Overview

overview

10

Static

static

10

base.apk

 

base.apk

android-10-x64

7

base.apk

 

Sharing

Copy URL Twitter E-mail

General

  • Target

    base.apk

  • Size

    2.1MB

  • MD5

    6509825dbd3038ad2cb113091e3f31f2

  • SHA1

    3fde4be53ea3d6b7e2197c955c32d5211bd50e8a

  • SHA256

    907536e41808a5e398852c18e089ee5d7783c8932295509b213bafcbe19f087d

  • SHA512

    052dd394ade9eb977bb561f895f65f5ca9f5d3577371f50731dc7e69bed177442748bfbc0dd97a51651a64f2eb240435ab3591e86f26e047f2ff4090e36020f2

  • SSDEEP

    49152:Aucdazfrs7fqjjx1Il4Uwxn6aT4KTErmcUDpJKM4O:AAzfrsmjDUwx6VbrIKM7

Score
10/10
tanglebot

Malware Config

Extracted

Family

tanglebot

C2

https://icq.im/AoLH58pXY8ejJTQiWg8

https://t.me/pempeppepepep

https://t.me/xpembeppep2p2

Signatures

  • TangleBot payload 1 IoCs
  • Tanglebot family
    tanglebot
  • Attempts to obfuscate APK file format

    Applies obfuscation techniques to the APK format in order to hinder analysis

  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 5 IoCs

Files

  • base.apk
    .apk android

    la.lostecho.hook

    la.lostecho.hook.MainActivity


Android Permissions

base.apk

Permissions

android.permission.INTERNET

android.permission.POST_NOTIFICATIONS

android.permission.QUERY_ALL_PACKAGES

android.permission.REQUEST_DELETE_PACKAGES

android.permission.FOREGROUND_SERVICE

android.permission.READ_PHONE_STATE

android.permission.RECORD_AUDIO

android.permission.CAMERA

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.WAKE_LOCK

android.permission.SYSTEM_ALERT_WINDOW