edbfa361d5fc7e6bb9181d3344fc842df4c6cb8094fb8223b1967c374de54703[.]bin

Sharing

Copy URL Twitter E-mail

General

Target
edbfa361d5fc7e6bb9181d3344fc842df4c6cb8094fb8223b1967c374de54703.bin
Size 3.7MB
Sample241112-13jmjasemp
SHA256 edbfa361d5fc7e6bb9181d3344fc842df4c6cb8094fb8223b1967c374de54703
MD5 1f803fed4f81a2c864d54da14fb7da1b
SHA1 d1de6de4c42faa166162b33c0ebe12dbb30bc390
SHA512 e5efcc25b03ae33c0e0abe102919613b19c40718c637b48a7a49e7d76a3ca1454e0d9d2b16d268f766fde3d77176c4e512183f696279d39fb63541e43b3cc6cd
SSDEEP 98304:BPt5E20Lt2fRzNUDZaGDou6S2jZZwYLIf5jOySNgrKDD+lk5:r5v0ImouQjZxyjZdKDam5
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Attempts to obfuscate APK file format
Applies obfuscation techniques to the APK format in order to hinder analysis

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE

Requests dangerous framework permissions 31 IoCs

description	ioc
Allows an application to collect component usage statistics.	android.permission.PACKAGE_USAGE_STATS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Required to be able to advertise and connect to nearby devices via Wi-Fi.	android.permission.NEARBY_WIFI_DEVICES
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Required to be able to advertise to nearby Bluetooth devices.	android.permission.BLUETOOTH_ADVERTISE
Required to be able to connect to paired Bluetooth devices.	android.permission.BLUETOOTH_CONNECT
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows read access to the device's phone number(s).	android.permission.READ_PHONE_NUMBERS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Required to be able to access the camera device.	android.permission.CAMERA
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read the user's call log.	android.permission.READ_CALL_LOG
Allows an application a broad access to external storage in scoped storage.	android.permission.MANAGE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an app to access location in the background.	android.permission.ACCESS_BACKGROUND_LOCATION
Allows an application to access any geographic locations persisted in the user's shared collection.	android.permission.ACCESS_MEDIA_LOCATION
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Required to be able to access the camera device.	android.permission.CAMERA

File Explorer

edbfa361d5fc7e6bb9181d3344fc842df4c6cb8094fb8223b1967c374de54703.bin

.apk 3.7MB

edbfa361d5fc7e6bb9181d3344fc842df4c6cb8094fb8223b1967c374de54703.bin

SHA256 edbfa361d5fc7e6bb9181d3344fc842df4c6cb8094fb8223b1967c374de54703
MD5 1f803fed4f81a2c864d54da14fb7da1b
SHA1 d1de6de4c42faa166162b33c0ebe12dbb30bc390
SHA512 e5efcc25b03ae33c0e0abe102919613b19c40718c637b48a7a49e7d76a3ca1454e0d9d2b16d268f766fde3d77176c4e512183f696279d39fb63541e43b3cc6cd
SSDEEP 98304:BPt5E20Lt2fRzNUDZaGDou6S2jZZwYLIf5jOySNgrKDD+lk5:r5v0ImouQjZxyjZdKDam5
MD5 SHA1 SHA512 SSDEEP

