0b9d3e86a4f5e2912a50892206d4ec33c0283142e7d2de8f8fab6ec4fab42790[.]bin

General

Target

0b9d3e86a4f5e2912a50892206d4ec33c0283142e7d2de8f8fab6ec4fab42790.bin
Size

3.3MB
MD5

f235b6d6209816fe828dc4f78a555188
SHA1

00917a8c74fe00d4fd68b379a43ee2f0e53cfe36
SHA256

0b9d3e86a4f5e2912a50892206d4ec33c0283142e7d2de8f8fab6ec4fab42790
SHA512

091c230dafd83cd30977fcbb694cccf0f9628fecfe47634b68e0ab31ad97492ede35942d723e239b6242b4c8a11abcebb75046858f4a87a78a7f26fcc265c014
SSDEEP

98304:s95xaGEdoLzOZc74fNGhIpLc9pIvsGSNC3ZxB8:lGgonacMfKIJc9p4CCJs

Score

6^/10

Malware Config

Signatures

Attempts to obfuscate APK file format
Applies obfuscation techniques to the APK format in order to hinder analysis

Requests dangerous framework permissions 11 IoCs

description	ioc
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read image files from external storage.	android.permission.READ_MEDIA_IMAGES
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an application to read video files from external storage.	android.permission.READ_MEDIA_VIDEO

Files

0b9d3e86a4f5e2912a50892206d4ec33c0283142e7d2de8f8fab6ec4fab42790.bin
.apk android arch:arm64 arch:arm

rjfk.zlqc.gq

rjfk.zlqc.gq.MainActivity

Activities

rjfk.zlqc.gq.MainActivity

android.intent.action.MAIN

Permissions

android.permission.INTERNET
android.permission.WRITE_CONTACTS
android.permission.GET_ACCOUNTS
android.permission.AUTHENTICATE_ACCOUNTS
android.permission.READ_PHONE_STATE
android.permission.SEND_SMS
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.READ_CONTACTS
com.google.android.c2dm.permission.RECEIVE
android.permission.READ_SMS
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_MEDIA_IMAGES
android.permission.POST_NOTIFICATIONS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.READ_MEDIA_VIDEO
android.permission.WAKE_LOCK
android.permission.FOREGROUND_SERVICE

Receivers

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

rjfk.zlqc.gq.BootCompletedReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.PHONE_STATE

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.work.diagnostics.REQUEST_DIAGNOSTICS

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY
android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW
android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.TIME_SET
android.intent.action.TIMEZONE_CHANGED

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

Services

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

rjfk.zlqc.gq.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

Android Permissions

0b9d3e86a4f5e2912a50892206d4ec33c0283142e7d2de8f8fab6ec4fab42790.bin

Permissions

android.permission.INTERNET

android.permission.WRITE_CONTACTS

android.permission.GET_ACCOUNTS

android.permission.AUTHENTICATE_ACCOUNTS

android.permission.READ_PHONE_STATE

android.permission.SEND_SMS

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_CONTACTS

com.google.android.c2dm.permission.RECEIVE

android.permission.READ_SMS

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_MEDIA_IMAGES

android.permission.POST_NOTIFICATIONS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.READ_MEDIA_VIDEO

android.permission.WAKE_LOCK

android.permission.FOREGROUND_SERVICE

Sharing

General

Malware Config

Signatures

Files

rjfk.zlqc.gq

rjfk.zlqc.gq.MainActivity

Activities

rjfk.zlqc.gq.MainActivity

Permissions

Receivers

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

rjfk.zlqc.gq.BootCompletedReceiver

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.RescheduleReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

Services

com.google.firebase.messaging.FirebaseMessagingService

rjfk.zlqc.gq.FirebaseMessagingService

Android Permissions

0b9d3e86a4f5e2912a50892206d4ec33c0283142e7d2de8f8fab6ec4fab42790.bin