9e1f547d6661f1ee2fe8e7b0de5082ae763a0e62a9e15b1ab846c470d0d51e31[.]bin

General

Target
9e1f547d6661f1ee2fe8e7b0de5082ae763a0e62a9e15b1ab846c470d0d51e31.bin
Size 424KB
Sample240808-1y36davbmf
SHA256 9e1f547d6661f1ee2fe8e7b0de5082ae763a0e62a9e15b1ab846c470d0d51e31
MD5 200940456d5fff0cc32e7f6abf9bf27c
SHA1 e190a7657c291bc682865f6ed1cab2d4d31b9cf5
SHA512 dfa350248b0f9df59a2f16aadce12e196fe357f0f097f382a21632894cbd51aa6b7edc73b14f3f1d5dd5af5b8e7cddca8062535f02ff94bb4a2806a8392c3579
SSDEEP 12288:iYdwT+r9vhO3F5QXVCBkRLjFZ++vcXkbl:9au056K4FZ+ucXkbl
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Attempts to obfuscate APK file format
Applies obfuscation techniques to the APK format in order to hinder analysis

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE

Requests dangerous framework permissions 11 IoCs

description	ioc
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS

File Explorer

9e1f547d6661f1ee2fe8e7b0de5082ae763a0e62a9e15b1ab846c470d0d51e31.bin

.apk 424KB

9e1f547d6661f1ee2fe8e7b0de5082ae763a0e62a9e15b1ab846c470d0d51e31.bin

SHA256 9e1f547d6661f1ee2fe8e7b0de5082ae763a0e62a9e15b1ab846c470d0d51e31
MD5 200940456d5fff0cc32e7f6abf9bf27c
SHA1 e190a7657c291bc682865f6ed1cab2d4d31b9cf5
SHA512 dfa350248b0f9df59a2f16aadce12e196fe357f0f097f382a21632894cbd51aa6b7edc73b14f3f1d5dd5af5b8e7cddca8062535f02ff94bb4a2806a8392c3579
SSDEEP 12288:iYdwT+r9vhO3F5QXVCBkRLjFZ++vcXkbl:9au056K4FZ+ucXkbl
MD5 SHA1 SHA512 SSDEEP

android arch:arm64

wbhv.woqvwt.qll.cnnuk.jp.bk

Android Permissions

9e1f547d6661f1ee2fe8e7b0de5082ae763a0e62a9e15b1ab846c470d0d51e31.bin

Permissions

njobc.nvlgtem.pezqleq

afpls.fbcxoe.frswxpl

mraj.whthctc.axhxkqf

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.VIBRATE

android.permission.CALL_PHONE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WAKE_LOCK

android.permission.INTERNET

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_CONTACTS

android.permission.READ_PHONE_STATE

android.permission.GET_ACCOUNTS

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.FOREGROUND_SERVICE

android.permission.POST_NOTIFICATIONS

android.permission.ACCESS_NOTIFICATION_POLICY

9e1f547d6661f1ee2fe8e7b0de5082ae763a0e62a9e15b1ab846c470d0d51e31.bin

qik7.emf

qik7.fd

qik7.hyzr

qik7.yinkar

qik7.tmttc

qik7.gmotaf

qik7.frf

qik7.f

qik7.g

qik7.h

qik7.awnwekr

qik7.kjqzlc

qik7.kjyi

qik7.a

qik7.b

qik7.q

qik7.d

qik7.e

qik7.s

qik7.z

qik7.i

qik7.anat

qik7.th

qik7.wjjpjz

Sharing

General

Malware Config

Signatures

File Explorer

9e1f547d6661f1ee2fe8e7b0de5082ae763a0e62a9e15b1ab846c470d0d51e31.bin

qik7.emf

qik7.fd

qik7.hyzr

qik7.yinkar

qik7.tmttc

qik7.gmotaf

qik7.frf

qik7.f

qik7.g

qik7.h

qik7.awnwekr

qik7.kjqzlc

qik7.kjyi

qik7.a

qik7.b

qik7.q

qik7.d

qik7.e

qik7.s

qik7.z

qik7.i

qik7.anat

qik7.th

qik7.wjjpjz

Android Permissions

9e1f547d6661f1ee2fe8e7b0de5082ae763a0e62a9e15b1ab846c470d0d51e31.bin