67395066972d0da17cedb8e587edd1acf45086ecad97c493ff3a6083e825cab4[.]bin

General

Target
67395066972d0da17cedb8e587edd1acf45086ecad97c493ff3a6083e825cab4.bin
Size 2.0MB
Sample241125-115f8aynet
SHA256 67395066972d0da17cedb8e587edd1acf45086ecad97c493ff3a6083e825cab4
MD5 4671deaf5b498168ed7a1d9a38a48870
SHA1 4dec1f00d4cbb93ac4ca20d9988e07a95c72c40c
SHA512 ffad9211fd403f960753fedd256c455e76ba41e0306375dac6b75983ae9b691e6ff7be804599f25b972b79b45ddd6af04d849ae482b09d77e95da148a86989fa
SSDEEP 49152:gTGnYpWKtoc/uid0YqpSXfhj34/Q+mEOsEv62LE3Mj0/oyLCyYnRJmXR2r1vQRm/:znYp1Oau60YqpAoIEgNLWoyGyYnGh2Zn
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE

Requests dangerous framework permissions 9 IoCs

description	ioc
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an app to access location in the background.	android.permission.ACCESS_BACKGROUND_LOCATION
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application a broad access to external storage in scoped storage.	android.permission.MANAGE_EXTERNAL_STORAGE
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE

File Explorer

67395066972d0da17cedb8e587edd1acf45086ecad97c493ff3a6083e825cab4.bin

.apk 2.0MB

67395066972d0da17cedb8e587edd1acf45086ecad97c493ff3a6083e825cab4.bin

SHA256 67395066972d0da17cedb8e587edd1acf45086ecad97c493ff3a6083e825cab4
MD5 4671deaf5b498168ed7a1d9a38a48870
SHA1 4dec1f00d4cbb93ac4ca20d9988e07a95c72c40c
SHA512 ffad9211fd403f960753fedd256c455e76ba41e0306375dac6b75983ae9b691e6ff7be804599f25b972b79b45ddd6af04d849ae482b09d77e95da148a86989fa
SSDEEP 49152:gTGnYpWKtoc/uid0YqpSXfhj34/Q+mEOsEv62LE3Mj0/oyLCyYnRJmXR2r1vQRm/:znYp1Oau60YqpAoIEgNLWoyGyYnGh2Zn
MD5 SHA1 SHA512 SSDEEP

android arch:x86 arch:arm64 arch:x64 arch:arm

com.decidehundred2

com.decidehundred2.p036m

android.app.action.ACTION_DEVICE_ADMIN_DISABLE_REQUESTED android.app.action.ACTION_PASSWORD_FAILED android.app.action.ACTION_PASSWORD_SUCCEEDED android.app.action.DEVICE_ADMIN_ENABLED android.provider.Telephony.SMS_RECEIVED android.intent.action.EXTERNAL_APPLICATIONS_AVAILABLE android.app.action.DEVICE_ADMIN_DISABLED

com.decidehundred2.p061d

android.provider.Telephony.SMS_RECEIVED

com.decidehundred2.p021a

android.provider.Telephony.SMS_DELIVER

com.decidehundred2.p070d

android.provider.Telephony.WAP_PUSH_DELIVER

com.decidehundred2.p068d

com.decidehundred2.p054r

android.intent.action.BOOT_COMPLETED android.intent.action.AIRPLANE_MODE android.intent.action.ACTION_SHUTDOWN android.intent.action.ACTION_POWER_DISCONNECTED android.intent.action.DATE_CHANGED android.intent.action.BATTERY_OKAY android.intent.action.ACTION_POWER_CONNECTED android.provider.Telephony.SMS_RECEIVED android.intent.action.QUICKBOOT_POWERON android.intent.action.EXTERNAL_APPLICATIONS_AVAILABLE android.intent.action.USER_PRESENT android.intent.action.PACKAGE_ADDED android.intent.action.PACKAGE_REMOVED android.provider.Telephony.SMS_RECEIVED android.intent.action.SCREEN_ON android.intent.action.SCREEN_OFF android.intent.action.EXTERNAL_APPLICATIONS_AVAILABLE android.net.conn.CONNECTIVITY_CHANGE android.net.wifi.WIFI_STATE_CHANGED android.intent.action.DREAMING_STOPPED

