Resubmissions

13/09/2024, 11:32

240913-nnbxxszbjk 7

12/09/2024, 05:28

240912-f53g7stbpp 7

12/09/2024, 05:25

240912-f4d38atbjl 7

12/09/2024, 05:19

240912-f1b5fsshqr 7

General

  • Target

    ADDRESS UPDATE_2.0 (1)_clone_modi.apk

  • Size

    4.9MB

  • MD5

    482033a0b3b16702fe7cec8526f17cbd

  • SHA1

    b93d172f45554ffaa6c1a8c1b9c446ca98c5b403

  • SHA256

    8e5554babd69da5cd894f67b7733da60eece0ebf59503264409a2da8dbc9389d

  • SHA512

    4a52ac7c0b5c86d1248f353bdc3bfe61fc39d6fea039affb0ae17d3023a2f0ce254494c2686244c9f38423218309029c3ff7bea87ade696a2bac963c4e8cf009

  • SSDEEP

    98304:2ESgTDjk04W/QOZzna6VHFOw2cyX3cicoW0l7mWx06St4O+3p:23g3jv4W/QOZzlHYwRynmX0lw6T3p

Score
6/10

Malware Config

Signatures

  • Attempts to obfuscate APK file format

    Applies obfuscation techniques to the APK format in order to hinder analysis

  • Requests dangerous framework permissions 4 IoCs

Files

  • ADDRESS UPDATE_2.0 (1)_clone_modi.apk
    .apk android

    com.exa.hhkhkhkhk.jhkhkhkhk.jhkhkhkhkhk.mple.testttttw

    com.exa.hhkhkhkhk.jhkhkhkhk.jhkhkhkhkhk.mple.testttttw.MainActivity


Android Permissions

ADDRESS UPDATE_2.0 (1)_clone_modi.apk

Permissions

android.permission.READ_SMS

android.permission.SMS_FINANCIAL_TRANSACTIONS

android.permission.BROADCAST_SMS

android.permission.INTERNET

android.permission.RECEIVE_SMS

android.permission.SEND_SMS

com.exa.hhkhkhkhk.jhkhkhkhk.jhkhkhkhkhk.mple.testttttw.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION