7522719277634e660c196df044e06cea9c4525f71e42c158f175cb64b2172ce9[.]bin

Sharing

Copy URL Twitter E-mail

General

Target
7522719277634e660c196df044e06cea9c4525f71e42c158f175cb64b2172ce9.bin
Size 3.3MB
Sample240809-16egzssaql
SHA256 7522719277634e660c196df044e06cea9c4525f71e42c158f175cb64b2172ce9
MD5 762bc8602b8151da1f5a199651b1238f
SHA1 ef046702c465de43311d53167bcab4d95f0ec8c1
SHA512 97c8ca4c6bb4fa4cc52cff7cfaaf7a9700fea26c7d1275cd9b324f6632630d4f37ebd9423d4d4a77ff951a7208498dc36daffb70d269435f16d32be11936582c
SSDEEP 49152:O+Z+jG9XFAIibJNIGHasF0el/QGzL17Nm1sL9v2vugo0mPSqm48zPAh+:1nDhiQGHasaeP/1o1sL9Ougo0ZqJii+
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE

Requests dangerous framework permissions 9 IoCs

description	ioc
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to send SMS messages.	android.permission.SEND_SMS

File Explorer

7522719277634e660c196df044e06cea9c4525f71e42c158f175cb64b2172ce9.bin

.apk 3.3MB

7522719277634e660c196df044e06cea9c4525f71e42c158f175cb64b2172ce9.bin

SHA256 7522719277634e660c196df044e06cea9c4525f71e42c158f175cb64b2172ce9
MD5 762bc8602b8151da1f5a199651b1238f
SHA1 ef046702c465de43311d53167bcab4d95f0ec8c1
SHA512 97c8ca4c6bb4fa4cc52cff7cfaaf7a9700fea26c7d1275cd9b324f6632630d4f37ebd9423d4d4a77ff951a7208498dc36daffb70d269435f16d32be11936582c
SSDEEP 49152:O+Z+jG9XFAIibJNIGHasF0el/QGzL17Nm1sL9v2vugo0mPSqm48zPAh+:1nDhiQGHasaeP/1o1sL9Ougo0ZqJii+
MD5 SHA1 SHA512 SSDEEP

