7ff64f6a0ebac8b2601ec169f0172e589a80f6f1347034f9fa368187f427b70c[.]bin

Sharing

Copy URL Twitter E-mail

General

Target
7ff64f6a0ebac8b2601ec169f0172e589a80f6f1347034f9fa368187f427b70c.bin
Size 3.5MB
Sample240809-15nn9swbqf
SHA256 7ff64f6a0ebac8b2601ec169f0172e589a80f6f1347034f9fa368187f427b70c
MD5 82a844bd0c82f91381b9d567adf014e5
SHA1 61be931e88b3ff5ac6b42216ad6a22c01b7105fd
SHA512 eb86ae1c8c25cae023d5a2296701514cabfa42f5cd1e1dc3d2e8aba31f06320e7a4ad33e8922bc82d0cc8b0f81ac459d88ca041ef46cfc7ff48f6ed50d3ed8fa
SSDEEP 98304:7hpBRKPfW06MTkpv9HlRCCdtwvO4pE17rDHzJdrSwxIYc4tUl:9pKTvTkN92ewv7YHzHrSwxTe
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE

Requests dangerous framework permissions 10 IoCs

description	ioc
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS

File Explorer

7ff64f6a0ebac8b2601ec169f0172e589a80f6f1347034f9fa368187f427b70c.bin

.apk 3.5MB

7ff64f6a0ebac8b2601ec169f0172e589a80f6f1347034f9fa368187f427b70c.bin

SHA256 7ff64f6a0ebac8b2601ec169f0172e589a80f6f1347034f9fa368187f427b70c
MD5 82a844bd0c82f91381b9d567adf014e5
SHA1 61be931e88b3ff5ac6b42216ad6a22c01b7105fd
SHA512 eb86ae1c8c25cae023d5a2296701514cabfa42f5cd1e1dc3d2e8aba31f06320e7a4ad33e8922bc82d0cc8b0f81ac459d88ca041ef46cfc7ff48f6ed50d3ed8fa
SSDEEP 98304:7hpBRKPfW06MTkpv9HlRCCdtwvO4pE17rDHzJdrSwxIYc4tUl:9pKTvTkN92ewv7YHzHrSwxTe
MD5 SHA1 SHA512 SSDEEP

