ahmyth | e6a23cfb208a2e7447ccc2d3942833a4322ed7fdf1e4c2d1774950ee472705aa[.]apk

General

Target
e6a23cfb208a2e7447ccc2d3942833a4322ed7fdf1e4c2d1774950ee472705aa.apk
Size 263KB
Sample241123-dmlqmasrak
SHA256 e6a23cfb208a2e7447ccc2d3942833a4322ed7fdf1e4c2d1774950ee472705aa
MD5 36465ba8c5a2ec177be8030d2c00db2e
SHA1 a717d22f253964aef01d78c4c9093521563eb65f
SHA512 7a0858508019cd7106d25c3fbab362989879dbf8be255d445be8ffba969fe3f07897a39f0fe880c40d7047741a4e2d81c1c96f1b2ed2ba1ee25ba14ee599865f
SSDEEP 6144:G0Kuuo7IdxyiM7xR8z4usqNhhD8clzKQbABYNR90Y:fRuo7Xd7xR8susAhN8clpAQ9b
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

ahmyth

Malware Config

Extracted

Family

ahmyth

C2

http://192.168.1.37:4444

Signatures

Ahmyth family
ahmyth

Requests dangerous framework permissions 10 IoCs

description	ioc
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to read the user's call log.	android.permission.READ_CALL_LOG
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS

File Explorer

e6a23cfb208a2e7447ccc2d3942833a4322ed7fdf1e4c2d1774950ee472705aa.apk

.apk 263KB

e6a23cfb208a2e7447ccc2d3942833a4322ed7fdf1e4c2d1774950ee472705aa.apk

SHA256 e6a23cfb208a2e7447ccc2d3942833a4322ed7fdf1e4c2d1774950ee472705aa
MD5 36465ba8c5a2ec177be8030d2c00db2e
SHA1 a717d22f253964aef01d78c4c9093521563eb65f
SHA512 7a0858508019cd7106d25c3fbab362989879dbf8be255d445be8ffba969fe3f07897a39f0fe880c40d7047741a4e2d81c1c96f1b2ed2ba1ee25ba14ee599865f
SSDEEP 6144:G0Kuuo7IdxyiM7xR8z4usqNhhD8clzKQbABYNR90Y:fRuo7Xd7xR8susAhN8clpAQ9b
MD5 SHA1 SHA512 SSDEEP

android

ahmyth.mine.king.ahmyth

Android Permissions

e6a23cfb208a2e7447ccc2d3942833a4322ed7fdf1e4c2d1774950ee472705aa.apk

Permissions

android.permission.WAKE_LOCK

android.permission.CAMERA

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.READ_PHONE_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.READ_CALL_LOG

android.permission.RECORD_AUDIO

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.ACCESS_FINE_LOCATION

android.permission.READ_CONTACTS

e6a23cfb208a2e7447ccc2d3942833a4322ed7fdf1e4c2d1774950ee472705aa.apk

ahmyth.mine.king.ahmyth.MainActivity

ahmyth.mine.king.ahmyth.MainService

ahmyth.mine.king.ahmyth.MyReceiver

Sharing

General

Malware Config

Extracted

Signatures

File Explorer

e6a23cfb208a2e7447ccc2d3942833a4322ed7fdf1e4c2d1774950ee472705aa.apk

ahmyth.mine.king.ahmyth.MainActivity

ahmyth.mine.king.ahmyth.MainService

ahmyth.mine.king.ahmyth.MyReceiver

Android Permissions

e6a23cfb208a2e7447ccc2d3942833a4322ed7fdf1e4c2d1774950ee472705aa.apk