452cc39649bfdfdd81de938f2ce93481.zip
- SHA256 33666b5f83d4fb29d783beef08d710f0a2ed6e896adcad2c40b1ce3e33905e15
Password
infected
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
5b62a449bdeff05e4bf7b6e42870ed4ad8d3f9a6cef66267b05295d8937e0b10.apk
Resource
android-x86-arm-20240624-en
android-9-x86
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
5b62a449bdeff05e4bf7b6e42870ed4ad8d3f9a6cef66267b05295d8937e0b10.apk
Resource
android-x64-20240624-en
android-10-x64
7 signatures
150 seconds
Behavioral task
behavioral3
Sample
5b62a449bdeff05e4bf7b6e42870ed4ad8d3f9a6cef66267b05295d8937e0b10.apk
Resource
android-x64-arm64-20240624-en
android-11-x64
8 signatures
150 seconds
General
- Target 452cc39649bfdfdd81de938f2ce93481.zip
- Size 4.5MB
- Sample240831-lsavbaxeqe
- SHA256 33666b5f83d4fb29d783beef08d710f0a2ed6e896adcad2c40b1ce3e33905e15
- MD5 d2397ae8f6d1d361428bcdbf378fe098
- SHA1 54eaad154fce3e0eac6e6a02d1f928417844aadb
- SHA512 9e172d369f074cf2a9be9a3f9d546de46b9438833ca70e9506373819bacbb1e1d58a9c8a3c6637ad959678bd5ec5867427a2f2d6ed7a72cd0a36b57aeae3dafd
- SSDEEP 98304:kKpugZB05LKQMJGeS35LtwIwd+xBhbydA:kAULKnGe0hQMvJz
- MD5 SHA1 SHA512 SSDEEP
Score
6/10
Malware Config
Signatures
- Declares services with permission to bind to the system 2 IoCs
description ioc Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device. android.permission.BIND_NOTIFICATION_LISTENER_SERVICE Required by accessibility services to bind with the system. Allows apps to access accessibility features. android.permission.BIND_ACCESSIBILITY_SERVICE - Requests dangerous framework permissions 6 IoCs
description ioc Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call. android.permission.CALL_PHONE Allows an application to send SMS messages. android.permission.SEND_SMS Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE Allows an application to receive SMS messages. android.permission.RECEIVE_SMS Allows an application to read the user's contacts data. android.permission.READ_CONTACTS Allows an application to read SMS messages. android.permission.READ_SMS
File Explorer
-
452cc39649bfdfdd81de938f2ce93481.zip.zip 4.5MB
-
5b62a449bdeff05e4bf7b6e42870ed4ad8d3f9a6cef66267b05295d8937e0b10.apk 4.6MB
5b62a449bdeff05e4bf7b6e42870ed4ad8d3f9a6cef66267b05295d8937e0b10
- SHA256 5b62a449bdeff05e4bf7b6e42870ed4ad8d3f9a6cef66267b05295d8937e0b10
- MD5 452cc39649bfdfdd81de938f2ce93481
- SHA1 b499554198e09fd171bbdd8d1cd3a0711c2a6bbd
- SHA512 1750ae273a2c3b0000a2371e42c9fd3299f667c55d3fa6cf27c0b5154b498a65ed07ae3075dd645f34ca148777e9bea2dd95d936973fce4ca943a4aad999fe1e
- SSDEEP 98304:hoNuiDQ9wfSVdDp6gDkTjhJfB5oxlAuEk0Olk0msIQpfYgQ+Q67D2w:hKr4pVZp6PjbfskXX+fPQd67/
- MD5 SHA1 SHA512 SSDEEP
Password
infected
com.moxiu.launcher
com.moxiu.launcher.p58ac7fd7
android.permission.CALL_PHONE
android.permission.SEND_SMS
android.permission.READ_PHONE_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.WRITE_SMS
android.permission.RECEIVE_SMS
android.permission.VIBRATE
android.permission.READ_CONTACTS
android.permission.KILL_BACKGROUND_PROCESSES
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS
android.permission.INTERNET
android.permission.FOREGROUND_SERVICE
android.permission.READ_SMS
android.permission.QUERY_ALL_PACKAGES
android.permission.WAKE_LOCK
android.permission.REQUEST_DELETE_PACKAGES
com.moxiu.launcher.pb7cb43fa
android.intent.action.MAIN
com.moxiu.launcher.p58ac7fd7
android.intent.action.MAIN
com.moxiu.launcher.pcfb48c55
android.intent.action.SENDTO
android.intent.action.SEND
com.moxiu.launcher.pbefef479
com.moxiu.launcher.pababe011
com.moxiu.launcher.p55ecf4d8
android.service.notification.NotificationListenerService
com.moxiu.launcher.peb51f9e5
android.intent.action.RESPOND_VIA_MESSAGE
com.moxiu.launcher.pa70532bf
android.accessibilityservice.AccessibilityService
com.moxiu.launcher.p02e5baf0
com.moxiu.launcher.p9f5e872a
com.moxiu.launcher.pbbca9c33
android.provider.Telephony.SMS_DELIVER
com.moxiu.launcher.p7235fe37
android.provider.Telephony.WAP_PUSH_DELIVER