General

  • Target

    a72e0d19cb6db3d96d27f97874c4462589ae0242eae024d924d08b0663eb5019.apk

  • Size

    2.2MB

  • MD5

    10559d78e94963214a2b3ebd827b029d

  • SHA1

    e7051d3be56258361c78874657f4b7e8b7cdfadf

  • SHA256

    a72e0d19cb6db3d96d27f97874c4462589ae0242eae024d924d08b0663eb5019

  • SHA512

    1138be8bfa7dd1ca0aac71ba4c2dc9af750e1b985f9eb280fb63b2f35e7d18404d628980920af86bf20eb44f9f40b063a6fe915493e31dcf7dac9b025819d0f3

  • SSDEEP

    49152:gxbwEzfr2gMICR5dOTYan9WXWDEVPVP3QXSZ8Lsj62mc:wzfr2J5cTYFxpVuSaLsjAc

Score
10/10

Malware Config

Extracted

Family

tanglebot

C2

https://t.me/anbsh26

https://t.me/anbshaa

https://t.me/anbshbb

Signatures

  • TangleBot payload 1 IoCs
  • Tanglebot family
  • Attempts to obfuscate APK file format

    Applies obfuscation techniques to the APK format in order to hinder analysis

  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 4 IoCs

Files

  • a72e0d19cb6db3d96d27f97874c4462589ae0242eae024d924d08b0663eb5019.apk
    .apk android

    com.hqnxyxefsxbjbppnc.grqsoegnhznihjq

    com.hqnxyxefsxbjbppnc.grqsoegnhznihjq.MainActivity


Android Permissions

a72e0d19cb6db3d96d27f97874c4462589ae0242eae024d924d08b0663eb5019.apk

Permissions

android.permission.INTERNET

android.permission.QUERY_ALL_PACKAGES

android.permission.REQUEST_DELETE_PACKAGES

android.permission.FOREGROUND_SERVICE

android.permission.READ_PHONE_STATE

android.permission.CALL_PHONE

android.permission.RECORD_AUDIO

android.permission.CAMERA

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.WAKE_LOCK