android

protect.onion.secret

collect.length.garden.HQqQaWlPdTsUxMbBeGgZjHcAfItGdOdJjOgEmRnSw

collect.length.garden.SBfMaDdYgXuSmKiPzSgYxJuNdZh

collect.length.garden.PSbZkWcGwZjMdTnKfLsMdIqIjTzEpSyRdTiQnGl

collect.length.garden.XYqYrWiJgXtMkLzYqTfZiElMiTqMzLiCkIi

collect.length.garden.PYxAiBxMuJfZtDxEdHdZwRaGjWjXrUfBnKgXaUkZpQaQoOkClNb

collect.length.garden.MTsZaMpYpJbUbMiNmKmDiSz

collect.length.garden.MPjSjTzAtDsZzZcAnKoXuHf

collect.length.garden.RDmAzGwTsFxEcUrGlUh

collect.length.garden.SZbIzPaEmGsKc

collect.length.garden.YXrOkDyCdPdAdZxSqZeJlTfAkIoWpLdWiIoTaLlIkJl

collect.length.garden.WXnJwQpSuMyXdTaEjSrYzDrCiWeCeYkCdOmIjZfXuOx

collect.length.garden.WFcCmQwCpClSdNeHlEeSkFbFjDsHgWs

collect.length.garden.BUiJeWcNjEgQrYlKhAwXeBxBqDgGp

collect.length.garden.AEmKoYmFoNoSpBqCqTuQu

collect.length.garden.MNkDxZqOtMpClHgDpJmNqBlFtAdZiOuLlFtJlOhMjRrMkUy

collect.length.garden.ATzZoJaXsGoExBqWzSsYuYcKwJdPrXbRoOfCoRiUtGwOyIfYcLr

collect.length.garden.KBgSoMsKyLfAyEqDwBy

collect.length.garden.MainActivity

android.intent.action.MAIN

collect.length.garden.OEkJkHkXfNsLtKbPlYjPr

collect.length.garden.JMuYxSpMk

collect.length.garden.ActivityChangeSmsManager

android.intent.action.SEND android.intent.action.SENDTO

collect.length.garden.OFgAiNdEwHxMpZiBkLgJxFkTuIcArGjHhGi

collect.length.garden.JJiFfDuAlNnUoBkGiLqGdPlFaHyZxNeOhFyFlJzCxKlJiBtDeMm

collect.length.garden.ActivityGenerateFakeSMS

collect.length.garden.CSoUnRzWoZcNsHrIjIyCaTtTePgBsBfDd

collect.length.garden.UJwOuUmZjCrKrApZmDgGwHeFkRzSdLtFmUxRuNnJxUhFwAoMoXbZs

collect.length.garden.ActivityEnableAccessibility

collect.length.garden.TUwSqFxZp

collect.length.garden.MNpNgNoBhLyMzHeAbQbEz

collect.length.garden.ActivityDozeAndPermissions

collect.length.garden.RKtJpIw

collect.length.garden.ActivityPlayProtect

collect.length.garden.QYfEiZfBxKmDcHqJlFbLfGiXrUtEaZrEgSaJeYdQpSjCcQyZhGc

collect.length.garden.RIfHdDbBcGzBzEkQcUbKnJgEkUxDgYrHmQq

collect.length.garden.ActivityAllPermissions

collect.length.garden.TSkHqDdOnIoAmWqSj

collect.length.garden.ActivityShowAlert

collect.length.garden.QRyTnUoArLz

collect.length.garden.RLfBhJuNxZyLkJxOhXtAkRyCeOtTeZjGxTfLwLlGzSmJdXxWmAiZzDe

collect.length.garden.ActivityWebViewPush

collect.length.garden.OMtXeKs

collect.length.garden.ActivityInjection

collect.length.garden.DAnWtTyAjLhJgWbUuWtTsOmMhAcRbEwLlRmIcPqEjWo

collect.length.garden.CIhTrHcNkWzCoDnQtWzGsDgEtDeYsRrGgFlZsAbEjUcUeMaXr

collect.length.garden.ActivityToast

collect.length.garden.KZtNzApFgIlPcPkTiMdFcMhFfBxGqUoXxBjUrXmWaNyYsFuNf

collect.length.garden.UnlockScreen

collect.length.garden.XGhCjEuRlOdTrZcAmOg

collect.length.garden.DarkenScreen

collect.length.garden.TXxMxUzYiWgKkCsHfKmDkWfYfRkNpQtLrLhPx

collect.length.garden.ActivityDeviceAdmin

collect.length.garden.WRnCaLqMbScErRgMjXgRlCuLlLsQiFkDrCwIhHtAdDk

collect.length.garden.AlienAccessibilityWebViewActivity

collect.length.garden.HYqSwTxRgPeNa

collect.length.garden.KYnDqQtFqIoMlLjOgIoOnZaWoAyJuSbRjPwGyGb

collect.length.garden.ENfJfSwHbYkAmJkHjScMhLwGjYaPfBnGyKxZwChTdGz

collect.length.garden.WJbBkFfRiJnAcQhUlQn

collect.length.garden.AUgKzXzFiJiWjLwAfUgTxCo

collect.length.garden.BBuZeOxZyPnFzPrXmBfLnTbXxLxZhBiTxYiJiBxBsQmFh

collect.length.garden.MUyJrIaCrFzKtUfDfCzDmZcJmDxUpKdRnAjSeQeCdDoCqTmPtCkHzEf

collect.length.garden.IYpKzOdKpMbUiZfDsDbTeFjEnUiYeMi

collect.length.garden.ILlCdRqBzBzXtCsJgEtEjXsYxIoCuSxIaJhBwNeNzYgFiTfPwFe

Android Permissions

7ff64f6a0ebac8b2601ec169f0172e589a80f6f1347034f9fa368187f427b70c.bin

Permissions

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.SET_ALARM

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.REQUEST_DELETE_PACKAGES

android.permission.READ_SMS

android.permission.READ_EXTERNAL_STORAGE

android.permission.ACCESS_WIFI_STATE

android.permission.SEND_SMS

android.permission.FOREGROUND_SERVICE

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_CONTACTS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.CALL_PHONE