com.decidehundred2.p087u

com.decidehundred2.p049v

Android Permissions

67395066972d0da17cedb8e587edd1acf45086ecad97c493ff3a6083e825cab4.bin

Permissions

android.permission.VIBRATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.READ_SMS

android.permission.RECEIVE_SMS

android.permission.FOREGROUND_SERVICE

android.permission.ACCESS_WIFI_STATE

android.permission.BATTERY_STATS

android.permission.USE_FINGERPRINT

android.permission.CALL_PHONE

android.permission.USE_FULL_SCREEN_INTENT

android.permission.REQUEST_COMPANION_RUN_IN_BACKGROUND

android.permission.ACCESS_BACKGROUND_LOCATION

android.permission.WRITE_SETTINGS

android.permission.MANAGE_EXTERNAL_STORAGE

android.permission.GET_PACKAGE_SIZE

android.permission.WAKE_LOCK

android.permission.INTERNET

android.permission.SEND_SMS

android.permission.REQUEST_DELETE_PACKAGES

android.permission.REORDER_TASKS

android.permission.ACCESS_WIFI_STATE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.READ_EXTERNAL_STORAGE

android.Manifest.permission.READ_PHONE_STATE

android.permission.USES_POLICY_FORCE_LOCK

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_SYNC_SETTINGS

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.REQUEST_COMPANION_USE_DATA_IN_BACKGROUND

android.permission.READ_PHONE_STATE

67395066972d0da17cedb8e587edd1acf45086ecad97c493ff3a6083e825cab4.bin

com.decidehundred2.p012g

com.decidehundred2.p046m

com.decidehundred2.p029s

com.decidehundred2.p054z

com.decidehundred2.p092a

com.decidehundred2.p011e

com.decidehundred2.p099s

com.decidehundred2.p055u

com.decidehundred2.p090r

com.decidehundred2.p030p

com.decidehundred2.p026h

com.decidehundred2.LGrOtAhLkAcIbShLaQoRyHlUhWy

com.decidehundred2.p061n

com.decidehundred2.p010l

com.decidehundred2.p057q

com.decidehundred2.p085g

com.decidehundred2.p046z

com.decidehundred2.p092f

com.decidehundred2.p033n

com.decidehundred2.p030h

com.decidehundred2.p045v

com.decidehundred2.p040j

com.decidehundred2.p036m

com.decidehundred2.p061d

com.decidehundred2.p021a

com.decidehundred2.p070d

com.decidehundred2.p068d

com.decidehundred2.p054r

com.decidehundred2.p087u

com.decidehundred2.p049v

Sharing

General

Malware Config

Signatures

File Explorer

67395066972d0da17cedb8e587edd1acf45086ecad97c493ff3a6083e825cab4.bin

com.decidehundred2.p012g

com.decidehundred2.p046m

com.decidehundred2.p029s

com.decidehundred2.p054z

com.decidehundred2.p092a

com.decidehundred2.p011e

com.decidehundred2.p099s

com.decidehundred2.p055u

com.decidehundred2.p090r

com.decidehundred2.p030p

com.decidehundred2.p026h

com.decidehundred2.LGrOtAhLkAcIbShLaQoRyHlUhWy

com.decidehundred2.p061n

com.decidehundred2.p010l

com.decidehundred2.p057q

com.decidehundred2.p085g

com.decidehundred2.p046z

com.decidehundred2.p092f

com.decidehundred2.p033n

com.decidehundred2.p030h

com.decidehundred2.p045v

com.decidehundred2.p040j

com.decidehundred2.p036m

com.decidehundred2.p061d

com.decidehundred2.p021a

com.decidehundred2.p070d

com.decidehundred2.p068d

com.decidehundred2.p054r

com.decidehundred2.p087u

com.decidehundred2.p049v

Android Permissions

67395066972d0da17cedb8e587edd1acf45086ecad97c493ff3a6083e825cab4.bin