fabdf6f305ed33293ffaac8651657426a6fa4a5bba79d95bf6b3ff481e9e6400

General

Target
fabdf6f305ed33293ffaac8651657426a6fa4a5bba79d95bf6b3ff481e9e6400
Size 24.0MB
Sample241107-hxxyvszraq
SHA256 fabdf6f305ed33293ffaac8651657426a6fa4a5bba79d95bf6b3ff481e9e6400
MD5 d6f6290c38d02d54b744b611f9f552ea
SHA1 a1c4f0da62946896a5ea8a3bb207586bf37b8452
SHA512 72836061d6c68390eddb7a94e36338bc8af88cd4f6dea28fd156ab86bd9aa265d4cfc2341701e745afc085c6c99997756796a543315eefb720dc9c3d42bf7550
SSDEEP 393216:KKVIq36TYlbmOVf6VSmkNS1S9gu4ehUyA0uVnFk3q36TZvzzGCsuNpJbFk5fuE:MtsIOMVST4St0vVnFk3tR/tDdbFkBuE
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Attempts to obfuscate APK file format
Applies obfuscation techniques to the APK format in order to hinder analysis

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by in-call services to bind with the system. Allows apps to handle aspects of phone calls while they are in progress.	android.permission.BIND_INCALL_SERVICE
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE

Requests dangerous framework permissions 4 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an application a broad access to external storage in scoped storage.	android.permission.MANAGE_EXTERNAL_STORAGE

File Explorer

fabdf6f305ed33293ffaac8651657426a6fa4a5bba79d95bf6b3ff481e9e6400

.apk 24.0MB
wavvzucu22.png

.apk 5.1MB
wavvzucu29.png

.apk 5.5MB

fabdf6f305ed33293ffaac8651657426a6fa4a5bba79d95bf6b3ff481e9e6400

SHA256 fabdf6f305ed33293ffaac8651657426a6fa4a5bba79d95bf6b3ff481e9e6400
MD5 d6f6290c38d02d54b744b611f9f552ea
SHA1 a1c4f0da62946896a5ea8a3bb207586bf37b8452
SHA512 72836061d6c68390eddb7a94e36338bc8af88cd4f6dea28fd156ab86bd9aa265d4cfc2341701e745afc085c6c99997756796a543315eefb720dc9c3d42bf7550
SSDEEP 393216:KKVIq36TYlbmOVf6VSmkNS1S9gu4ehUyA0uVnFk3q36TZvzzGCsuNpJbFk5fuE:MtsIOMVST4St0vVnFk3tR/tDdbFkBuE
MD5 SHA1 SHA512 SSDEEP

android arch:arm64 arch:arm

Password

infected

plnfexcq.fehlwuggm.kyxvb

wavvzucu22.png

SHA256 fb61250d64af13947366d86122dfa4fa9600cb5b7f4bb900a081cccfbfb487ec
MD5 0adfa947acd3880f6d6e05c85350b388
SHA1 a2077a02ea901af075f42ba327ad350f07f8dca5
SHA512 c650bb9021042412f6811476edf022a8c92705c2a9f336b366901960c6273c3718e7d68f78fc1c38c68cfd1f2ef45ae64fcf5f19e75ccd44f4ed18a9304c09db
SSDEEP 98304:F/sQQpYSly9aNaHV9EdJ+cpITRo6tJ4Ob34L5HEs4altMvN422A:F/hc09y+cVSr34L5khalWS22A
MD5 SHA1 SHA512 SSDEEP

android

Password

infected

gqcvctl.msthh.swxgkyv

wavvzucu29.png

SHA256 099fce4dd0f15f591f59d9e39d68c669c7ec4e421c113d86605626318e4751b5
MD5 5d51b02f5270a1e1dbb1c96ec1e7940f
SHA1 c6230451d7e487ede0253d33fa7e546ba4d1250e
SHA512 fe66a795e128b4c5a95e2bde6dceb7e9f644c449480e4f335dd2165b2bf3dfc815f0519400dff2b421049df5b63bb426629d54255fce73c643970e3a2851589e
SSDEEP 98304:WNARYe2HY6cwRWPChfhzJ+cpITSnoQ8yoRNauYQjzClzy1QUWaj4hBR+HWbFkek9:Wq5p6TRWPUfhF+crnx8xWGCs1QNp+2b8
MD5 SHA1 SHA512 SSDEEP

