272a0819eb3afcde6c9f0687fe664d8a89ffa543bc876fccfda0aadbaac2b112[.]bin

General

Target
272a0819eb3afcde6c9f0687fe664d8a89ffa543bc876fccfda0aadbaac2b112.bin
Size 2.4MB
Sample241019-11va9atelr
SHA256 272a0819eb3afcde6c9f0687fe664d8a89ffa543bc876fccfda0aadbaac2b112
MD5 48aafd1ec2f75c0f09587d8533e42c37
SHA1 b4fff9603f80eba57523b92086074afa271323fa
SHA512 754c01837ed07eddc7da6c3a80e250beebf47e8dda0067b0e0f81ecdb354df102d79c0ba46d4c0c1563f61a5659d06c50456cd2a44ac7628b0cf06b0c0240694
SSDEEP 49152:uZdec5HFSLHEmQpquVvmcjGvRERcVk/qbkkpjRfkQFV:ueowNQxjGvRDVqepFskV
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE

Requests dangerous framework permissions 9 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE

File Explorer

272a0819eb3afcde6c9f0687fe664d8a89ffa543bc876fccfda0aadbaac2b112.bin

.apk 2.4MB

272a0819eb3afcde6c9f0687fe664d8a89ffa543bc876fccfda0aadbaac2b112.bin

SHA256 272a0819eb3afcde6c9f0687fe664d8a89ffa543bc876fccfda0aadbaac2b112
MD5 48aafd1ec2f75c0f09587d8533e42c37
SHA1 b4fff9603f80eba57523b92086074afa271323fa
SHA512 754c01837ed07eddc7da6c3a80e250beebf47e8dda0067b0e0f81ecdb354df102d79c0ba46d4c0c1563f61a5659d06c50456cd2a44ac7628b0cf06b0c0240694
SSDEEP 49152:uZdec5HFSLHEmQpquVvmcjGvRERcVk/qbkkpjRfkQFV:ueowNQxjGvRDVqepFskV
MD5 SHA1 SHA512 SSDEEP

android arch:arm64 arch:arm arch:x86 arch:x64

com.openwayp

Android Permissions

272a0819eb3afcde6c9f0687fe664d8a89ffa543bc876fccfda0aadbaac2b112.bin

Permissions

android.permission.CLEAR_APP_CACHE

android.permission.GET_PACKAGE_SIZE

android.permission.USE_FINGERPRINT

android.permission.INSTALL_SHORTCUT

android.permission.BATTERY_STATS

android.permission.ADD_VOICEMAIL

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.INTERNET

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.WAKE_LOCK

android.permission.CALL_PHONE

android.permission.USES_POLICY_FORCE_LOCK

android.permission.VIBRATE

android.permission.REQUEST_COMPANION_RUN_IN_BACKGROUND

android.permission.REQUEST_COMPANION_USE_DATA_IN_BACKGROUND

android.permission.REQUEST_DELETE_PACKAGES

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_SETTINGS

android.permission.REORDER_TASKS

android.permission.POST_NOTIFICATIONS

android.permission.QUERY_ALL_PACKAGES

android.permission.READ_PHONE_STATE

272a0819eb3afcde6c9f0687fe664d8a89ffa543bc876fccfda0aadbaac2b112.bin

com.openwayp.p020r

com.openwayp.p080x

com.openwayp.p090z

com.openwayp.p045e

com.openwayp.p015u

com.openwayp.p010t

com.openwayp.p012p

com.openwayp.p082o

com.openwayp.p028v

com.openwayp.p079k

com.openwayp.p060l

com.openwayp.p074d

com.openwayp.p026x

com.openwayp.p028r

com.openwayp.p061u

com.openwayp.p011j

com.openwayp.p085j

com.openwayp.p019k

com.openwayp.p010m

com.openwayp.NotificationService

com.openwayp.p052t

com.openwayp.p032n

com.openwayp.p061q

com.openwayp.p064z

com.openwayp.p020o

com.openwayp.p037v

com.openwayp.p095k

com.openwayp.p092e

com.openwayp.p015a

com.openwayp.p055o

com.openwayp.p034h

com.openwayp.p075k

com.openwayp.p091x

Sharing

General

Malware Config

Signatures

File Explorer

272a0819eb3afcde6c9f0687fe664d8a89ffa543bc876fccfda0aadbaac2b112.bin

com.openwayp.p020r

com.openwayp.p080x

com.openwayp.p090z

com.openwayp.p045e

com.openwayp.p015u

com.openwayp.p010t

com.openwayp.p012p

com.openwayp.p082o

com.openwayp.p028v

com.openwayp.p079k

com.openwayp.p060l

com.openwayp.p074d

com.openwayp.p026x

com.openwayp.p028r

com.openwayp.p061u

com.openwayp.p011j

com.openwayp.p085j

com.openwayp.p019k

com.openwayp.p010m

com.openwayp.NotificationService

com.openwayp.p052t

com.openwayp.p032n

com.openwayp.p061q

com.openwayp.p064z

com.openwayp.p020o

com.openwayp.p037v

com.openwayp.p095k

com.openwayp.p092e

com.openwayp.p015a

com.openwayp.p055o

com.openwayp.p034h

com.openwayp.p075k

com.openwayp.p091x

Android Permissions

272a0819eb3afcde6c9f0687fe664d8a89ffa543bc876fccfda0aadbaac2b112.bin