android

com.dehodigipuhixoyi.mafuko

android.permission.PEERS_MAC_ADDRESS com.coloros.operationManual.permission.tipsprovider android.permission.FOREGROUND_SERVICE com.oppo.launcher.permission.WRITE_SETTINGS android.permission.PACKAGE_USAGE_STATS android.permission.WAKE_LOCK android.permission.ACCESS_WIFI_STATE android.permission.UPDATE_APP_OPS_STATS android.permission.RECEIVE_BOOT_COMPLETED android.permission.READ_CONTACTS android.permission.ACTION_MANAGE_OVERLAY_PERMISSION com.oplus.permission.safe.PASSWORD android.permission.FOREGROUND_SERVICE_LOCATION com.coloros.bootreg.permission.OPPO_BOOTREG_COMPLETED heytap.permission.cloud.ACCESS_CLOUD com.oplus.permission.safe.BACKUP android.permission.ACCESS_COARSE_LOCATION android.permission.QUERY_ALL_PACKAGES android.permission.ACCESS_NETWORK_STATE com.oplus.permission.safe.POWER android.permission.DISABLE_KEYGUARD android.permission.WRITE_SETTINGS android.permission.ACCESS_NETWORK_STATE com.oppo.permission.safe.SECURITY android.permission.QUERY_ALL_PACKAGES android.permission.SYSTEM_ALERT_WINDOW com.oppo.permission.RUTILCMD android.permission.CHANGE_COMPONENT_ENABLED_STATE android.permission.WRITE_CONTACTS android.permission.MODIFY_AUDIO_SETTINGS com.oplus.permission.safe.SETTINGS_SEARCH android.permission.NEARBY_WIFI_DEVICES com.oppo.permission.safe.BACKUP android.permission.FOREGROUND_SERVICE_REMOTE_MESSAGING com.oplus.metis.factdata.permission.DATABASE android.permission.POST_NOTIFICATIONS com.coloros.alarmclock.permission.ACCESS_PROVIDER android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS android.permission.ACCESS_MTP com.oplus.permission.safe.SECURITY android.permission.BLUETOOTH_ADVERTISE com.oplus.permission.safe.CONNECTIVITY android.permission.BLUETOOTH_CONNECT android.permission.CALL_PHONE android.permission.MODIFY_PHONE_STATE android.permission.GET_ACCOUNTS com.oppo.permission.safe.SAU android.permission.READ_PHONE_NUMBERS com.oplus.permission.safe.PRIVATE android.permission.WRITE_EXTERNAL_STORAGE android.permission.GET_CLIPS android.permission.SYSTEM_ALERT_WINDOW com.oplus.bootreg.permission.OPLUS_BOOTREG_COMPLETED android.permission.CHANGE_NETWORK_STATE android.permission.WRITE_MEDIA_STORAGE com.coloros.codebook.permission.READ android.permission.WRITE_EXTERNAL_STORAGE com.oplus.permission.safe.PROTECT android.permission.CAMERA android.permission.MANAGE_USERS oplus.permission.OPLUS_COMPONENT_SAFE android.permission.CLEAR_APP_USER_DATA android.permission.RECEIVE_LAUNCH_BROADCASTS android.permission.CHANGE_WIFI_STATE android.permission.QUICKBOOT_POWERON oppo.permission.OPPO_COMPONENT_SAFE android.permission.MANAGE_APP_OPS_MODES com.oplus.permission.safe.SAU com.oplus.thirdkit.permission.SECURITY android.permission.WRITE_SECURE_SETTINGS android.permission.INSTALL_PACKAGES android.permission.ACCESS_FINE_LOCATION android.permission.FORCE_STOP_PACKAGES android.permission.READ_EXTERNAL_STORAGE android.permission.INTERACT_ACROSS_USERS_FULL android.permission.RECEIVE_BOOT_COMPLETED android.permission.WAKE_LOCK android.permission.REQUEST_DELETE_PACKAGES com.oppo.launcher.permission.READ_SETTINGS android.permission.RECEIVE_SMS android.permission.ACCESS_COARSE_LOCATION android.permission.READ_CLIPS android.permission.READ_PHONE_STATE com.oplus.permission.safe.SETTINGS android.permission.MANAGE_USB android.permission.ACCESS_WIFI_STATE android.permission.READ_CALL_LOG android.permission.INTERNET android.permission.WRITE_CLIPS oplus.permission.PHONE_CLONE_DATA_MIGRATION android.permission.MANAGE_EXTERNAL_STORAGE android.permission.READ_PHONE_STATE com.android.permission.GET_INSTALLED_APPS android.permission.OVERRIDE_WIFI_CONFIG android.permission.SEND_SMS com.oplus.permission.safe.AI_APP android.permission.DEVICE_POWER android.permission.INTERNET android.permission.GET_PACKAGE_SIZE android.permission.FOREGROUND_SERVICE android.permission.READ_SMS android.permission.ACCESS_BACKGROUND_LOCATION android.permission.VIBRATE android.permission.ACCESS_MEDIA_LOCATION android.permission.GET_TASKS android.permission.WRITE_CONTACTS android.permission.BLUETOOTH android.permission.CAMERA com.oplus.permission.safe.APP_MANAGER android.permission.DELETE_PACKAGES com.oplus.codebook.permission.BACKUP_AND_RESTORE

