Resubmissions

05/11/2024, 17:33

241105-v4y6qavkgt 10

14/10/2024, 17:22

241014-vxnfmswgph 7

11/10/2024, 22:08

241011-12am8s1ejn 7

General

  • Target

    4c7f90d103b54ba78b85f92d967ef4cdcc0102d3756e1400383e774d2f27bb2e.bin

  • Size

    2.8MB

  • MD5

    ba936941e25a9d95243d8f3d7e0fd2ff

  • SHA1

    7e688b3a0ce496096e11251d2cd1ad66e5d0dd56

  • SHA256

    4c7f90d103b54ba78b85f92d967ef4cdcc0102d3756e1400383e774d2f27bb2e

  • SHA512

    a410eac211c1a5b47f65282cbe0eaa298fa0e28d65d0895e2e410f8e1fbbc8bfc324e5b0396e54fb79a0b1bac3e3400088a281e2a3be9bd7dabeee5cf1009aad

  • SSDEEP

    49152:2jE6ooygKRyvdGk7PGhRXRAU1emgOjfREjgskgcE5lu/ftkVW2KaT:2bGyvdDuLD1e0jmUsjcE5lmkKe

Score
6/10

Malware Config

Signatures

  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 3 IoCs

Files

  • 4c7f90d103b54ba78b85f92d967ef4cdcc0102d3756e1400383e774d2f27bb2e.bin
    .apk android

    foam.wispy.gauging.jogger

    foam.wispy.gauging.jogger.AWwWggTEGQlP


  • final-signed.apk
    .apk android arch:arm64 arch:arm arch:x86 arch:x64

    aviation.agreeable.liver.overkill

    aviation.agreeable.liver.overkill.fprDTXXpSBkGIVfoxxC


Android Permissions

4c7f90d103b54ba78b85f92d967ef4cdcc0102d3756e1400383e774d2f27bb2e.bin

Permissions

android.permission.INTERNET

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.MANAGE_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.QUERY_ALL_PACKAGES