d66c18488a8a2d94db568c825356f4e6a745a3ecbdb455a1eb041e5afc7c7af0[.]bin

General

Target
d66c18488a8a2d94db568c825356f4e6a745a3ecbdb455a1eb041e5afc7c7af0.bin
Size 3.7MB
Sample241104-1192ps1kcp
SHA256 d66c18488a8a2d94db568c825356f4e6a745a3ecbdb455a1eb041e5afc7c7af0
MD5 dfdabb265efc9c26be5289c511511389
SHA1 c387798871a19fd5e30a9feca8b60bf41106af50
SHA512 6a657dfc1d04f9cb827a4a49c9dbe3685c2c003865518a1e60cef21e5d6ed740dfc2855d304b3fa97e9f62ba0eb91bd5b8eb2755c2dfa95b4b99773997f782b0
SSDEEP 98304:2tn3RxevmLuYCblpR/dOZu3krc6rdo0Ku3l:+nh5L6bOYkc6rdo0L
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Attempts to obfuscate APK file format
Applies obfuscation techniques to the APK format in order to hinder analysis

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE

Requests dangerous framework permissions 10 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows applications to use exact alarm APIs.	android.permission.SCHEDULE_EXACT_ALARM
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE

File Explorer

d66c18488a8a2d94db568c825356f4e6a745a3ecbdb455a1eb041e5afc7c7af0.bin

.apk 3.7MB

d66c18488a8a2d94db568c825356f4e6a745a3ecbdb455a1eb041e5afc7c7af0.bin

SHA256 d66c18488a8a2d94db568c825356f4e6a745a3ecbdb455a1eb041e5afc7c7af0
MD5 dfdabb265efc9c26be5289c511511389
SHA1 c387798871a19fd5e30a9feca8b60bf41106af50
SHA512 6a657dfc1d04f9cb827a4a49c9dbe3685c2c003865518a1e60cef21e5d6ed740dfc2855d304b3fa97e9f62ba0eb91bd5b8eb2755c2dfa95b4b99773997f782b0
SSDEEP 98304:2tn3RxevmLuYCblpR/dOZu3krc6rdo0Ku3l:+nh5L6bOYkc6rdo0L
MD5 SHA1 SHA512 SSDEEP

android arch:arm64 arch:x86 arch:x64 arch:arm

com.easemusicuysf

Android Permissions

d66c18488a8a2d94db568c825356f4e6a745a3ecbdb455a1eb041e5afc7c7af0.bin

Permissions

android.permission.INSTALL_SHORTCUT

android.permission.USE_FINGERPRINT

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.GET_PACKAGE_SIZE

android.permission.ADD_VOICEMAIL

android.permission.READ_EXTERNAL_STORAGE

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.POST_NOTIFICATIONS

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.INTERNET

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.WAKE_LOCK

android.permission.SET_ALARM

android.permission.CALL_PHONE

android.permission.USES_POLICY_FORCE_LOCK

android.permission.VIBRATE

android.permission.REQUEST_COMPANION_RUN_IN_BACKGROUND

android.permission.REQUEST_COMPANION_USE_DATA_IN_BACKGROUND

android.permission.REQUEST_DELETE_PACKAGES

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_SETTINGS

android.permission.REORDER_TASKS

android.permission.SCHEDULE_EXACT_ALARM

android.permission.QUERY_ALL_PACKAGES

android.permission.READ_PHONE_STATE

d66c18488a8a2d94db568c825356f4e6a745a3ecbdb455a1eb041e5afc7c7af0.bin

com.easemusicuysf.p061i

com.easemusicuysf.p055d

com.easemusicuysf.p036k

com.easemusicuysf.p037f

com.easemusicuysf.p052n

com.easemusicuysf.p029u

com.easemusicuysf.p054m

com.easemusicuysf.p089w

com.easemusicuysf.p059d

com.easemusicuysf.p038v

com.easemusicuysf.p069m

com.easemusicuysf.p035l

com.easemusicuysf.p082h

com.easemusicuysf.p092k

com.easemusicuysf.p095d

com.easemusicuysf.p042o

com.easemusicuysf.p041n

com.easemusicuysf.p043q

com.easemusicuysf.p078o

com.easemusicuysf.p015o

com.easemusicuysf.p068m

com.easemusicuysf.p057p

com.easemusicuysf.p038g

com.easemusicuysf.p047a

com.easemusicuysf.p074n

com.easemusicuysf.p047z

com.easemusicuysf.p032y

com.easemusicuysf.p027h

com.easemusicuysf.p015l

com.easemusicuysf.p017v

com.easemusicuysf.p012j

com.easemusicuysf.p060c

Sharing

General

Malware Config

Signatures

File Explorer

d66c18488a8a2d94db568c825356f4e6a745a3ecbdb455a1eb041e5afc7c7af0.bin

com.easemusicuysf.p061i

com.easemusicuysf.p055d

com.easemusicuysf.p036k

com.easemusicuysf.p037f

com.easemusicuysf.p052n

com.easemusicuysf.p029u

com.easemusicuysf.p054m

com.easemusicuysf.p089w

com.easemusicuysf.p059d

com.easemusicuysf.p038v

com.easemusicuysf.p069m

com.easemusicuysf.p035l

com.easemusicuysf.p082h

com.easemusicuysf.p092k

com.easemusicuysf.p095d

com.easemusicuysf.p042o

com.easemusicuysf.p041n

com.easemusicuysf.p043q

com.easemusicuysf.p078o

com.easemusicuysf.p015o

com.easemusicuysf.p068m

com.easemusicuysf.p057p

com.easemusicuysf.p038g

com.easemusicuysf.p047a

com.easemusicuysf.p074n

com.easemusicuysf.p047z

com.easemusicuysf.p032y

com.easemusicuysf.p027h

com.easemusicuysf.p015l

com.easemusicuysf.p017v

com.easemusicuysf.p012j

com.easemusicuysf.p060c

Android Permissions

d66c18488a8a2d94db568c825356f4e6a745a3ecbdb455a1eb041e5afc7c7af0.bin