android

rice.crash.direct

nephew.cricket.jewel.ITuIsYnXoBmFmDnEiHzPpRaLcGkGfMkAnGgTqFwMtXrBeSrPbRq

nephew.cricket.jewel.WWmTdJlQeSwFfPzMlOzWiZqTjEqSuKfXfZgMiIbQqPs

nephew.cricket.jewel.YRgUsTiXeZpNiJrOf

nephew.cricket.jewel.YItSoUxYjCwNmIwBsOgGcRlJbYiWn

nephew.cricket.jewel.ZZsYeHnKcIbJnWsLqLzBjFfJkOaEiJxUeFeJdCbAgTrBqZkChOyXjQt

nephew.cricket.jewel.BMrUiMcIeWkSgPxPuWqRlWmZxHnWmCaIeUfPkFhRuIqCwUyNsSsRq

nephew.cricket.jewel.OChKtKpOcScLbCbFaXaDlMkZzMsAeScHmIcNpNiQcKpGaRtLlJmQaAi

nephew.cricket.jewel.INpBtCiWmRdDuYyTyMtWpJhBzJnMhRrTsYxIhCoYgIjGiZiUkGaXtFu

nephew.cricket.jewel.SWkYzMfTfHwZkSqGzQuAgSjYh

nephew.cricket.jewel.BWtHyIpQdUjQkGiIfPrGz

nephew.cricket.jewel.NMmJaOaElWiLbUy

nephew.cricket.jewel.SPcKlEpSoKbLgWcWkUxGsToNrTqNhAlRhFkOcRwBaWbMt

nephew.cricket.jewel.IFjUoFkYnNjXoWzEh

nephew.cricket.jewel.LUrAkTlQgNxNyWxJkKxCkPwEyTnUyGjEzOlOe

nephew.cricket.jewel.YZkSySxSaFzAgLgNlXjPuDgNcSqLs

nephew.cricket.jewel.MBpArOgFaWqNfCkQkJmBaQfDwKgKiDgMmNzCjAsWxJfIxLmPoXoAwIp

nephew.cricket.jewel.KSnKpXqCsKrHoKkIkWgQyArQdFlEeNtAxYxOhHgHmJzAnIfCw

nephew.cricket.jewel.DGmDnDiUfCoWzMyMzDzAfZxZh

nephew.cricket.jewel.MainActivity

android.intent.action.MAIN

nephew.cricket.jewel.KLiOcMyQxOiBgGkNuQyXoSiQzQaFhYkIjAuBc

nephew.cricket.jewel.ActivityChangeSmsManager

android.intent.action.SEND android.intent.action.SENDTO

nephew.cricket.jewel.NBuLyYbWcAuOu

nephew.cricket.jewel.AOxUiWaNaYrAiAoKuBjLeJnLgJpMxHdJuGsNrQcYePcPtHjPfFuQi

nephew.cricket.jewel.ActivityGenerateFakeSMS

nephew.cricket.jewel.NWsMjFtWyLzBqFdZbWwLaQhClImIlLsJpGgOdFfNeIyTpTaUgWsBp

nephew.cricket.jewel.ActivityEnableAccessibility

nephew.cricket.jewel.EZjHnWhFaAiUsCoJeMsFrLz

nephew.cricket.jewel.ActivityDozeAndPermissions

nephew.cricket.jewel.KAfHlIh

nephew.cricket.jewel.ActivityPlayProtect

nephew.cricket.jewel.MIySaQhWfNaAqGxSgNaRwRfHfBkPrQbJjDyCsFb

nephew.cricket.jewel.ActivityAllPermissions

nephew.cricket.jewel.HPcIhYsLyDnUxQpPqOcMsSmIxBkXdFrHbYtEmMtKuPiJyUpOhXiGe

nephew.cricket.jewel.ActivityShowAlert

nephew.cricket.jewel.LMzCxTyGb

nephew.cricket.jewel.AZxBtZxGsQnLhGlOr

nephew.cricket.jewel.ActivityWebViewPush

nephew.cricket.jewel.KOhTcEbHu

nephew.cricket.jewel.SOjAuHwSdTqCtDdNzKmUjMnFaKo

nephew.cricket.jewel.ActivityInjection

nephew.cricket.jewel.YUrCwLmBoTdZhOwTcXqZsSpHuTwJeMbJs

nephew.cricket.jewel.ActivityToast

nephew.cricket.jewel.TEuPrBmWuDjGeGrSlUyIkLeIg

nephew.cricket.jewel.ZIhItUnWjSdEiPiIfOxRlJkKuUuHaInCjZlEsFqTxQkPfPcFcZh

nephew.cricket.jewel.UnlockScreen

nephew.cricket.jewel.GXsZwWoYlJd

nephew.cricket.jewel.DarkenScreen

nephew.cricket.jewel.IXxJiEnJrAxDaSpXdQkGcFaGnAoQtEiFlYfLmAzTjJtTsAg

nephew.cricket.jewel.ActivityDeviceAdmin

nephew.cricket.jewel.RXcTeWg

nephew.cricket.jewel.AlienAccessibilityWebViewActivity

nephew.cricket.jewel.JLfXjWdWzTfXcKxCbUhDiHmKhImDaOnWsChIxDaKw

nephew.cricket.jewel.MBiWtUtImWtPuPgCi

nephew.cricket.jewel.OOmNsPhCn

nephew.cricket.jewel.GGwYnPgHcRlFwMtTuZfUaHjQlPtCrGsMqXqDjMdQfImCyLwAzRhQrGf

nephew.cricket.jewel.UXdXpDbUeBqGdRrUwMmKoJrPmBkFxBxLiMa

nephew.cricket.jewel.CSrQwTyXfNeSaMxEnBtTeOnRrRfEsSm

nephew.cricket.jewel.EWzNcJxQtUcRm

nephew.cricket.jewel.LWlCiBhNqCpSwGbMoNkAxTpAiKyEqGlNeYgJuWiQkGfFfYbJuNiIwEo

nephew.cricket.jewel.GRgYiBaQoEoPjBdZsLzGcGlTyGuWbCmWjWdXtJkWsLbFjAnOuBl

Android Permissions

7522719277634e660c196df044e06cea9c4525f71e42c158f175cb64b2172ce9.bin

Permissions

android.permission.INTERNET

android.permission.CALL_PHONE

android.permission.REORDER_TASKS

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.RECEIVE_SMS

android.permission.READ_CONTACTS

android.permission.WRITE_SMS

android.permission.READ_SMS

android.permission.CHANGE_WIFI_MULTICAST_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.DISABLE_KEYGUARD

android.permission.VIBRATE

android.permission.READ_PHONE_STATE

android.permission.FOREGROUND_SERVICE

android.permission.READ_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_WIFI_STATE

