250f0c2b7e7a232118d76fbde11d5246f1a39d185ca01fa97df7f8640c8e8cd4[.]bin

Sharing

Copy URL Twitter E-mail

General

Target

250f0c2b7e7a232118d76fbde11d5246f1a39d185ca01fa97df7f8640c8e8cd4.bin
Size

1.5MB
MD5

fd6a25b75729c49758697963123a358a
SHA1

29082c02f0d23ef239bea58b44ad27bb86d36a7b
SHA256

250f0c2b7e7a232118d76fbde11d5246f1a39d185ca01fa97df7f8640c8e8cd4
SHA512

0b5d629ab8f17280cf3c72ced7fc74b2fc6b881a1b7a8f529912deaef98c7ad7fb6c5fe112aff08f72945e08c18a7f947a21151e65f5bf89fcfa9a0ae212036d
SSDEEP

49152:MRQopKF3iFa/SvFB7yuLkIArFgKVLBO0V0zEQWUZH1nLOYvvh8J76Edoktr1k:+Q+Kt/Sz1LkIKV0zEQTH1LTvvOJXoktu

Score

6^/10

Malware Config

Signatures

Attempts to obfuscate APK file format
Applies obfuscation techniques to the APK format in order to hinder analysis

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE

Requests dangerous framework permissions 34 IoCs

description	ioc
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to access any geographic locations persisted in the user's shared collection.	android.permission.ACCESS_MEDIA_LOCATION
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Required to be able to access the camera device.	android.permission.CAMERA
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read image files from external storage.	android.permission.READ_MEDIA_IMAGES
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read audio files from external storage.	android.permission.READ_MEDIA_AUDIO
Required to be able to advertise and connect to nearby devices via Wi-Fi.	android.permission.NEARBY_WIFI_DEVICES
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows an application to read video files from external storage.	android.permission.READ_MEDIA_VIDEO
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an app to access location in the background.	android.permission.ACCESS_BACKGROUND_LOCATION
Allows an application to read SMS messages.	android.permission.READ_SMS
Required to be able to advertise to nearby Bluetooth devices.	android.permission.BLUETOOTH_ADVERTISE
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to collect component usage statistics.	android.permission.PACKAGE_USAGE_STATS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Required to be able to connect to paired Bluetooth devices.	android.permission.BLUETOOTH_CONNECT
Allows an application a broad access to external storage in scoped storage.	android.permission.MANAGE_EXTERNAL_STORAGE

Files

250f0c2b7e7a232118d76fbde11d5246f1a39d185ca01fa97df7f8640c8e8cd4.bin
.apk android arch:arm arch:arm64 arch:x86 arch:x64