com.dehodigipuhixoyi.mafuko.ronubafitajavu

android.intent.action.MAIN

com.kowuzevucine.xomeji.jajaxa

com.kowuzevucine.xomeji.cizuliki

com.kowuzevucine.xomeji.tebuxumuxubavu

com.kowuzevucine.xomeji.sowewojoke.gilajoro.repizebobereva

com.kowuzevucine.xomeji.murofemusewibi.wefeja

com.kowuzevucine.xomeji.kutiyaluzoraha.judemo

com.kowuzevucine.xomeji.gegunavihu.zinadoze

com.kowuzevucine.xomeji.xaromugi.gimecere

com.kowuzevucine.xomeji.gegunavihu.xubu

android.intent.action.SENDTO android.intent.action.SEND

com.kowuzevucine.xomeji.jimemetimigusi

com.female.update.noise.copy.Cgriefsqueeze

android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW

com.female.update.noise.copy.Krescueoften

com.google.android.gms.actions.SEARCH_ACTION android.intent.action.VIEW

com.female.update.noise.copy.Ocrystalkeep

com.female.update.noise.copy.Zpepperearly

android.appwidget.action.APPWIDGET_CONFIGURE

com.kowuzevucine.xomeji.kutiyaluzoraha.xohohifu

android.app.action.DEVICE_ADMIN_DISABLED android.app.action.DEVICE_ADMIN_ENABLED android.app.action.ACTION_DEVICE_ADMIN_DISABLE_REQUESTED android.app.action.ACTION_PASSWORD_FAILED android.app.action.ACTION_PASSWORD_SUCCEEDED

com.kowuzevucine.xomeji.xuzekeretocecu.lihezuyovizuha

android.intent.action.BOOT_COMPLETED android.intent.action.QUICKBOOT_POWERON com.htc.intent.action.QUICKBOOT_POWERON android.intent.action.REBOOT

com.kowuzevucine.xomeji.xuzekeretocecu.zokafaxisejoru

android.intent.action.PACKAGE_ADDED android.intent.action.PACKAGE_REMOVED android.intent.action.ACTION_SHUTDOWN android.intent.action.ACTION_POWER_CONNECTED android.intent.action.ACTION_POWER_DISCONNECTED android.net.conn.CONNECTIVITY_CHANGE android.net.wifi.WIFI_STATE_CHANGED android.intent.action.AIRPLANE_MODE android.intent.action.SCREEN_ON android.intent.action.SCREEN_OFF android.intent.action.BATTERY_OKAY android.intent.action.DATE_CHANGED

com.kowuzevucine.xomeji.gegunavihu.lazabifihizi

android.provider.Telephony.SMS_RECEIVED

com.kowuzevucine.xomeji.gegunavihu.xiwexegi

android.provider.Telephony.WAP_PUSH_DELIVER

com.kowuzevucine.xomeji.gegunavihu.tugezecuwitu

android.provider.Telephony.SMS_DELIVER

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED android.intent.action.TIME_SET android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

com.female.update.noise.copy.Ltextspace

com.yahoo.android.account.auth.yes com.yahoo.android.account.auth.no

Android Permissions

edbfa361d5fc7e6bb9181d3344fc842df4c6cb8094fb8223b1967c374de54703.bin

Permissions

android.permission.PEERS_MAC_ADDRESS

com.coloros.operationManual.permission.tipsprovider

android.permission.FOREGROUND_SERVICE

com.oppo.launcher.permission.WRITE_SETTINGS

android.permission.PACKAGE_USAGE_STATS

android.permission.WAKE_LOCK

android.permission.ACCESS_WIFI_STATE

android.permission.UPDATE_APP_OPS_STATS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.READ_CONTACTS

