc68fab72af4b34ec6c41bdfbcab15b04fc0abd9977f93bd7cdcffe5ac606cd9bc9d82b3dcd47d210c7615619746efa9
SSDEEP 24576:l6m2oE2rOjocdTq1P5KnU2UdHD9aIWzeNZHhO6G24+fZfjHo2qnO:dE2r9cdTq1PiU5D9aIW6lO6G24+fZLIU
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Attempts to obfuscate APK file format
Applies obfuscation techniques to the APK format in order to hinder analysis

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE

Requests dangerous framework permissions 7 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS

File Explorer

E-IFADE-VATANDAS.apk

.apk 1.1MB

E-IFADE-VATANDAS.apk

SHA256 9bf9b54ff34459ea77c1d3c849de9bc557b40c9a13ac9e20254eaf1569ceb05e
MD5 bc5dc768e5d005ff2b8e0ecdb84fe048
SHA1 cf87b335e4b086f03dfa9e5d8e129844584b7601
SHA512 5e23581beb23eafb9690ca58045271dddc68fab72af4b34ec6c41bdfbcab15b04fc0abd9977f93bd7cdcffe5ac606cd9bc9d82b3dcd47d210c7615619746efa9
SSDEEP 24576:l6m2oE2rOjocdTq1P5KnU2UdHD9aIWzeNZHhO6G24+fZfjHo2qnO:dE2r9cdTq1PiU5D9aIW6lO6G24+fZLIU
MD5 SHA1 SHA512 SSDEEP

com.beginhigh19

Android Permissions

E-IFADE-VATANDAS.apk

Permissions

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ADD_VOICEMAIL

android.permission.GET_PACKAGE_SIZE

android.permission.CLEAR_APP_CACHE

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.INTERNET

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.Manifest.permission.READ_PHONE_STATE

android.permission.SEND_SMS

android.permission.WAKE_LOCK

android.permission.READ_PHONE_STATE

android.permission.CALL_PHONE

android.permission.USES_POLICY_FORCE_LOCK

android.permission.VIBRATE

android.permission.REQUEST_COMPANION_RUN_IN_BACKGROUND

android.permission.REQUEST_COMPANION_USE_DATA_IN_BACKGROUND

android.permission.REQUEST_DELETE_PACKAGES

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_SETTINGS

android.permission.REORDER_TASKS

E-IFADE-VATANDAS.apk

com.beginhigh19.p079j

com.beginhigh19.p025i

com.beginhigh19.p059u

com.beginhigh19.p085x

com.beginhigh19.p036o

com.beginhigh19.p036n

com.beginhigh19.p016j

com.beginhigh19.p049p

com.beginhigh19.p025p

com.beginhigh19.p057t

com.beginhigh19.p059j

com.beginhigh19.p075b

com.beginhigh19.p027d

com.beginhigh19.p041i

com.beginhigh19.p054v

com.beginhigh19.p071p

com.beginhigh19.p067x

com.beginhigh19.p044i

com.beginhigh19.p023w

com.beginhigh19.p025n

com.beginhigh19.p073f

com.beginhigh19.p042w

com.beginhigh19.p095e

com.beginhigh19.p053u

com.beginhigh19.p050i

com.beginhigh19.p077o

com.beginhigh19.p043q

com.beginhigh19.p032o

com.beginhigh19.p086c

com.beginhigh19.p088s

com.beginhigh19.p047t

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

E-IFADE-VATANDAS.apk

com.beginhigh19.p079j

com.beginhigh19.p025i

com.beginhigh19.p059u

com.beginhigh19.p085x

com.beginhigh19.p036o

com.beginhigh19.p036n

com.beginhigh19.p016j

com.beginhigh19.p049p

com.beginhigh19.p025p

com.beginhigh19.p057t

com.beginhigh19.p059j

com.beginhigh19.p075b

com.beginhigh19.p027d

com.beginhigh19.p041i

com.beginhigh19.p054v

com.beginhigh19.p071p

com.beginhigh19.p067x

com.beginhigh19.p044i

com.beginhigh19.p023w

com.beginhigh19.p025n

com.beginhigh19.p073f

com.beginhigh19.p042w

com.beginhigh19.p095e

com.beginhigh19.p053u

com.beginhigh19.p050i

com.beginhigh19.p077o

com.beginhigh19.p043q

com.beginhigh19.p032o

com.beginhigh19.p086c

com.beginhigh19.p088s

com.beginhigh19.p047t

Android Permissions

E-IFADE-VATANDAS.apk