525b4f9bbb5f275e4d15ccc7be8720b60e0170822ee0777b8e47971cb6dfdec9[.]bin

General

Target
525b4f9bbb5f275e4d15ccc7be8720b60e0170822ee0777b8e47971cb6dfdec9.bin
Size 2.4MB
Sample241105-16hveazcle
SHA256 525b4f9bbb5f275e4d15ccc7be8720b60e0170822ee0777b8e47971cb6dfdec9
MD5 8b2f0576d9c5646478cb3789894906cd
SHA1 f742f6d543343993ae95d9b5fc278c352339250b
SHA512 6873e18f99eb41f7f3535969babc98d07f4a836f52f372f78ccd6824a60e57a81814fb9efba4274246c59d6303c0666d4a059a43b28706c08e176b79c29803b8
SSDEEP 49152:ZqHDnWoUzYveF7I8EpAyGCX0THCYKdFcU69l+ZvQuhqjsrwd0N4O304Qc3+TM4RN:W3Uzn7TEmyGCYZcO3uhqwUd0SQGc3+w0
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE

Requests dangerous framework permissions 9 IoCs

description	ioc
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows applications to use exact alarm APIs.	android.permission.SCHEDULE_EXACT_ALARM
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE

File Explorer

525b4f9bbb5f275e4d15ccc7be8720b60e0170822ee0777b8e47971cb6dfdec9.bin

.apk 2.4MB

525b4f9bbb5f275e4d15ccc7be8720b60e0170822ee0777b8e47971cb6dfdec9.bin

SHA256 525b4f9bbb5f275e4d15ccc7be8720b60e0170822ee0777b8e47971cb6dfdec9
MD5 8b2f0576d9c5646478cb3789894906cd
SHA1 f742f6d543343993ae95d9b5fc278c352339250b
SHA512 6873e18f99eb41f7f3535969babc98d07f4a836f52f372f78ccd6824a60e57a81814fb9efba4274246c59d6303c0666d4a059a43b28706c08e176b79c29803b8
SSDEEP 49152:ZqHDnWoUzYveF7I8EpAyGCX0THCYKdFcU69l+ZvQuhqjsrwd0N4O304Qc3+TM4RN:W3Uzn7TEmyGCYZcO3uhqwUd0SQGc3+w0
MD5 SHA1 SHA512 SSDEEP

android arch:arm64 arch:arm arch:x86 arch:x64

com.familyweightaju

Android Permissions

525b4f9bbb5f275e4d15ccc7be8720b60e0170822ee0777b8e47971cb6dfdec9.bin

Permissions

android.permission.INSTALL_SHORTCUT

android.permission.GET_PACKAGE_SIZE

android.permission.ADD_VOICEMAIL

android.permission.READ_EXTERNAL_STORAGE

android.permission.CLEAR_APP_CACHE

android.permission.USE_FINGERPRINT

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.POST_NOTIFICATIONS

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.INTERNET

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.WAKE_LOCK

android.permission.CALL_PHONE

android.permission.USES_POLICY_FORCE_LOCK

android.permission.VIBRATE

android.permission.REQUEST_COMPANION_RUN_IN_BACKGROUND

android.permission.REQUEST_COMPANION_USE_DATA_IN_BACKGROUND

android.permission.REQUEST_DELETE_PACKAGES

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_SETTINGS

android.permission.REORDER_TASKS

android.permission.SCHEDULE_EXACT_ALARM

android.permission.QUERY_ALL_PACKAGES

android.permission.READ_PHONE_STATE

525b4f9bbb5f275e4d15ccc7be8720b60e0170822ee0777b8e47971cb6dfdec9.bin

com.familyweightaju.p092p

com.familyweightaju.p099h

com.familyweightaju.p027i

com.familyweightaju.p041w

com.familyweightaju.p066a

com.familyweightaju.p080z

com.familyweightaju.p043a

com.familyweightaju.p033j

com.familyweightaju.p018d

com.familyweightaju.p036u

com.familyweightaju.p058e

com.familyweightaju.p089j

com.familyweightaju.p015q

com.familyweightaju.p046r

com.familyweightaju.p053q

com.familyweightaju.p058v

com.familyweightaju.p062y

com.familyweightaju.p053u

com.familyweightaju.p029z

com.familyweightaju.p092i

com.familyweightaju.p072g

com.familyweightaju.p017g

com.familyweightaju.p081x

com.familyweightaju.p060s

com.familyweightaju.p060l

com.familyweightaju.p080q

com.familyweightaju.p074o

com.familyweightaju.p033b

com.familyweightaju.p096u

com.familyweightaju.p058q

com.familyweightaju.p092r

Sharing

General

Malware Config

Signatures

File Explorer

525b4f9bbb5f275e4d15ccc7be8720b60e0170822ee0777b8e47971cb6dfdec9.bin

com.familyweightaju.p092p

com.familyweightaju.p099h

com.familyweightaju.p027i

com.familyweightaju.p041w

com.familyweightaju.p066a

com.familyweightaju.p080z

com.familyweightaju.p043a

com.familyweightaju.p033j

com.familyweightaju.p018d

com.familyweightaju.p036u

com.familyweightaju.p058e

com.familyweightaju.p089j

com.familyweightaju.p015q

com.familyweightaju.p046r

com.familyweightaju.p053q

com.familyweightaju.p058v

com.familyweightaju.p062y

com.familyweightaju.p053u

com.familyweightaju.p029z

com.familyweightaju.p092i

com.familyweightaju.p072g

com.familyweightaju.p017g

com.familyweightaju.p081x

com.familyweightaju.p060s

com.familyweightaju.p060l

com.familyweightaju.p080q

com.familyweightaju.p074o

com.familyweightaju.p033b

com.familyweightaju.p096u

com.familyweightaju.p058q

com.familyweightaju.p092r

Android Permissions

525b4f9bbb5f275e4d15ccc7be8720b60e0170822ee0777b8e47971cb6dfdec9.bin