f824655a2c2dc26cb021bd246abec9d99fe753b5980261c7e24be0f73f264762[.]bin

General

Target
f824655a2c2dc26cb021bd246abec9d99fe753b5980261c7e24be0f73f264762.bin
Size 2.4MB
Sample241002-1z37rsshpe
SHA256 f824655a2c2dc26cb021bd246abec9d99fe753b5980261c7e24be0f73f264762
MD5 c1b24852510d354d9211b03f7e745ba3
SHA1 8b3cc27cae155f9e2f8d09bc40f5b081fc9ee9df
SHA512 bc6c490063a033247957f1bd40b6a10474a1e4d00bd0753b3d2164616bd180ea3974078973b6480bebd7815dbc7fe67db15fb2be1f40abfdb1ab329c436aa570
SSDEEP 49152:iFClMQ3IrQUEXqSa/SCJcIRkpVwPRS9t0Jf8DAIHB:kr2Xqx/SsE+PRE0t8DAIHB
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE

Requests dangerous framework permissions 8 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows read access to the device's phone number(s).	android.permission.READ_PHONE_NUMBERS
Allows an application to read the user's call log.	android.permission.READ_CALL_LOG
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS

File Explorer

f824655a2c2dc26cb021bd246abec9d99fe753b5980261c7e24be0f73f264762.bin

.apk 2.4MB

f824655a2c2dc26cb021bd246abec9d99fe753b5980261c7e24be0f73f264762.bin

SHA256 f824655a2c2dc26cb021bd246abec9d99fe753b5980261c7e24be0f73f264762
MD5 c1b24852510d354d9211b03f7e745ba3
SHA1 8b3cc27cae155f9e2f8d09bc40f5b081fc9ee9df
SHA512 bc6c490063a033247957f1bd40b6a10474a1e4d00bd0753b3d2164616bd180ea3974078973b6480bebd7815dbc7fe67db15fb2be1f40abfdb1ab329c436aa570
SSDEEP 49152:iFClMQ3IrQUEXqSa/SCJcIRkpVwPRS9t0Jf8DAIHB:kr2Xqx/SsE+PRE0t8DAIHB
MD5 SHA1 SHA512 SSDEEP

android

org.zzzz.aaa

Android Permissions

f824655a2c2dc26cb021bd246abec9d99fe753b5980261c7e24be0f73f264762.bin

Permissions

oppo.permission.OPPO_COMPONENT_SAFE

com.huawei.permission.external_app_settings.USE_COMPONENT

android.permission.READ_PHONE_STATE

android.permission.READ_SMS

android.permission.RECEIVE_SMS

android.permission.CALL_PHONE

android.permission.READ_PHONE_NUMBERS

android.permission.READ_CALL_LOG

android.permission.READ_CONTACTS

android.permission.GET_ACCOUNTS

android.permission.INTERNET

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.RECEIVE_BOOT_COMPLETED

org.zzzz.aaa.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

f824655a2c2dc26cb021bd246abec9d99fe753b5980261c7e24be0f73f264762.bin

org.zzzz.aaa.ui.MainActivity

org.zzzz.aaa.ui.PermissionActivity

org.zzzz.aaa.core.MainAccessibilityService

org.zzzz.aaa.core.SmsReceiver

androidx.profileinstaller.ProfileInstallReceiver

androidx.startup.InitializationProvider

Sharing

General

Malware Config

Signatures

File Explorer

f824655a2c2dc26cb021bd246abec9d99fe753b5980261c7e24be0f73f264762.bin

org.zzzz.aaa.ui.MainActivity

org.zzzz.aaa.ui.PermissionActivity

org.zzzz.aaa.core.MainAccessibilityService

org.zzzz.aaa.core.SmsReceiver

androidx.profileinstaller.ProfileInstallReceiver

androidx.startup.InitializationProvider

Android Permissions

f824655a2c2dc26cb021bd246abec9d99fe753b5980261c7e24be0f73f264762.bin