2d45a8aedf9b50ac6bae9dd1b6bd0f63f01b6a363e54e672e33a83311584c46b[.]bin

General

Target
2d45a8aedf9b50ac6bae9dd1b6bd0f63f01b6a363e54e672e33a83311584c46b.bin
Size 509KB
Sample240825-1xc8kaxeke
SHA256 2d45a8aedf9b50ac6bae9dd1b6bd0f63f01b6a363e54e672e33a83311584c46b
MD5 ef51b5d6b80d208d69eadd54b6afa2d8
SHA1 69a13b5c10785adcb25068a9e0dd51e18d8132fc
SHA512 c3da9243d0e1c33ff5aa67206ef4da5d63f1dd5088dbb726db2296b15d0de303142757b66e9e78ecc843849bdf4e2505d46ae23d46d1d6a3a94758fa835cf085
SSDEEP 12288:+aBDKdSJS3nDbhQhmer4wwhkHnucVqXnce2q4lUb+n+:+auSJiBQhpr4wwqHucKn72q4lUb+n+
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE

Requests dangerous framework permissions 8 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE

File Explorer

2d45a8aedf9b50ac6bae9dd1b6bd0f63f01b6a363e54e672e33a83311584c46b.bin

.apk 509KB

2d45a8aedf9b50ac6bae9dd1b6bd0f63f01b6a363e54e672e33a83311584c46b.bin

SHA256 2d45a8aedf9b50ac6bae9dd1b6bd0f63f01b6a363e54e672e33a83311584c46b
MD5 ef51b5d6b80d208d69eadd54b6afa2d8
SHA1 69a13b5c10785adcb25068a9e0dd51e18d8132fc
SHA512 c3da9243d0e1c33ff5aa67206ef4da5d63f1dd5088dbb726db2296b15d0de303142757b66e9e78ecc843849bdf4e2505d46ae23d46d1d6a3a94758fa835cf085
SSDEEP 12288:+aBDKdSJS3nDbhQhmer4wwhkHnucVqXnce2q4lUb+n+:+auSJiBQhpr4wwqHucKn72q4lUb+n+
MD5 SHA1 SHA512 SSDEEP

android arch:arm64 arch:arm arch:x86 arch:x64

com.directhorseqq

Android Permissions

2d45a8aedf9b50ac6bae9dd1b6bd0f63f01b6a363e54e672e33a83311584c46b.bin

Permissions

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INSTALL_SHORTCUT

android.permission.CLEAR_APP_CACHE

android.permission.READ_EXTERNAL_STORAGE

android.permission.USE_FINGERPRINT

android.permission.ADD_VOICEMAIL

android.permission.BATTERY_STATS

android.permission.GET_PACKAGE_SIZE

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.INTERNET

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.WAKE_LOCK

android.permission.CALL_PHONE

android.permission.USES_POLICY_FORCE_LOCK

android.permission.VIBRATE

android.permission.REQUEST_COMPANION_RUN_IN_BACKGROUND

android.permission.REQUEST_COMPANION_USE_DATA_IN_BACKGROUND

android.permission.REQUEST_DELETE_PACKAGES

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_SETTINGS

android.permission.REORDER_TASKS

android.permission.QUERY_ALL_PACKAGES

android.permission.READ_PHONE_STATE

2d45a8aedf9b50ac6bae9dd1b6bd0f63f01b6a363e54e672e33a83311584c46b.bin

com.directhorseqq.p035t

com.directhorseqq.p089b

com.directhorseqq.p046q

com.directhorseqq.p092t

com.directhorseqq.p089o

com.directhorseqq.p072e

com.directhorseqq.p025g

com.directhorseqq.p061s

com.directhorseqq.p077g

com.directhorseqq.p023u

com.directhorseqq.p095f

com.directhorseqq.p067l

com.directhorseqq.p010f

com.directhorseqq.p022a

com.directhorseqq.p014z

com.directhorseqq.p050o

com.directhorseqq.p084c

com.directhorseqq.p017h

com.directhorseqq.p036s

com.directhorseqq.p060x

com.directhorseqq.p019j

com.directhorseqq.p044s

com.directhorseqq.p035w

com.directhorseqq.p028r

com.directhorseqq.p052q

com.directhorseqq.p094f

com.directhorseqq.p054e

com.directhorseqq.p098s

com.directhorseqq.p028k

com.directhorseqq.p075s

com.directhorseqq.p061r

Sharing

General

Malware Config

Signatures

File Explorer

2d45a8aedf9b50ac6bae9dd1b6bd0f63f01b6a363e54e672e33a83311584c46b.bin

com.directhorseqq.p035t

com.directhorseqq.p089b

com.directhorseqq.p046q

com.directhorseqq.p092t

com.directhorseqq.p089o

com.directhorseqq.p072e

com.directhorseqq.p025g

com.directhorseqq.p061s

com.directhorseqq.p077g

com.directhorseqq.p023u

com.directhorseqq.p095f

com.directhorseqq.p067l

com.directhorseqq.p010f

com.directhorseqq.p022a

com.directhorseqq.p014z

com.directhorseqq.p050o

com.directhorseqq.p084c

com.directhorseqq.p017h

com.directhorseqq.p036s

com.directhorseqq.p060x

com.directhorseqq.p019j

com.directhorseqq.p044s

com.directhorseqq.p035w

com.directhorseqq.p028r

com.directhorseqq.p052q

com.directhorseqq.p094f

com.directhorseqq.p054e

com.directhorseqq.p098s

com.directhorseqq.p028k

com.directhorseqq.p075s

com.directhorseqq.p061r

Android Permissions

2d45a8aedf9b50ac6bae9dd1b6bd0f63f01b6a363e54e672e33a83311584c46b.bin