Overview

overview

6

Static

static

6

9db052fa84...61.apk

android-9-x86

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    9db052fa84bb9de2b16b33fc4ff47ebda6534803fe66171d48782b1723cf0661.bin

  • Size

    396KB

  • MD5

    071dd9e2b023d11a258026e9bb5050cb

  • SHA1

    dc38e1501905d3819e63fbdccf927ca5b1f5953b

  • SHA256

    9db052fa84bb9de2b16b33fc4ff47ebda6534803fe66171d48782b1723cf0661

  • SHA512

    a5bde5edca002e3b74249b3f9ffcc181ae795d3865a4202a9cd51ccc631c22df19115debc1442fbfaa4c22b17ea151673c7b3c80526eda5bbd0caf659899feae

  • SSDEEP

    6144:3jVadVP9OcXYuW0V/toKR6ZdlG0+TyInJKBqvhrfpgD7kS5WM5Phf1hygnu92I4r:TQdZM2Yd0/h0p+T7KShK0IMouQ3HaF9S

Score
6/10

Malware Config

Signatures

  • Attempts to obfuscate APK file format

    Applies obfuscation techniques to the APK format in order to hinder analysis

  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 10 IoCs

Files

  • 9db052fa84bb9de2b16b33fc4ff47ebda6534803fe66171d48782b1723cf0661.bin
    .apk android arch:arm

    hmvl.iglqih.iht.htxtq.hz.pu

    efq7.emf


Android Permissions

9db052fa84bb9de2b16b33fc4ff47ebda6534803fe66171d48782b1723cf0661.bin

Permissions

njobc.nvlgtem.pezqleq

afpls.fbcxoe.frswxpl

mraj.whthctc.axhxkqf

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.VIBRATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WAKE_LOCK

android.permission.INTERNET

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_CONTACTS

android.permission.READ_PHONE_STATE

android.permission.GET_ACCOUNTS

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.FOREGROUND_SERVICE

android.permission.POST_NOTIFICATIONS

android.permission.ACCESS_NOTIFICATION_POLICY