com.nameown12

com.nameown12.p045l

Activities

com.nameown12.p045l

android.intent.action.MAIN

com.nameown12.p075f

android.intent.action.SEND
android.intent.action.SENDTO

com.hawk.young.abandon.end.Guponroad

android.intent.action.SEND

Permissions

android.permission.USES_POLICY_FORCE_LOCK
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.RECEIVE_SMS
com.oplus.permission.safe.APP_MANAGER
android.permission.RECEIVE_BOOT_COMPLETED
com.oppo.permission.safe.SECURITY
android.permission.ACCESS_MTP
android.permission.ACCESS_ADSERVICES_ATTRIBUTION
android.permission.UPDATE_APP_OPS_STATS
com.xiaomi.permission.ACCESS_SECURITY_CENTER
android.permission.GET_PACKAGE_SIZE
android.permission.ACCESS_MEDIA_LOCATION
android.permission.READ_EXTERNAL_STORAGE
android.permission.BLUETOOTH
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_MEDIA_STORAGE
android.permission.CAMERA
android.permission.FOREGROUND_SERVICE_REMOTE_MESSAGING
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.OVERRIDE_WIFI_CONFIG
com.oplus.permission.safe.AI_APP
com.oplus.permission.safe.POWER
com.oppo.launcher.permission.READ_SETTINGS
android.permission.GET_TASKS
android.permission.ADD_VOICEMAIL
android.permission.CLEAR_APP_USER_DATA
android.permission.ACCESS_NOTIFICATION_POLICY
android.permission.READ_PHONE_STATE
heytap.permission.cloud.ACCESS_CLOUD
android.permission.DEVICE_POWER
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS
android.permission.WRITE_EXTERNAL_STORAGE
com.oppo.permission.safe.BACKUP
com.oppo.permission.RUTILCMD
android.permission.ACCESS_NETWORK_STATE
android.permission.READ_PHONE_STATE
com.oplus.permission.safe.BACKUP
android.permission.READ_BASIC_PHONE_STATE
com.coloros.codebook.permission.READ
oplus.permission.PHONE_CLONE_DATA_MIGRATION
android.permission.SYSTEM_ALERT_WINDOW
android.permission.READ_MEDIA_IMAGES
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
com.oplus.permission.safe.SETTINGS_SEARCH
android.permission.ACCESS_WIFI_STATE
com.google.android.gms.permission.AD_ID
android.permission.READ_MEDIA_AUDIO
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS
android.permission.NEARBY_WIFI_DEVICES
oppo.permission.OPPO_COMPONENT_SAFE
android.permission.WRITE_CONTACTS
android.permission.READ_MEDIA_VIDEO
android.permission.INTERACT_ACROSS_USERS_FULL
com.coloros.bootreg.permission.OPPO_BOOTREG_COMPLETED
android.permission.REQUEST_COMPANION_USE_DATA_IN_BACKGROUND
android.permission.WAKE_LOCK
com.google.android.gms.permission.ACTIVITY_RECOGNITION
android.permission.WRITE_SETTINGS
android.permission.DELETE_PACKAGES
android.permission.ACCESS_BACKGROUND_LOCATION
com.oplus.permission.safe.SECURITY
com.oplus.permission.safe.SAU
android.permission.USE_FINGERPRINT
android.permission.READ_SMS
android.permission.REQUEST_DELETE_PACKAGES
android.permission.MODIFY_PHONE_STATE
android.permission.BLUETOOTH_ADVERTISE
android.permission.INTERNET
com.oppo.launcher.permission.WRITE_SETTINGS
android.permission.BATTERY_STATS
android.permission.VIBRATE
com.google.android.providers.gsf.permission.READ_GSERVICES
android.permission.FOREGROUND_SERVICE
android.permission.MANAGE_APP_OPS_MODES
com.xiaomi.permission.ACCESS_SECURE_ELEMENT
android.permission.CALL_PHONE
com.coloros.operationManual.permission.tipsprovider
android.permission.ACCESS_WIFI_STATE
com.fundevs.app.mediaconverter.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
android.permission.REORDER_TASKS
android.permission.VIBRATE
android.permission.INTERNET
android.permission.FOREGROUND_SERVICE
android.permission.CLEAR_APP_CACHE
com.oplus.metis.factdata.permission.DATABASE
com.coloros.backuprestore.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
android.permission.INSTALL_SHORTCUT
android.permission.CHANGE_NETWORK_STATE
android.permission.PACKAGE_USAGE_STATS
android.permission.SEND_SMS
com.coloros.alarmclock.permission.ACCESS_PROVIDER
com.oplus.permission.safe.PASSWORD
android.permission.ACCESS_FINE_LOCATION
android.permission.POST_NOTIFICATIONS
oplus.permission.OPLUS_COMPONENT_SAFE
android.permission.INSTALL_PACKAGES
android.permission.ACCESS_COARSE_LOCATION
android.permission.READ_PHONE_STATE
android.permission.MANAGE_USB
com.android.permission.GET_INSTALLED_APPS
com.oplus.codebook.permission.BACKUP_AND_RESTORE
com.oplus.bootreg.permission.OPLUS_BOOTREG_COMPLETED
android.permission.WRITE_SETTINGS
android.permission.WAKE_LOCK
com.oplus.thirdkit.permission.SECURITY
android.permission.CHANGE_WIFI_STATE
android.permission.WRITE_SETTINGS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.POST_NOTIFICATIONS
android.permission.BLUETOOTH_CONNECT
com.oplus.permission.safe.PRIVATE
android.permission.ACCESS_ADSERVICES_AD_ID
android.permission.QUERY_ALL_PACKAGES
android.permission.FORCE_STOP_PACKAGES
android.permission.ACCESS_WIFI_STATE
android.permission.FOREGROUND_SERVICE_LOCATION
android.permission.REQUEST_COMPANION_RUN_IN_BACKGROUND
android.permission.PEERS_MAC_ADDRESS
com.oplus.permission.safe.SETTINGS
com.oplus.permission.safe.CONNECTIVITY
com.oppo.permission.safe.SAU
android.permission.ACCESS_NETWORK_STATE
android.permission.QUERY_ALL_PACKAGES
android.permission.WRITE_SECURE_SETTINGS
android.permission.MANAGE_EXTERNAL_STORAGE
android.permission.ACCESS_NETWORK_STATE
android.permission.REQUEST_DELETE_PACKAGES
com.oplus.permission.safe.PROTECT
android.permission.ACCESS_ADSERVICES_TOPICS
android.permission.CHANGE_COMPONENT_ENABLED_STATE
android.permission.INTERNET
android.permission.MANAGE_USERS
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
com.xiaomi.permission.AUTH_SERVICE
android.permission.GET_PACKAGE_SIZE
android.permission.FOREGROUND_SERVICE
android.permission.WAKE_LOCK