android.permission.ACTION_MANAGE_OVERLAY_PERMISSION

com.oplus.permission.safe.PASSWORD

android.permission.FOREGROUND_SERVICE_LOCATION

com.coloros.bootreg.permission.OPPO_BOOTREG_COMPLETED

heytap.permission.cloud.ACCESS_CLOUD

com.oplus.permission.safe.BACKUP

android.permission.ACCESS_COARSE_LOCATION

android.permission.QUERY_ALL_PACKAGES

android.permission.ACCESS_NETWORK_STATE

com.oplus.permission.safe.POWER

android.permission.DISABLE_KEYGUARD

android.permission.WRITE_SETTINGS

android.permission.ACCESS_NETWORK_STATE

com.oppo.permission.safe.SECURITY

android.permission.QUERY_ALL_PACKAGES

android.permission.SYSTEM_ALERT_WINDOW

com.oppo.permission.RUTILCMD

android.permission.CHANGE_COMPONENT_ENABLED_STATE

android.permission.WRITE_CONTACTS

android.permission.MODIFY_AUDIO_SETTINGS

com.oplus.permission.safe.SETTINGS_SEARCH

android.permission.NEARBY_WIFI_DEVICES

com.oppo.permission.safe.BACKUP

android.permission.FOREGROUND_SERVICE_REMOTE_MESSAGING

com.oplus.metis.factdata.permission.DATABASE

android.permission.POST_NOTIFICATIONS

com.coloros.alarmclock.permission.ACCESS_PROVIDER

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.ACCESS_MTP

com.oplus.permission.safe.SECURITY

android.permission.BLUETOOTH_ADVERTISE

com.oplus.permission.safe.CONNECTIVITY

android.permission.BLUETOOTH_CONNECT

android.permission.CALL_PHONE

android.permission.MODIFY_PHONE_STATE

android.permission.GET_ACCOUNTS

com.oppo.permission.safe.SAU

android.permission.READ_PHONE_NUMBERS

com.oplus.permission.safe.PRIVATE

android.permission.WRITE_EXTERNAL_STORAGE

Sharing

General

Malware Config

Signatures

File Explorer

edbfa361d5fc7e6bb9181d3344fc842df4c6cb8094fb8223b1967c374de54703.bin

com.dehodigipuhixoyi.mafuko.ronubafitajavu

com.kowuzevucine.xomeji.jajaxa

com.kowuzevucine.xomeji.cizuliki

com.kowuzevucine.xomeji.tebuxumuxubavu

com.kowuzevucine.xomeji.sowewojoke.gilajoro.repizebobereva

com.kowuzevucine.xomeji.murofemusewibi.wefeja

com.kowuzevucine.xomeji.kutiyaluzoraha.judemo

com.kowuzevucine.xomeji.gegunavihu.zinadoze

com.kowuzevucine.xomeji.xaromugi.gimecere

com.kowuzevucine.xomeji.gegunavihu.xubu

com.kowuzevucine.xomeji.jimemetimigusi

com.female.update.noise.copy.Cgriefsqueeze

com.female.update.noise.copy.Krescueoften

com.female.update.noise.copy.Ocrystalkeep

com.female.update.noise.copy.Zpepperearly

com.kowuzevucine.xomeji.wosunivazuso.mosaki

com.kowuzevucine.xomeji.murofemusewibi.soyefazeka

com.kowuzevucine.xomeji.murofemusewibi.tojisadise

com.kowuzevucine.xomeji.murofemusewibi.xowafa

com.kowuzevucine.xomeji.bitamitegumu.nino

com.kowuzevucine.xomeji.bevonoje.dufi

com.kowuzevucine.xomeji.gegunavihu.hapodosineja

androidx.work.impl.background.systemalarm.SystemAlarmService

androidx.work.impl.background.systemjob.SystemJobService

androidx.work.impl.foreground.SystemForegroundService

androidx.room.MultiInstanceInvalidationService

com.female.update.noise.copy.Haliennurse

com.kowuzevucine.xomeji.kutiyaluzoraha.xohohifu

com.kowuzevucine.xomeji.xuzekeretocecu.lihezuyovizuha

com.kowuzevucine.xomeji.xuzekeretocecu.zokafaxisejoru

com.kowuzevucine.xomeji.gegunavihu.lazabifihizi

com.kowuzevucine.xomeji.gegunavihu.xiwexegi

com.kowuzevucine.xomeji.gegunavihu.tugezecuwitu

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

com.female.update.noise.copy.Ltextspace

androidx.work.impl.WorkManagerInitializer

Android Permissions

edbfa361d5fc7e6bb9181d3344fc842df4c6cb8094fb8223b1967c374de54703.bin