android arch:arm64 arch:arm

Password

infected

gqcvctl.msthh.swxgkyv

Android Permissions

fabdf6f305ed33293ffaac8651657426a6fa4a5bba79d95bf6b3ff481e9e6400

Permissions

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.MANAGE_EXTERNAL_STORAGE

fabdf6f305ed33293ffaac8651657426a6fa4a5bba79d95bf6b3ff481e9e6400

eu57.qw0j2f.o9doba

androidx.core.content.FileProvider

wavvzucu22.png

com.service.zooxyfdm.PhoneCallzooxyfdmActivity

com.service.zooxyfdm.RequestzooxyfdmActivity

com.google.zooxyfdm.service.RemotezooxyfdmService

com.google.zooxyfdm.service.LocalzooxyfdmService

com.service.zooxyfdm.service.NotizooxyfdmService

com.google.zooxyfdm.service.JobWorkerzooxyfdmService

com.google.zooxyfdm.service.FzooxyfdmService

com.service.zooxyfdm.service.PhoneListenerzooxyfdmService

com.service.zooxyfdm.service.PhoneCallzooxyfdmService

com.service.zooxyfdm.service.PhoneManagerzooxyfdmService

com.google.zooxyfdm.receiver.NotificationzooxyfdmReceiver

com.service.zooxyfdm.receiver.OutgoingzooxyfdmReceiver

com.service.zooxyfdm.receiver.PhoneStatezooxyfdmReceiver

com.service.zooxyfdm.receiver.RebootzooxyfdmReceiver

wavvzucu29.png

com.service.zooxyfdm.RequestzooxyfdmActivity

com.service.zooxyfdm.PhoneCallzooxyfdmActivity

com.google.zooxyfdm.service.LocalzooxyfdmService

com.google.zooxyfdm.service.FzooxyfdmService

com.service.zooxyfdm.service.PhoneListenerzooxyfdmService

com.google.zooxyfdm.service.RemotezooxyfdmService

com.service.zooxyfdm.service.PhoneCallzooxyfdmService

com.service.zooxyfdm.service.NotizooxyfdmService

com.service.zooxyfdm.service.PhoneManagerzooxyfdmService

com.google.zooxyfdm.service.JobWorkerzooxyfdmService

com.service.zooxyfdm.receiver.OutgoingzooxyfdmReceiver

com.service.zooxyfdm.receiver.RebootzooxyfdmReceiver

com.service.zooxyfdm.receiver.ScreenzooxyfdmReceiver

com.google.zooxyfdm.receiver.NotificationzooxyfdmReceiver

com.service.zooxyfdm.receiver.BluetoothzooxyfdmReceiver

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

fabdf6f305ed33293ffaac8651657426a6fa4a5bba79d95bf6b3ff481e9e6400

eu57.qw0j2f.o9doba

androidx.core.content.FileProvider

wavvzucu22.png

com.service.zooxyfdm.PhoneCallzooxyfdmActivity

com.service.zooxyfdm.RequestzooxyfdmActivity

com.google.zooxyfdm.service.RemotezooxyfdmService

com.google.zooxyfdm.service.LocalzooxyfdmService

com.service.zooxyfdm.service.NotizooxyfdmService

com.google.zooxyfdm.service.JobWorkerzooxyfdmService

com.google.zooxyfdm.service.FzooxyfdmService

com.service.zooxyfdm.service.PhoneListenerzooxyfdmService

com.service.zooxyfdm.service.PhoneCallzooxyfdmService

com.service.zooxyfdm.service.PhoneManagerzooxyfdmService

com.google.zooxyfdm.receiver.NotificationzooxyfdmReceiver

com.service.zooxyfdm.receiver.OutgoingzooxyfdmReceiver

com.service.zooxyfdm.receiver.PhoneStatezooxyfdmReceiver

com.service.zooxyfdm.receiver.RebootzooxyfdmReceiver

wavvzucu29.png

com.service.zooxyfdm.RequestzooxyfdmActivity

com.service.zooxyfdm.PhoneCallzooxyfdmActivity

com.google.zooxyfdm.service.LocalzooxyfdmService

com.google.zooxyfdm.service.FzooxyfdmService

com.service.zooxyfdm.service.PhoneListenerzooxyfdmService

com.google.zooxyfdm.service.RemotezooxyfdmService

com.service.zooxyfdm.service.PhoneCallzooxyfdmService

com.service.zooxyfdm.service.NotizooxyfdmService

com.service.zooxyfdm.service.PhoneManagerzooxyfdmService

com.google.zooxyfdm.service.JobWorkerzooxyfdmService

com.service.zooxyfdm.receiver.OutgoingzooxyfdmReceiver

com.service.zooxyfdm.receiver.RebootzooxyfdmReceiver

com.service.zooxyfdm.receiver.ScreenzooxyfdmReceiver

com.google.zooxyfdm.receiver.NotificationzooxyfdmReceiver

com.service.zooxyfdm.receiver.BluetoothzooxyfdmReceiver

Android Permissions

fabdf6f305ed33293ffaac8651657426a6fa4a5bba79d95bf6b3ff481e9e6400