General

  • Target

    b5e8d6207ccffd42ab53b02ced71c002b89fc0e798ebbe3e016a3e3a50148acc.bin

  • Size

    3.9MB

  • MD5

    3a0184697f113477a60aba0b2d030b82

  • SHA1

    3ab50761ac5cb0c34d045db906cd86d8a0532944

  • SHA256

    b5e8d6207ccffd42ab53b02ced71c002b89fc0e798ebbe3e016a3e3a50148acc

  • SHA512

    da9fb0ef9e171b18f2acadb238600ad977903187c42c6471e7d79ceb932ff61a7ae7e805744854dc70e1dddbcfa43a0d6a93950b42d59175d7a6aa8a32ec57d9

  • SSDEEP

    98304:JR7On/H5AyZh0lMJuwv6bmmw/gSfOxbuHid2Zr80T:P7G/sSJu46bmrRWxbul

Score
10/10

Malware Config

Extracted

Family

bingomod

C2

103.155.92.11

Signatures

  • Bingomod family
  • Declares broadcast receivers with permission to handle system events 1 IoCs
  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 7 IoCs

Files

  • b5e8d6207ccffd42ab53b02ced71c002b89fc0e798ebbe3e016a3e3a50148acc.bin
    .apk android

    com.pescado.hitenhit

    com.pescado.hitenhit.MainActivity


Android Permissions

b5e8d6207ccffd42ab53b02ced71c002b89fc0e798ebbe3e016a3e3a50148acc.bin

Permissions

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.RECEIVE_SMS

android.permission.RECEIVE_MMS

android.provider.Telephony.SMS_RECEIVED

android.permission.POST_NOTIFICATIONS

android.permission.READ_PHONE_STATE

android.permission.WRITE_SETTINGS

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.MEDIA_PROJECTION

android.permission.FOREGROUND_SERVICE

android.permission.BROADCAST_STICKY

android.permission.DISABLE_KEYGUARD

android.permission.INTERNET

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.REQUEST_DELETE_PACKAGES

android.permission.VIBRATE

android.permission.WAKE_LOCK

android.permission.QUERY_ALL_PACKAGES