General

  • Target

    b4eb26b424f7a9b914c12e10bf3aef6f585379f12f1c84719eeafe47ac75f4a5.bin

  • Size

    2.0MB

  • MD5

    bd3c223904b5989818bb6c911dc0ddbf

  • SHA1

    1f21b86aec1d74a26846de193d9c224bf071c9aa

  • SHA256

    b4eb26b424f7a9b914c12e10bf3aef6f585379f12f1c84719eeafe47ac75f4a5

  • SHA512

    a89a5c0e5af99cd8705a614e03deb63f95130d779f6803e8dbf19a3c4f39fbbfa4714db7d7ba8fafbf1e62771bd8a96d27bd21120ce7ef136dc16a92adb43a07

  • SSDEEP

    49152:m8vcILegKOvZoTZbipIVIeJTS+unOpoFG09R/i/IZjLHb827sK6MaMjRv4hpfP:R9egNBoVepOIeJTShhrJZ/427sKLaQy

Score
6/10

Malware Config

Signatures

  • Attempts to obfuscate APK file format

    Applies obfuscation techniques to the APK format in order to hinder analysis

  • Declares broadcast receivers with permission to handle system events 1 IoCs
  • Declares services with permission to bind to the system 2 IoCs
  • Requests dangerous framework permissions 34 IoCs

Files

  • b4eb26b424f7a9b914c12e10bf3aef6f585379f12f1c84719eeafe47ac75f4a5.bin
    .apk android arch:arm64 arch:arm arch:x64 arch:x86

    com.admit.fun

    com.nameown12.p045l


Android Permissions

b4eb26b424f7a9b914c12e10bf3aef6f585379f12f1c84719eeafe47ac75f4a5.bin

Permissions

android.permission.ACCESS_WIFI_STATE

android.permission.MODIFY_PHONE_STATE

android.permission.BLUETOOTH_CONNECT

android.permission.ADD_VOICEMAIL

com.oppo.permission.safe.SAU

android.permission.PACKAGE_USAGE_STATS

com.oppo.permission.safe.SECURITY

android.permission.READ_SMS

android.permission.FOREGROUND_SERVICE

com.xiaomi.permission.ACCESS_SECURITY_CENTER

android.permission.INSTALL_PACKAGES

android.permission.DEVICE_POWER

com.fundevs.app.mediaconverter.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

android.permission.WRITE_MEDIA_STORAGE

com.oppo.permission.RUTILCMD

android.permission.PEERS_MAC_ADDRESS

android.permission.READ_MEDIA_IMAGES

android.permission.WAKE_LOCK

com.android.permission.GET_INSTALLED_APPS

com.coloros.bootreg.permission.OPPO_BOOTREG_COMPLETED

android.permission.CLEAR_APP_USER_DATA

android.permission.QUERY_ALL_PACKAGES

com.oplus.bootreg.permission.OPLUS_BOOTREG_COMPLETED

android.permission.WRITE_CONTACTS

com.oplus.permission.safe.SETTINGS

com.google.android.gms.permission.AD_ID

android.permission.ACCESS_ADSERVICES_TOPICS

com.oplus.permission.safe.BACKUP

com.oplus.permission.safe.PRIVATE

android.permission.INTERNET

android.permission.CALL_PHONE

com.oplus.permission.safe.PROTECT

android.permission.WAKE_LOCK

android.permission.QUERY_ALL_PACKAGES

com.oppo.permission.safe.BACKUP

android.permission.ACCESS_NETWORK_STATE

com.google.android.providers.gsf.permission.READ_GSERVICES

android.permission.OVERRIDE_WIFI_CONFIG

android.permission.RECEIVE_SMS

android.permission.INSTALL_SHORTCUT

android.permission.REQUEST_DELETE_PACKAGES

com.oplus.permission.safe.PASSWORD

com.oppo.launcher.permission.READ_SETTINGS

android.permission.BATTERY_STATS

android.permission.FOREGROUND_SERVICE

android.permission.FOREGROUND_SERVICE_REMOTE_MESSAGING

com.xiaomi.permission.ACCESS_SECURE_ELEMENT

android.permission.SEND_SMS

android.permission.MANAGE_USB

android.permission.MANAGE_APP_OPS_MODES