android.permission.REQUEST_DELETE_PACKAGES

android.permission.WAKE_LOCK

android.permission.GET_ACCOUNTS

android.permission.SEND_SMS

android.permission.FOREGROUND_SERVICE

Sharing

General

Malware Config

Signatures

File Explorer

7522719277634e660c196df044e06cea9c4525f71e42c158f175cb64b2172ce9.bin

nephew.cricket.jewel.ITuIsYnXoBmFmDnEiHzPpRaLcGkGfMkAnGgTqFwMtXrBeSrPbRq

nephew.cricket.jewel.WWmTdJlQeSwFfPzMlOzWiZqTjEqSuKfXfZgMiIbQqPs

nephew.cricket.jewel.YRgUsTiXeZpNiJrOf

nephew.cricket.jewel.YItSoUxYjCwNmIwBsOgGcRlJbYiWn

nephew.cricket.jewel.ZZsYeHnKcIbJnWsLqLzBjFfJkOaEiJxUeFeJdCbAgTrBqZkChOyXjQt

nephew.cricket.jewel.BMrUiMcIeWkSgPxPuWqRlWmZxHnWmCaIeUfPkFhRuIqCwUyNsSsRq

nephew.cricket.jewel.OChKtKpOcScLbCbFaXaDlMkZzMsAeScHmIcNpNiQcKpGaRtLlJmQaAi

nephew.cricket.jewel.INpBtCiWmRdDuYyTyMtWpJhBzJnMhRrTsYxIhCoYgIjGiZiUkGaXtFu

nephew.cricket.jewel.SWkYzMfTfHwZkSqGzQuAgSjYh

nephew.cricket.jewel.BWtHyIpQdUjQkGiIfPrGz

nephew.cricket.jewel.NMmJaOaElWiLbUy

nephew.cricket.jewel.SPcKlEpSoKbLgWcWkUxGsToNrTqNhAlRhFkOcRwBaWbMt

nephew.cricket.jewel.IFjUoFkYnNjXoWzEh

nephew.cricket.jewel.LUrAkTlQgNxNyWxJkKxCkPwEyTnUyGjEzOlOe

nephew.cricket.jewel.YZkSySxSaFzAgLgNlXjPuDgNcSqLs

nephew.cricket.jewel.MBpArOgFaWqNfCkQkJmBaQfDwKgKiDgMmNzCjAsWxJfIxLmPoXoAwIp

nephew.cricket.jewel.KSnKpXqCsKrHoKkIkWgQyArQdFlEeNtAxYxOhHgHmJzAnIfCw

nephew.cricket.jewel.DGmDnDiUfCoWzMyMzDzAfZxZh

nephew.cricket.jewel.MainActivity

nephew.cricket.jewel.KLiOcMyQxOiBgGkNuQyXoSiQzQaFhYkIjAuBc

nephew.cricket.jewel.ActivityChangeSmsManager

nephew.cricket.jewel.NBuLyYbWcAuOu

nephew.cricket.jewel.AOxUiWaNaYrAiAoKuBjLeJnLgJpMxHdJuGsNrQcYePcPtHjPfFuQi

nephew.cricket.jewel.ActivityGenerateFakeSMS

nephew.cricket.jewel.NWsMjFtWyLzBqFdZbWwLaQhClImIlLsJpGgOdFfNeIyTpTaUgWsBp

nephew.cricket.jewel.ActivityEnableAccessibility

nephew.cricket.jewel.EZjHnWhFaAiUsCoJeMsFrLz

nephew.cricket.jewel.ActivityDozeAndPermissions

nephew.cricket.jewel.KAfHlIh

nephew.cricket.jewel.ActivityPlayProtect

