84b421d895925c1b6ff1ff60f802bb723f6b814429c460ed305ecff943bb210f[.]bin

General

Target
84b421d895925c1b6ff1ff60f802bb723f6b814429c460ed305ecff943bb210f.bin
Size 2.4MB
Sample241115-1ws8dsslgt
SHA256 84b421d895925c1b6ff1ff60f802bb723f6b814429c460ed305ecff943bb210f
MD5 4522df6fbfb1afc061de0510f5be770e
SHA1 225ad09c3da92cd0833ceed416bcc2cb45f339ef
SHA512 b0d883099afa2c2493ab6201d76805544d254976caa53e2697a5167bb4b403ce6d03a0d8764bb944434ea1a0815eaeac6aa7281b211fce6c712347474783b0ff
SSDEEP 49152:lIvNKB2Ec2onwDkvxYld0wbv0IdQo7JneKKcmNVA4Gs45F8o3PP2N2Rbjiq7d5hJ:042aviYBbvhFtXK/NVAB5F8o/uN2RbLH
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE

Requests dangerous framework permissions 9 IoCs

description	ioc
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows applications to use exact alarm APIs.	android.permission.SCHEDULE_EXACT_ALARM
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE

File Explorer

84b421d895925c1b6ff1ff60f802bb723f6b814429c460ed305ecff943bb210f.bin

.apk 2.4MB

84b421d895925c1b6ff1ff60f802bb723f6b814429c460ed305ecff943bb210f.bin

SHA256 84b421d895925c1b6ff1ff60f802bb723f6b814429c460ed305ecff943bb210f
MD5 4522df6fbfb1afc061de0510f5be770e
SHA1 225ad09c3da92cd0833ceed416bcc2cb45f339ef
SHA512 b0d883099afa2c2493ab6201d76805544d254976caa53e2697a5167bb4b403ce6d03a0d8764bb944434ea1a0815eaeac6aa7281b211fce6c712347474783b0ff
SSDEEP 49152:lIvNKB2Ec2onwDkvxYld0wbv0IdQo7JneKKcmNVA4Gs45F8o3PP2N2Rbjiq7d5hJ:042aviYBbvhFtXK/NVAB5F8o/uN2RbLH
MD5 SHA1 SHA512 SSDEEP

android arch:arm64 arch:arm arch:x86 arch:x64

com.ourhorse19

Android Permissions

84b421d895925c1b6ff1ff60f802bb723f6b814429c460ed305ecff943bb210f.bin

Permissions

android.permission.INSTALL_SHORTCUT

android.permission.READ_EXTERNAL_STORAGE

android.permission.GET_PACKAGE_SIZE

android.permission.USE_FINGERPRINT

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.POST_NOTIFICATIONS

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.INTERNET

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.WAKE_LOCK

android.permission.CALL_PHONE

android.permission.USES_POLICY_FORCE_LOCK

android.permission.VIBRATE

android.permission.REQUEST_COMPANION_RUN_IN_BACKGROUND

android.permission.REQUEST_COMPANION_USE_DATA_IN_BACKGROUND

android.permission.REQUEST_DELETE_PACKAGES

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_SETTINGS

android.permission.REORDER_TASKS

android.permission.SCHEDULE_EXACT_ALARM

android.permission.QUERY_ALL_PACKAGES

android.permission.READ_PHONE_STATE

84b421d895925c1b6ff1ff60f802bb723f6b814429c460ed305ecff943bb210f.bin

com.ourhorse19.p093x

com.ourhorse19.p022p

com.ourhorse19.p085x

com.ourhorse19.p089r

com.ourhorse19.p084k

com.ourhorse19.p084b

com.ourhorse19.p025x

com.ourhorse19.p082r

com.ourhorse19.p042o

com.ourhorse19.p019c

com.ourhorse19.p015i

com.ourhorse19.p025r

com.ourhorse19.p083m

com.ourhorse19.p096w

com.ourhorse19.p017k

com.ourhorse19.p040f

com.ourhorse19.p014o

com.ourhorse19.p066a

com.ourhorse19.p066u

com.ourhorse19.p032e

com.ourhorse19.p089m

com.ourhorse19.p035k

com.ourhorse19.p036e

com.ourhorse19.p057b

com.ourhorse19.p039d

com.ourhorse19.p045w

com.ourhorse19.p031v

com.ourhorse19.p033k

com.ourhorse19.p050p

com.ourhorse19.p052g

com.ourhorse19.p039q

com.ourhorse19.p016p

Sharing

General

Malware Config

Signatures

File Explorer

84b421d895925c1b6ff1ff60f802bb723f6b814429c460ed305ecff943bb210f.bin

com.ourhorse19.p093x

com.ourhorse19.p022p

com.ourhorse19.p085x

com.ourhorse19.p089r

com.ourhorse19.p084k

com.ourhorse19.p084b

com.ourhorse19.p025x

com.ourhorse19.p082r

com.ourhorse19.p042o

com.ourhorse19.p019c

com.ourhorse19.p015i

com.ourhorse19.p025r

com.ourhorse19.p083m

com.ourhorse19.p096w

com.ourhorse19.p017k

com.ourhorse19.p040f

com.ourhorse19.p014o

com.ourhorse19.p066a

com.ourhorse19.p066u

com.ourhorse19.p032e

com.ourhorse19.p089m

com.ourhorse19.p035k

com.ourhorse19.p036e

com.ourhorse19.p057b

com.ourhorse19.p039d

com.ourhorse19.p045w

com.ourhorse19.p031v

com.ourhorse19.p033k

com.ourhorse19.p050p

com.ourhorse19.p052g

com.ourhorse19.p039q

com.ourhorse19.p016p

Android Permissions

84b421d895925c1b6ff1ff60f802bb723f6b814429c460ed305ecff943bb210f.bin