7b00169cb353fd1730e20000f61af4e0a90740006f912745e317e4b437a3b331[.]bin

General

Target

7b00169cb353fd1730e20000f61af4e0a90740006f912745e317e4b437a3b331.bin
Size

208KB
MD5

1a5e9c5f11456942d4209363e8dfd870
SHA1

d2e7884a89b773f1d8b38c34eb3b643ea046698f
SHA256

7b00169cb353fd1730e20000f61af4e0a90740006f912745e317e4b437a3b331
SHA512

7c6cb07a65937275ddaab40548ab177a6d450720ada43ba023b216d0bcc583a756102ecbb24bf493a3897362777bf8ecc204f8f47bc153e5f0b9a02aba7391be
SSDEEP

6144:cfcoLORdvVSKz/h9B+STKFlwp8IzJeccJ:ckoyvFz/rBfK7wpnoZJ

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 9 IoCs

description	ioc
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW

Files

7b00169cb353fd1730e20000f61af4e0a90740006f912745e317e4b437a3b331.bin
.apk android arch:arm64

t.tts.uhqoms

eftexrd.AkActivity

Activities

eftexrd.AkActivity

android.intent.action.MAIN

eftexrd.VzActivity

android.intent.action.SEND
android.intent.action.SENDTO

eftexrd.BhActivity

android.intent.action.MAIN

Permissions

android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_NETWORK_STATE
android.permission.CALL_PHONE
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.DISABLE_KEYGUARD
android.permission.RECEIVE_BOOT_COMPLETED
nlavcrp.jtavfdp.ldgeh
nnglovr.erovabs.ofuhtaq
fagwycth.pbok.mzsl
fymylh.wywjie.wwcxk
android.permission.WAKE_LOCK
android.permission.INTERNET
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_EXTERNAL_STORAGE
android.permission.ACCESS_NETWORK_STATE
android.permission.READ_PHONE_STATE
android.permission.RECEIVE_SMS
android.permission.READ_SMS
android.permission.WRITE_SMS
android.permission.SEND_SMS
android.permission.DISABLE_KEYGUARD
android.permission.READ_CONTACTS
android.permission.CHANGE_WIFI_STATE
android.permission.SYSTEM_ALERT_WINDOW
android.permission.READ_PROFILE

Receivers

eftexrd.VvReceiver

android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.PACKAGE_ADDED

eftexrd.ZsReceiver

android.provider.Telephony.SMS_DELIVER

eftexrd.VxReceiver

android.provider.Telephony.WAP_PUSH_DELIVER

Services

eftexrd.MnService

android.intent.action.RESPOND_VIA_MESSAGE

Android Permissions

7b00169cb353fd1730e20000f61af4e0a90740006f912745e317e4b437a3b331.bin

Permissions

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.CALL_PHONE

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.DISABLE_KEYGUARD

android.permission.RECEIVE_BOOT_COMPLETED

nlavcrp.jtavfdp.ldgeh

nnglovr.erovabs.ofuhtaq

fagwycth.pbok.mzsl

fymylh.wywjie.wwcxk

android.permission.WAKE_LOCK

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.permission.WRITE_SMS

android.permission.SEND_SMS

android.permission.DISABLE_KEYGUARD

android.permission.READ_CONTACTS

android.permission.CHANGE_WIFI_STATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_PROFILE

Sharing

General

Malware Config

Signatures

Files

t.tts.uhqoms

eftexrd.AkActivity

Activities

eftexrd.AkActivity

eftexrd.VzActivity

eftexrd.BhActivity

Permissions

Receivers

eftexrd.VvReceiver

eftexrd.ZsReceiver

eftexrd.VxReceiver

Services

eftexrd.MnService

Android Permissions

7b00169cb353fd1730e20000f61af4e0a90740006f912745e317e4b437a3b331.bin