nephew.cricket.jewel.MIySaQhWfNaAqGxSgNaRwRfHfBkPrQbJjDyCsFb

nephew.cricket.jewel.ActivityAllPermissions

nephew.cricket.jewel.HPcIhYsLyDnUxQpPqOcMsSmIxBkXdFrHbYtEmMtKuPiJyUpOhXiGe

nephew.cricket.jewel.ActivityShowAlert

nephew.cricket.jewel.LMzCxTyGb

nephew.cricket.jewel.AZxBtZxGsQnLhGlOr

nephew.cricket.jewel.ActivityWebViewPush

nephew.cricket.jewel.KOhTcEbHu

nephew.cricket.jewel.SOjAuHwSdTqCtDdNzKmUjMnFaKo

nephew.cricket.jewel.ActivityInjection

nephew.cricket.jewel.YUrCwLmBoTdZhOwTcXqZsSpHuTwJeMbJs

nephew.cricket.jewel.ActivityToast

nephew.cricket.jewel.TEuPrBmWuDjGeGrSlUyIkLeIg

nephew.cricket.jewel.ZIhItUnWjSdEiPiIfOxRlJkKuUuHaInCjZlEsFqTxQkPfPcFcZh

nephew.cricket.jewel.UnlockScreen

nephew.cricket.jewel.GXsZwWoYlJd

nephew.cricket.jewel.DarkenScreen

nephew.cricket.jewel.IXxJiEnJrAxDaSpXdQkGcFaGnAoQtEiFlYfLmAzTjJtTsAg

nephew.cricket.jewel.ActivityDeviceAdmin

nephew.cricket.jewel.RXcTeWg

nephew.cricket.jewel.AlienAccessibilityWebViewActivity

nephew.cricket.jewel.JLfXjWdWzTfXcKxCbUhDiHmKhImDaOnWsChIxDaKw

nephew.cricket.jewel.MBiWtUtImWtPuPgCi

nephew.cricket.jewel.OOmNsPhCn

nephew.cricket.jewel.GGwYnPgHcRlFwMtTuZfUaHjQlPtCrGsMqXqDjMdQfImCyLwAzRhQrGf

nephew.cricket.jewel.UXdXpDbUeBqGdRrUwMmKoJrPmBkFxBxLiMa

nephew.cricket.jewel.CSrQwTyXfNeSaMxEnBtTeOnRrRfEsSm

nephew.cricket.jewel.EWzNcJxQtUcRm

nephew.cricket.jewel.LWlCiBhNqCpSwGbMoNkAxTpAiKyEqGlNeYgJuWiQkGfFfYbJuNiIwEo

nephew.cricket.jewel.GRgYiBaQoEoPjBdZsLzGcGlTyGuWbCmWjWdXtJkWsLbFjAnOuBl

nephew.cricket.jewel.ServiceAccessibility

nephew.cricket.jewel.ServiceHiddenSMS

nephew.cricket.jewel.InitService

nephew.cricket.jewel.GlobalService

nephew.cricket.jewel.ServiceNL

nephew.cricket.jewel.ServiceShowNotification

nephew.cricket.jewel.ServiceNLStarter

nephew.cricket.jewel.ServiceMessenger

nephew.cricket.jewel.ServiceApkInstaller

nephew.cricket.jewel.ServiceLockInject

nephew.cricket.jewel.ServiceAppLocker

nephew.cricket.jewel.ServiceToaster

nephew.cricket.jewel.AlienNotificationAndToastService

nephew.cricket.jewel.ReceiverAlarm