4738ae8c7e7e7a91c6071c9e718d9e44eba08c6688331674e789bb0a19b28f08[.]bin

General

Target
4738ae8c7e7e7a91c6071c9e718d9e44eba08c6688331674e789bb0a19b28f08.bin
Size 509KB
Sample240823-1w1bps1fnp
SHA256 4738ae8c7e7e7a91c6071c9e718d9e44eba08c6688331674e789bb0a19b28f08
MD5 80353ed843a19a58f7357320f58effa4
SHA1 6102319e312c8ec854212806a96dd6ddb3b9e1b3
SHA512 32110fbd8adc7daccaa7bdb33f52f24f749622b3827e3421847aa7732c61b6f478b4eb26bf6b7ef472671a85985cda8f1ea2a62e102891b7ce4c96ce56148e42
SSDEEP 12288:+pYcIFboq6Ckuz1nIY6Rmzpz3TCxKdvVI+ULzz0CDhn/:+pK56wzSYGmzpPZW+g9n/
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE

Requests dangerous framework permissions 8 IoCs

description	ioc
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE

File Explorer

4738ae8c7e7e7a91c6071c9e718d9e44eba08c6688331674e789bb0a19b28f08.bin

.apk 509KB

4738ae8c7e7e7a91c6071c9e718d9e44eba08c6688331674e789bb0a19b28f08.bin

SHA256 4738ae8c7e7e7a91c6071c9e718d9e44eba08c6688331674e789bb0a19b28f08
MD5 80353ed843a19a58f7357320f58effa4
SHA1 6102319e312c8ec854212806a96dd6ddb3b9e1b3
SHA512 32110fbd8adc7daccaa7bdb33f52f24f749622b3827e3421847aa7732c61b6f478b4eb26bf6b7ef472671a85985cda8f1ea2a62e102891b7ce4c96ce56148e42
SSDEEP 12288:+pYcIFboq6Ckuz1nIY6Rmzpz3TCxKdvVI+ULzz0CDhn/:+pK56wzSYGmzpPZW+g9n/
MD5 SHA1 SHA512 SSDEEP

android arch:arm64 arch:arm arch:x86 arch:x64

com.pointherdoj

Android Permissions

4738ae8c7e7e7a91c6071c9e718d9e44eba08c6688331674e789bb0a19b28f08.bin

Permissions

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.GET_PACKAGE_SIZE

android.permission.CLEAR_APP_CACHE

android.permission.USE_FINGERPRINT

android.permission.INSTALL_SHORTCUT

android.permission.ADD_VOICEMAIL

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.INTERNET

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.WAKE_LOCK

android.permission.CALL_PHONE

android.permission.USES_POLICY_FORCE_LOCK

android.permission.VIBRATE

android.permission.REQUEST_COMPANION_RUN_IN_BACKGROUND

android.permission.REQUEST_COMPANION_USE_DATA_IN_BACKGROUND

android.permission.REQUEST_DELETE_PACKAGES

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_SETTINGS

android.permission.REORDER_TASKS

android.permission.QUERY_ALL_PACKAGES

android.permission.READ_PHONE_STATE

4738ae8c7e7e7a91c6071c9e718d9e44eba08c6688331674e789bb0a19b28f08.bin

com.pointherdoj.p079s

com.pointherdoj.p094b

com.pointherdoj.p063j

com.pointherdoj.p016x

com.pointherdoj.p044o

com.pointherdoj.p019o

com.pointherdoj.p022w

com.pointherdoj.p043t

com.pointherdoj.p080z

com.pointherdoj.p013o

com.pointherdoj.p081p

com.pointherdoj.p073o

com.pointherdoj.p099p

com.pointherdoj.p064y

com.pointherdoj.p065q

com.pointherdoj.p068s

com.pointherdoj.p062q

com.pointherdoj.p065h

com.pointherdoj.p063f

com.pointherdoj.p026k

com.pointherdoj.p052y

com.pointherdoj.p074m

com.pointherdoj.p079v

com.pointherdoj.p019z

com.pointherdoj.p017t

com.pointherdoj.p014j

com.pointherdoj.p042p

com.pointherdoj.p072e

com.pointherdoj.p047o

com.pointherdoj.p052v

Sharing

General

Malware Config

Signatures

File Explorer

4738ae8c7e7e7a91c6071c9e718d9e44eba08c6688331674e789bb0a19b28f08.bin

com.pointherdoj.p079s

com.pointherdoj.p094b

com.pointherdoj.p063j

com.pointherdoj.p016x

com.pointherdoj.p044o

com.pointherdoj.p019o

com.pointherdoj.p022w

com.pointherdoj.p043t

com.pointherdoj.p080z

com.pointherdoj.p013o

com.pointherdoj.p081p

com.pointherdoj.p073o

com.pointherdoj.p099p

com.pointherdoj.p064y

com.pointherdoj.p065q

com.pointherdoj.p068s

com.pointherdoj.p062q

com.pointherdoj.p065h

com.pointherdoj.p063f

com.pointherdoj.p026k

com.pointherdoj.p052y

com.pointherdoj.p074m

com.pointherdoj.p079v

com.pointherdoj.p019z

com.pointherdoj.p017t

com.pointherdoj.p014j

com.pointherdoj.p042p

com.pointherdoj.p072e

com.pointherdoj.p047o

com.pointherdoj.p052v

Android Permissions

4738ae8c7e7e7a91c6071c9e718d9e44eba08c6688331674e789bb0a19b28f08.bin