General

  • Target

    cdd98fe66b7b87ba7615b85f56a795b3c47f0de0c7a95f8c947e671b40ed4564.bin

  • Size

    212KB

  • MD5

    838b20c6b6a6f202da192c1564e058ea

  • SHA1

    827d5a89293707071547dd950328bab70c3fbd33

  • SHA256

    cdd98fe66b7b87ba7615b85f56a795b3c47f0de0c7a95f8c947e671b40ed4564

  • SHA512

    f03d3b87d1189776d15e46ef7745fc13af8bd33d30af1e0c2cc3414a0ad7d1095fbec5f88981a2a28a04ba4ba7380d4d8da7a9195af70566d6f41d73b6cc0cd9

  • SSDEEP

    3072:a9I+yh+OWk1Ms3eg5KUCB9KJXuRIJvSYpETVmdDVIojpwGwsfvsIMaJgcE5o3xAm:Z+bYnKUyIuRIJvfEslpw/seapZxw2zv

Score
6/10

Malware Config

Signatures

  • Attempts to obfuscate APK file format

    Applies obfuscation techniques to the APK format in order to hinder analysis

  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 12 IoCs

Files

  • cdd98fe66b7b87ba7615b85f56a795b3c47f0de0c7a95f8c947e671b40ed4564.bin
    .apk android arch:arm

    tmsnhhz.xhtrubpke.ktdiyp

    ifx7.sgipyz


Android Permissions

cdd98fe66b7b87ba7615b85f56a795b3c47f0de0c7a95f8c947e671b40ed4564.bin

Permissions

android.krscn.ajtsldt.uqikcibv

android.sktaias.yuvuwe.ztdfvszu

android.ihdhhoi.ymxukpet.zlfjg

android.yvfgtlyf.lzzzb.erry

android.dstkerk.tawg.swmy

android.permission.CHANGE_NETWORK_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.POST_NOTIFICATIONS

android.permission.RECEIVE_SMS

android.permission.GET_ACCOUNTS

android.permission.ACCESS_WIFI_STATE

android.permission.MANAGE_EXTERNAL_STORAGE

android.permission.FOREGROUND_SERVICE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_SMS

android.permission.READ_PHONE_STATE

android.permission.SEND_SMS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.WAKE_LOCK

android.permission.INTERNET

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.READ_CONTACTS

android.permission.VIBRATE

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.READ_PHONE_NUMBERS

android.permission.RECEIVE_BOOT_COMPLETED