General

  • Target

    6c05973f2ff2f4cf12c8e102e7e80ddd1281353ddde67ad835e8fd6968d47ac1.bin

  • Size

    212KB

  • MD5

    4efd58e418536190ec8f33f04bb9b50e

  • SHA1

    c0538370ff81c1878b8a01e3ec658a9119562e9a

  • SHA256

    6c05973f2ff2f4cf12c8e102e7e80ddd1281353ddde67ad835e8fd6968d47ac1

  • SHA512

    b630d1bdad243acba13bbd15b25fff57690aba6a97001c6471dbddfa6cc94669d64a8f2b63e195f422eeb1899099c7e291269b8a5e39eb897883be8108ec7e99

  • SSDEEP

    3072:Af4rcPraEopc4P5WVTSpKmJ+D9KJXuRIJvSYpETVmdDVIojpwGwsfvsIMaJgcE5Q:AwrqS5WhxIuRIJvfEslpw/seapg/KzV

Score
6/10

Malware Config

Signatures

  • Attempts to obfuscate APK file format

    Applies obfuscation techniques to the APK format in order to hinder analysis

  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 12 IoCs

Files

  • 6c05973f2ff2f4cf12c8e102e7e80ddd1281353ddde67ad835e8fd6968d47ac1.bin
    .apk android arch:arm

    veqsvax.qglfjucep.mmkxho

    orb7.fydttx


Android Permissions

6c05973f2ff2f4cf12c8e102e7e80ddd1281353ddde67ad835e8fd6968d47ac1.bin

Permissions

android.ylyduqi.geewtdw.szshvdyk

android.vbzeuinl.tfycll.ueiagkay

android.pdsefjt.dkymxwpt.tafgb

android.yhtxw.fpkqa.nkfv

android.qqcbuoo.uqkn.tyki

android.permission.CHANGE_NETWORK_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.POST_NOTIFICATIONS

android.permission.RECEIVE_SMS

android.permission.GET_ACCOUNTS

android.permission.ACCESS_WIFI_STATE

android.permission.MANAGE_EXTERNAL_STORAGE

android.permission.FOREGROUND_SERVICE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_SMS

android.permission.READ_PHONE_STATE

android.permission.SEND_SMS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.WAKE_LOCK

android.permission.INTERNET

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.READ_CONTACTS

android.permission.VIBRATE

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.READ_PHONE_NUMBERS

android.permission.RECEIVE_BOOT_COMPLETED