e9df968891554f1a2c46b3fdc0c975df09306412271eeec17e9fe5ab9be8040d[.]bin

General

Target

e9df968891554f1a2c46b3fdc0c975df09306412271eeec17e9fe5ab9be8040d.bin
Size

4.3MB
MD5

19e582e61a381034fae42c7446f8b1e0
SHA1

4e51348f0c51349654c4458bd4a369b469508b19
SHA256

e9df968891554f1a2c46b3fdc0c975df09306412271eeec17e9fe5ab9be8040d
SHA512

76130b334ef84b32cec53437e50a8cd58ee845984998102e7c0bac1778cede289efc88d016bb6502e67543ec7c6fba26cb6b0030eb41d33b203c1168403a26e3
SSDEEP

98304:0eCvejUUQp7TR3uPJL7pDa6fvpJZO/Sx8eDAVw8da9Vx7Hk:0JeGNTRePO6fnZcU8eC6E

Score

6^/10

Malware Config

Signatures

Attempts to obfuscate APK file format
Applies obfuscation techniques to the APK format in order to hinder analysis

Requests dangerous framework permissions 12 IoCs

description	ioc
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an application to read video files from external storage.	android.permission.READ_MEDIA_VIDEO
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows an application to read image files from external storage.	android.permission.READ_MEDIA_IMAGES
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows applications to use exact alarm APIs.	android.permission.SCHEDULE_EXACT_ALARM

Files

e9df968891554f1a2c46b3fdc0c975df09306412271eeec17e9fe5ab9be8040d.bin
.apk android arch:arm64 arch:arm

rjxig.aw.de

rjxig.aw.de.MainActivity

Activities

rjxig.aw.de.MainActivity

android.intent.action.MAIN

Permissions

android.permission.GET_ACCOUNTS
android.permission.ACCESS_NETWORK_STATE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.POST_NOTIFICATIONS
android.permission.READ_MEDIA_VIDEO
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS
android.permission.INTERNET
com.google.android.c2dm.permission.RECEIVE
android.permission.WAKE_LOCK
android.permission.READ_EXTERNAL_STORAGE
android.permission.AUTHENTICATE_ACCOUNTS
android.permission.READ_PHONE_STATE
android.permission.SEND_SMS
android.permission.READ_SMS
android.permission.WRITE_CONTACTS
android.permission.READ_MEDIA_IMAGES
android.permission.ACCESS_WIFI_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.FOREGROUND_SERVICE
android.permission.READ_CONTACTS
android.permission.SCHEDULE_EXACT_ALARM

Receivers

rjxig.aw.de.BootCompletedReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.PHONE_STATE

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY
android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW
android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.TIME_SET
android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.work.diagnostics.REQUEST_DIAGNOSTICS

Services

rjxig.aw.de.JnrilgNprsxlq

com.google.firebase.MESSAGING_EVENT

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

Android Permissions

e9df968891554f1a2c46b3fdc0c975df09306412271eeec17e9fe5ab9be8040d.bin

Permissions

android.permission.GET_ACCOUNTS

android.permission.ACCESS_NETWORK_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.POST_NOTIFICATIONS

android.permission.READ_MEDIA_VIDEO

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.INTERNET

com.google.android.c2dm.permission.RECEIVE

android.permission.WAKE_LOCK

android.permission.READ_EXTERNAL_STORAGE

android.permission.AUTHENTICATE_ACCOUNTS

android.permission.READ_PHONE_STATE

android.permission.SEND_SMS

android.permission.READ_SMS

android.permission.WRITE_CONTACTS

android.permission.READ_MEDIA_IMAGES

android.permission.ACCESS_WIFI_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.FOREGROUND_SERVICE

android.permission.READ_CONTACTS

android.permission.SCHEDULE_EXACT_ALARM

Sharing

General

Malware Config

Signatures

Files

rjxig.aw.de

rjxig.aw.de.MainActivity

Activities

rjxig.aw.de.MainActivity

Permissions

Receivers

rjxig.aw.de.BootCompletedReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.diagnostics.DiagnosticsReceiver

Services

rjxig.aw.de.JnrilgNprsxlq

com.google.firebase.messaging.FirebaseMessagingService

Android Permissions

e9df968891554f1a2c46b3fdc0c975df09306412271eeec17e9fe5ab9be8040d.bin