09631727c72a6f6b989a4a305c1f6f8878f42f078af284316572392301295d4c[.]bin

General

Target
09631727c72a6f6b989a4a305c1f6f8878f42f078af284316572392301295d4c.bin
Size 2.4MB
Sample241019-132hcatfpr
SHA256 09631727c72a6f6b989a4a305c1f6f8878f42f078af284316572392301295d4c
MD5 c306e4d337ba7c3feeabffb2a481937e
SHA1 a0125b95ac7c8506218e6297a8c673d6fc4f2d85
SHA512 e2c163477b8696537d34bd285e26869260ec7562d85a4a72f64c1713dab1f1525a3865a5daef5261be27f53997d52e6228958fa3fb9108705d8c20ce16790f07
SSDEEP 49152:rDZ56pSUKAYcyKguYNUzRGEm5rIb++WLfjIMpSw22/dO7Z6vb7jBwNa:x+1KvcyK3YKGE2MCjj772GOwVwM
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE

Requests dangerous framework permissions 9 IoCs

description	ioc
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE

File Explorer

09631727c72a6f6b989a4a305c1f6f8878f42f078af284316572392301295d4c.bin

.apk 2.4MB

09631727c72a6f6b989a4a305c1f6f8878f42f078af284316572392301295d4c.bin

SHA256 09631727c72a6f6b989a4a305c1f6f8878f42f078af284316572392301295d4c
MD5 c306e4d337ba7c3feeabffb2a481937e
SHA1 a0125b95ac7c8506218e6297a8c673d6fc4f2d85
SHA512 e2c163477b8696537d34bd285e26869260ec7562d85a4a72f64c1713dab1f1525a3865a5daef5261be27f53997d52e6228958fa3fb9108705d8c20ce16790f07
SSDEEP 49152:rDZ56pSUKAYcyKguYNUzRGEm5rIb++WLfjIMpSw22/dO7Z6vb7jBwNa:x+1KvcyK3YKGE2MCjj772GOwVwM
MD5 SHA1 SHA512 SSDEEP

android arch:arm64 arch:arm arch:x86 arch:x64

com.horsesize9

Android Permissions

09631727c72a6f6b989a4a305c1f6f8878f42f078af284316572392301295d4c.bin

Permissions

android.permission.USE_FINGERPRINT

android.permission.READ_EXTERNAL_STORAGE

android.permission.INSTALL_SHORTCUT

android.permission.BATTERY_STATS

android.permission.GET_PACKAGE_SIZE

android.permission.CLEAR_APP_CACHE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ADD_VOICEMAIL

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.INTERNET

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.WAKE_LOCK

android.permission.CALL_PHONE

android.permission.USES_POLICY_FORCE_LOCK

android.permission.VIBRATE

android.permission.REQUEST_COMPANION_RUN_IN_BACKGROUND

android.permission.REQUEST_COMPANION_USE_DATA_IN_BACKGROUND

android.permission.REQUEST_DELETE_PACKAGES

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_SETTINGS

android.permission.REORDER_TASKS

android.permission.POST_NOTIFICATIONS

android.permission.QUERY_ALL_PACKAGES

android.permission.READ_PHONE_STATE

09631727c72a6f6b989a4a305c1f6f8878f42f078af284316572392301295d4c.bin

com.horsesize9.p088w

com.horsesize9.p064i

com.horsesize9.p047z

com.horsesize9.p013w

com.horsesize9.p091f

com.horsesize9.p049e

com.horsesize9.p089f

com.horsesize9.p094p

com.horsesize9.p092h

com.horsesize9.p036f

com.horsesize9.p026r

com.horsesize9.p079s

com.horsesize9.p023f

com.horsesize9.p034o

com.horsesize9.p072a

com.horsesize9.p021p

com.horsesize9.p068h

com.horsesize9.p045s

com.horsesize9.NotificationService

com.horsesize9.p082a

com.horsesize9.p098v

com.horsesize9.p057e

com.horsesize9.p062j

com.horsesize9.p057q

com.horsesize9.p013l

com.horsesize9.p068u

com.horsesize9.p043m

com.horsesize9.p045u

com.horsesize9.p026u

com.horsesize9.p068q

com.horsesize9.p037l

Sharing

General

Malware Config

Signatures

File Explorer

09631727c72a6f6b989a4a305c1f6f8878f42f078af284316572392301295d4c.bin

com.horsesize9.p088w

com.horsesize9.p064i

com.horsesize9.p047z

com.horsesize9.p013w

com.horsesize9.p091f

com.horsesize9.p049e

com.horsesize9.p089f

com.horsesize9.p094p

com.horsesize9.p092h

com.horsesize9.p036f

com.horsesize9.p026r

com.horsesize9.p079s

com.horsesize9.p023f

com.horsesize9.p034o

com.horsesize9.p072a

com.horsesize9.p021p

com.horsesize9.p068h

com.horsesize9.p045s

com.horsesize9.NotificationService

com.horsesize9.p082a

com.horsesize9.p098v

com.horsesize9.p057e

com.horsesize9.p062j

com.horsesize9.p057q

com.horsesize9.p013l

com.horsesize9.p068u

com.horsesize9.p043m

com.horsesize9.p045u

com.horsesize9.p026u

com.horsesize9.p068q

com.horsesize9.p037l

Android Permissions

09631727c72a6f6b989a4a305c1f6f8878f42f078af284316572392301295d4c.bin