Receivers

com.nameown12.p078p

android.app.action.DEVICE_ADMIN_ENABLED
android.app.action.DEVICE_ADMIN_DISABLED

com.nameown12.p082q

android.provider.Telephony.SMS_RECEIVED

com.nameown12.p079x

android.provider.Telephony.SMS_DELIVER

com.nameown12.p042g

android.provider.Telephony.WAP_PUSH_DELIVER

com.nameown12.p060d

android.intent.action.BOOT_COMPLETED
android.intent.action.QUICKBOOT_POWERON
android.intent.action.USER_PRESENT
android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED
android.provider.Telephony.SMS_RECEIVED
android.intent.action.SCREEN_ON
android.intent.action.SCREEN_OFF
android.intent.action.EXTERNAL_APPLICATIONS_AVAILABLE
android.net.conn.CONNECTIVITY_CHANGE
android.net.wifi.WIFI_STATE_CHANGED
android.intent.action.DREAMING_STOPPED

com.hawk.young.abandon.end.Dclerkpioneer

com.runningsdk.action.REQUEST_SDK_RUNNING_ACTION
com.runningsdk.action.RESPONSE_SDK_RUNNING_ACTION

com.hawk.young.abandon.end.Espacemiss

android.intent.action.BOOT_COMPLETED
android.intent.action.MY_PACKAGE_REPLACED
android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED
android.intent.action.PHONE_STATE
android.hardware.usb.action.USB_STATE

com.hawk.young.abandon.end.Ytornadotourist

android.intent.action.MY_PACKAGE_REPLACED

com.hawk.young.abandon.end.Ncrawldiscover

android.intent.action.MEDIA_SCANNER_SCAN_FILE

com.hawk.young.abandon.end.Yribbonhappy

android.intent.action.MY_PACKAGE_REPLACED
android.intent.action.BOOT_COMPLETED
android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY
android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW
android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.TIME_SET
android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

Services

com.nameown12.p083p

android.intent.action.RESPOND_VIA_MESSAGE

com.nameown12.p024l

android.accessibilityservice.AccessibilityService

com.nameown12.p092o

android.service.notification.NotificationListenerService

Android Permissions

250f0c2b7e7a232118d76fbde11d5246f1a39d185ca01fa97df7f8640c8e8cd4.bin

Permissions

android.permission.USES_POLICY_FORCE_LOCK

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.RECEIVE_SMS

com.oplus.permission.safe.APP_MANAGER

android.permission.RECEIVE_BOOT_COMPLETED

com.oppo.permission.safe.SECURITY

android.permission.ACCESS_MTP

android.permission.ACCESS_ADSERVICES_ATTRIBUTION

android.permission.UPDATE_APP_OPS_STATS

com.xiaomi.permission.ACCESS_SECURITY_CENTER

android.permission.GET_PACKAGE_SIZE

android.permission.ACCESS_MEDIA_LOCATION

android.permission.READ_EXTERNAL_STORAGE

android.permission.BLUETOOTH

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_MEDIA_STORAGE

android.permission.CAMERA

android.permission.FOREGROUND_SERVICE_REMOTE_MESSAGING

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.OVERRIDE_WIFI_CONFIG

com.oplus.permission.safe.AI_APP

com.oplus.permission.safe.POWER

com.oppo.launcher.permission.READ_SETTINGS

android.permission.GET_TASKS

android.permission.ADD_VOICEMAIL

android.permission.CLEAR_APP_USER_DATA

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.READ_PHONE_STATE

heytap.permission.cloud.ACCESS_CLOUD

android.permission.DEVICE_POWER

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.WRITE_EXTERNAL_STORAGE

com.oppo.permission.safe.BACKUP

com.oppo.permission.RUTILCMD

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

com.oplus.permission.safe.BACKUP

android.permission.READ_BASIC_PHONE_STATE

com.coloros.codebook.permission.READ

oplus.permission.PHONE_CLONE_DATA_MIGRATION

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_MEDIA_IMAGES

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.WRITE_EXTERNAL_STORAGE

com.oplus.permission.safe.SETTINGS_SEARCH

android.permission.ACCESS_WIFI_STATE

com.google.android.gms.permission.AD_ID

android.permission.READ_MEDIA_AUDIO

Sharing

General

Malware Config

Signatures

Files

com.nameown12

com.nameown12.p045l

Activities

com.nameown12.p045l

com.nameown12.p075f

com.hawk.young.abandon.end.Guponroad

Permissions

Receivers

com.nameown12.p078p

com.nameown12.p082q

com.nameown12.p079x

com.nameown12.p042g

com.nameown12.p060d

com.hawk.young.abandon.end.Dclerkpioneer

com.hawk.young.abandon.end.Espacemiss

com.hawk.young.abandon.end.Ytornadotourist

com.hawk.young.abandon.end.Ncrawldiscover

com.hawk.young.abandon.end.Yribbonhappy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

Services

com.nameown12.p083p

com.nameown12.p024l

com.nameown12.p092o

Android Permissions

250f0c2b7e7a232118d76fbde11d5246f1a39d185ca01fa97df7f8640c8e8cd4.bin