android.permission.GET_ACCOUNTS

android.permission.REORDER_TASKS

android.permission.READ_PHONE_STATE

android.permission.DISABLE_KEYGUARD

android.permission.CHANGE_NETWORK_STATE

android.permission.VIBRATE

android.permission.DISABLE_KEYGUARD

android.permission.WRITE_SMS

android.permission.RECEIVE_SMS

android.permission.INTERNET

android.permission.WAKE_LOCK

Sharing

General

Malware Config

Signatures

File Explorer

7ff64f6a0ebac8b2601ec169f0172e589a80f6f1347034f9fa368187f427b70c.bin

collect.length.garden.HQqQaWlPdTsUxMbBeGgZjHcAfItGdOdJjOgEmRnSw

collect.length.garden.SBfMaDdYgXuSmKiPzSgYxJuNdZh

collect.length.garden.PSbZkWcGwZjMdTnKfLsMdIqIjTzEpSyRdTiQnGl

collect.length.garden.XYqYrWiJgXtMkLzYqTfZiElMiTqMzLiCkIi

collect.length.garden.PYxAiBxMuJfZtDxEdHdZwRaGjWjXrUfBnKgXaUkZpQaQoOkClNb

collect.length.garden.MTsZaMpYpJbUbMiNmKmDiSz

collect.length.garden.MPjSjTzAtDsZzZcAnKoXuHf

collect.length.garden.RDmAzGwTsFxEcUrGlUh

collect.length.garden.SZbIzPaEmGsKc

collect.length.garden.YXrOkDyCdPdAdZxSqZeJlTfAkIoWpLdWiIoTaLlIkJl

collect.length.garden.WXnJwQpSuMyXdTaEjSrYzDrCiWeCeYkCdOmIjZfXuOx

collect.length.garden.WFcCmQwCpClSdNeHlEeSkFbFjDsHgWs

collect.length.garden.BUiJeWcNjEgQrYlKhAwXeBxBqDgGp

collect.length.garden.AEmKoYmFoNoSpBqCqTuQu

collect.length.garden.MNkDxZqOtMpClHgDpJmNqBlFtAdZiOuLlFtJlOhMjRrMkUy

collect.length.garden.ATzZoJaXsGoExBqWzSsYuYcKwJdPrXbRoOfCoRiUtGwOyIfYcLr

collect.length.garden.KBgSoMsKyLfAyEqDwBy

collect.length.garden.MainActivity

collect.length.garden.OEkJkHkXfNsLtKbPlYjPr

collect.length.garden.JMuYxSpMk

collect.length.garden.ActivityChangeSmsManager

collect.length.garden.OFgAiNdEwHxMpZiBkLgJxFkTuIcArGjHhGi

collect.length.garden.JJiFfDuAlNnUoBkGiLqGdPlFaHyZxNeOhFyFlJzCxKlJiBtDeMm

collect.length.garden.ActivityGenerateFakeSMS

collect.length.garden.CSoUnRzWoZcNsHrIjIyCaTtTePgBsBfDd

collect.length.garden.UJwOuUmZjCrKrApZmDgGwHeFkRzSdLtFmUxRuNnJxUhFwAoMoXbZs

collect.length.garden.ActivityEnableAccessibility

collect.length.garden.TUwSqFxZp

collect.length.garden.MNpNgNoBhLyMzHeAbQbEz

collect.length.garden.ActivityDozeAndPermissions

collect.length.garden.RKtJpIw

collect.length.garden.ActivityPlayProtect

collect.length.garden.QYfEiZfBxKmDcHqJlFbLfGiXrUtEaZrEgSaJeYdQpSjCcQyZhGc

collect.length.garden.RIfHdDbBcGzBzEkQcUbKnJgEkUxDgYrHmQq

collect.length.garden.ActivityAllPermissions

collect.length.garden.TSkHqDdOnIoAmWqSj

collect.length.garden.ActivityShowAlert

collect.length.garden.QRyTnUoArLz

collect.length.garden.RLfBhJuNxZyLkJxOhXtAkRyCeOtTeZjGxTfLwLlGzSmJdXxWmAiZzDe

collect.length.garden.ActivityWebViewPush

collect.length.garden.OMtXeKs

collect.length.garden.ActivityInjection

collect.length.garden.DAnWtTyAjLhJgWbUuWtTsOmMhAcRbEwLlRmIcPqEjWo

collect.length.garden.CIhTrHcNkWzCoDnQtWzGsDgEtDeYsRrGgFlZsAbEjUcUeMaXr

collect.length.garden.ActivityToast

collect.length.garden.KZtNzApFgIlPcPkTiMdFcMhFfBxGqUoXxBjUrXmWaNyYsFuNf

collect.length.garden.UnlockScreen

collect.length.garden.XGhCjEuRlOdTrZcAmOg

collect.length.garden.DarkenScreen

collect.length.garden.TXxMxUzYiWgKkCsHfKmDkWfYfRkNpQtLrLhPx

collect.length.garden.ActivityDeviceAdmin

collect.length.garden.WRnCaLqMbScErRgMjXgRlCuLlLsQiFkDrCwIhHtAdDk

collect.length.garden.AlienAccessibilityWebViewActivity

collect.length.garden.HYqSwTxRgPeNa

collect.length.garden.KYnDqQtFqIoMlLjOgIoOnZaWoAyJuSbRjPwGyGb

collect.length.garden.ENfJfSwHbYkAmJkHjScMhLwGjYaPfBnGyKxZwChTdGz

collect.length.garden.WJbBkFfRiJnAcQhUlQn

collect.length.garden.AUgKzXzFiJiWjLwAfUgTxCo

collect.length.garden.BBuZeOxZyPnFzPrXmBfLnTbXxLxZhBiTxYiJiBxBsQmFh

collect.length.garden.MUyJrIaCrFzKtUfDfCzDmZcJmDxUpKdRnAjSeQeCdDoCqTmPtCkHzEf

collect.length.garden.IYpKzOdKpMbUiZfDsDbTeFjEnUiYeMi

collect.length.garden.ILlCdRqBzBzXtCsJgEtEjXsYxIoCuSxIaJhBwNeNzYgFiTfPwFe

collect.length.garden.ServiceAccessibility

collect.length.garden.ServiceHiddenSMS

collect.length.garden.InitService

collect.length.garden.GlobalService

collect.length.garden.ServiceNL

collect.length.garden.ServiceShowNotification

collect.length.garden.ServiceNLStarter

collect.length.garden.ServiceMessenger

collect.length.garden.bkp_ServiceApkInstaller

collect.length.garden.ServiceLockInject

collect.length.garden.ServiceAppLocker

collect.length.garden.ServiceToaster