General

  • Target

    285cb8df3c0ac1a7392a09b21dd44d7b7065101db9c73a52c5407c5a37ed494a.bin

  • Size

    432KB

  • MD5

    7645a4b8e02ee49ab3a3202b07481fcc

  • SHA1

    6ec8b4f3d0a0eec5feed32524855a92fe1a3ade2

  • SHA256

    285cb8df3c0ac1a7392a09b21dd44d7b7065101db9c73a52c5407c5a37ed494a

  • SHA512

    488ecf667d81a20bf0208cc8622ea8092591136b65949ce94bbf19e423ca6507fc42d4892194d6cfa445834c95f4ecd9f7c7c346327af2de8629870ee052f78e

  • SSDEEP

    6144:RMDTZTc3So1Y+r0Qae9m9Vu1FPBWHbsOs4tF5DZe2L2VDXVCo0l46QmrtwDj9Au1:u6zY+r9vhO3F5QXVCBkRLjFZ++vcXXC

Score
6/10

Malware Config

Signatures

  • Attempts to obfuscate APK file format

    Applies obfuscation techniques to the APK format in order to hinder analysis

  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 11 IoCs

Files

  • 285cb8df3c0ac1a7392a09b21dd44d7b7065101db9c73a52c5407c5a37ed494a.bin
    .apk android arch:arm64

    ziao.yjkgsu.mmq.xpydw.bx.fx

    aie7.emf


Android Permissions

285cb8df3c0ac1a7392a09b21dd44d7b7065101db9c73a52c5407c5a37ed494a.bin

Permissions

njobc.nvlgtem.pezqleq

afpls.fbcxoe.frswxpl

mraj.whthctc.axhxkqf

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.VIBRATE

android.permission.CALL_PHONE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WAKE_LOCK

android.permission.INTERNET

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_CONTACTS

android.permission.READ_PHONE_STATE

android.permission.GET_ACCOUNTS

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.FOREGROUND_SERVICE

android.permission.POST_NOTIFICATIONS

android.permission.ACCESS_NOTIFICATION_POLICY