53d6a5163b32450adb0ac15d772f8633f87d39948bf4cf151c25d136855daf02[.]bin

General

Target

53d6a5163b32450adb0ac15d772f8633f87d39948bf4cf151c25d136855daf02.bin
Size

294KB
MD5

908ed9d2134383afdc8b0f3acf183157
SHA1

0e9fd523633e4655bc86b0240309840f2f8ab7c3
SHA256

53d6a5163b32450adb0ac15d772f8633f87d39948bf4cf151c25d136855daf02
SHA512

00e530cb9a13b3a8c2ea8d5ed49f14d4780f2a35061184a4ef689dae84a0ceb53543df2a62c9c6df6dc1423a61ae107f622b85f384bcbfcc7c4c429160cba8c6
SSDEEP

6144:G9s2Z/ffCgVWw8uPqIt++oepKMbfXl3XLpEgC6ChqBN0o4yODFcdi:7Kz2uDnzKGXl1Eg+qDtO5Wi

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Requests dangerous framework permissions 10 IoCs

description	ioc
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether.	android.permission.PROCESS_OUTGOING_CALLS

Files

53d6a5163b32450adb0ac15d772f8633f87d39948bf4cf151c25d136855daf02.bin
.apk android arch:arm

com.bafengcinama.mediaplayer

ui.MainActivity

Activities

ui.MainActivity

android.intent.action.MAIN

ui.AdminActivity

android.intent.action.MAIN

ui.ComposeNoteActivity

android.intent.action.SEND
android.intent.action.SENDTO

Permissions

android.permission.RECEIVE_BOOT_COMPLETED
android.permission.BIND_DEVICE_ADMIN
android.permission.WAKE_LOCK
com.android.alarm.permission.SET_ALARM
android.permission.RECEIVE_SMS
android.permission.READ_SMS
android.permission.SEND_SMS
android.permission.INTERNET
android.permission.READ_PHONE_STATE
android.permission.DEVICE_POWER
android.permission.ACCESS_NETWORK_STATE
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_CONTACTS
android.permission.VIBRATE
android.permission.CALL_PHONE
android.permission.SYSTEM_ALERT_WINDOW
android.permission.PROCESS_OUTGOING_CALLS
android.permission.MODIFY_PHONE_STATE
android.permission.WRITE_APN_SETTINGS
android.permission.CHANGE_WIFI_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_NETWORK_STATE

Receivers

oOO.ooooOOOooooO

android.intent.action.BOOT_COMPLETED
android.intent.action.ACTION_SHUTDOWN
android.intent.action.REBOOT
android.intent.action.USER_PRESENT
android.intent.action.PACKAGE_RESTARTED

oOO.ooOoOOOOooO

android.provider.Telephony.SDMS_DELIVER
android.provider.Telephony.SDMS_RECEIVED

oOO.oOooOOOooOooOo

android.intent.action.CLOSE_SYSTEM_DIALOGS

oOO.oOooOOoooooOOooOo

android.app.action.DEVICE_ADMIN_ENABLED

oOO.oOooOOOooooOo

android.intent.action.MAIN

oOO.ooOOOOoo

android.net.conn.CONNECTIVITY_CHANGE

oOOoO.ooOOOoOOooOoooo

android.intent.action.BOOT_COMPLETED

oOO.ooOOOoOOooOoooo

android.provider.Telephony.SMS_DELIVER
android.provider.Telephony.SMS_RECEIVED

oOO.ooOOOOOooO

android.provider.Telephony.WAP_PUSH_DELIVER

oOoooo.ooOOOoOOooOoooo

android.intent.action.BOOT_COMPLETED
android.intent.action.ACTION_SHUTDOWN
android.intent.action.REBOOT
android.intent.action.PACKAGE_RESTARTED

Services

service.MainService

android.intent.action.MAIN

service.HheadlessNoteSendSer

android.intent.action.RESPOND_VIA_MESSAGE

Android Permissions

53d6a5163b32450adb0ac15d772f8633f87d39948bf4cf151c25d136855daf02.bin

Permissions

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.BIND_DEVICE_ADMIN

android.permission.WAKE_LOCK

com.android.alarm.permission.SET_ALARM

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.DEVICE_POWER

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_CONTACTS

android.permission.VIBRATE

android.permission.CALL_PHONE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.PROCESS_OUTGOING_CALLS

android.permission.MODIFY_PHONE_STATE

android.permission.WRITE_APN_SETTINGS

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_NETWORK_STATE

Sharing

General

Malware Config

Signatures

Files

com.bafengcinama.mediaplayer

ui.MainActivity

Activities

ui.MainActivity

ui.AdminActivity

ui.ComposeNoteActivity

Permissions

Receivers

oOO.ooooOOOooooO

oOO.ooOoOOOOooO

oOO.oOooOOOooOooOo

oOO.oOooOOoooooOOooOo

oOO.oOooOOOooooOo

oOO.ooOOOOoo

oOOoO.ooOOOoOOooOoooo

oOO.ooOOOoOOooOoooo

oOO.ooOOOOOooO

oOoooo.ooOOOoOOooOoooo

Services

service.MainService

service.HheadlessNoteSendSer

Android Permissions

53d6a5163b32450adb0ac15d772f8633f87d39948bf4cf151c25d136855daf02.bin