4923c03fcf31c83273bb76817ff9a61f3ba25c579543235b79544e80351584b8[.]bin

General

Target
4923c03fcf31c83273bb76817ff9a61f3ba25c579543235b79544e80351584b8.bin
Size 561KB
Sample241027-1w181athlp
SHA256 4923c03fcf31c83273bb76817ff9a61f3ba25c579543235b79544e80351584b8
MD5 f4d926722e236626641a514310e09490
SHA1 2cfe12611661877963abefd105db18fbd5fda1c2
SHA512 e0c2dff2ad7f463084618dcb5fb9c181ea5b2bea8bb5cab5918f1d08a0fc241e6f50c8753aa54ab71474d24d4f42a498f9d0b1f13f829603c24a4231edc1362b
SSDEEP 12288:jAaGJ2ukTtgXGAbtv0xjejpj9kcltX60UsKxltxpnX:jAaGJ2ukaXbtvnppkcltX9jCrjnX
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE

Requests dangerous framework permissions 8 IoCs

description	ioc
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows applications to use exact alarm APIs.	android.permission.SCHEDULE_EXACT_ALARM
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE

File Explorer

4923c03fcf31c83273bb76817ff9a61f3ba25c579543235b79544e80351584b8.bin

.apk 561KB

4923c03fcf31c83273bb76817ff9a61f3ba25c579543235b79544e80351584b8.bin

SHA256 4923c03fcf31c83273bb76817ff9a61f3ba25c579543235b79544e80351584b8
MD5 f4d926722e236626641a514310e09490
SHA1 2cfe12611661877963abefd105db18fbd5fda1c2
SHA512 e0c2dff2ad7f463084618dcb5fb9c181ea5b2bea8bb5cab5918f1d08a0fc241e6f50c8753aa54ab71474d24d4f42a498f9d0b1f13f829603c24a4231edc1362b
SSDEEP 12288:jAaGJ2ukTtgXGAbtv0xjejpj9kcltX60UsKxltxpnX:jAaGJ2ukaXbtvnppkcltX9jCrjnX
MD5 SHA1 SHA512 SSDEEP

android arch:arm64 arch:arm arch:x86 arch:x64

com.letterleft38

Android Permissions

4923c03fcf31c83273bb76817ff9a61f3ba25c579543235b79544e80351584b8.bin

Permissions

android.permission.BATTERY_STATS

android.permission.GET_PACKAGE_SIZE

android.permission.ADD_VOICEMAIL

android.permission.USE_FINGERPRINT

android.permission.CLEAR_APP_CACHE

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.POST_NOTIFICATIONS

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.INTERNET

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.WAKE_LOCK

android.permission.SET_ALARM

android.permission.CALL_PHONE

android.permission.USES_POLICY_FORCE_LOCK

android.permission.VIBRATE

android.permission.REQUEST_COMPANION_RUN_IN_BACKGROUND

android.permission.REQUEST_COMPANION_USE_DATA_IN_BACKGROUND

android.permission.REQUEST_DELETE_PACKAGES

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_SETTINGS

android.permission.REORDER_TASKS

android.permission.SCHEDULE_EXACT_ALARM

android.permission.QUERY_ALL_PACKAGES

android.permission.READ_PHONE_STATE

4923c03fcf31c83273bb76817ff9a61f3ba25c579543235b79544e80351584b8.bin

com.letterleft38.p039n

com.letterleft38.p013g

com.letterleft38.p061o

com.letterleft38.p094x

com.letterleft38.p089h

com.letterleft38.p043t

com.letterleft38.p092j

com.letterleft38.p096i

com.letterleft38.p041j

com.letterleft38.p045d

com.letterleft38.p060u

com.letterleft38.p059h

com.letterleft38.p036t

com.letterleft38.p080a

com.letterleft38.p077a

com.letterleft38.p066e

com.letterleft38.p097s

com.letterleft38.p090q

com.letterleft38.p028n

com.letterleft38.p050o

com.letterleft38.p042w

com.letterleft38.p098a

com.letterleft38.p086l

com.letterleft38.p059b

com.letterleft38.p079n

com.letterleft38.p026b

com.letterleft38.p040w

com.letterleft38.p053x

com.letterleft38.p058c

com.letterleft38.p063m

com.letterleft38.p071o

Sharing

General

Malware Config

Signatures

File Explorer

4923c03fcf31c83273bb76817ff9a61f3ba25c579543235b79544e80351584b8.bin

com.letterleft38.p039n

com.letterleft38.p013g

com.letterleft38.p061o

com.letterleft38.p094x

com.letterleft38.p089h

com.letterleft38.p043t

com.letterleft38.p092j

com.letterleft38.p096i

com.letterleft38.p041j

com.letterleft38.p045d

com.letterleft38.p060u

com.letterleft38.p059h

com.letterleft38.p036t

com.letterleft38.p080a

com.letterleft38.p077a

com.letterleft38.p066e

com.letterleft38.p097s

com.letterleft38.p090q

com.letterleft38.p028n

com.letterleft38.p050o

com.letterleft38.p042w

com.letterleft38.p098a

com.letterleft38.p086l

com.letterleft38.p059b

com.letterleft38.p079n

com.letterleft38.p026b

com.letterleft38.p040w

com.letterleft38.p053x

com.letterleft38.p058c

com.letterleft38.p063m

com.letterleft38.p071o

Android Permissions

4923c03fcf31c83273bb76817ff9a61f3ba25c579543235b79544e80351584b8.bin