com.mem.installdropsession.InstallDropSession
android.intent.action.MAIN
com.example.android.apis.content.SESSION_API_PACKAGE_INSTALLED
Behavioral task
behavioral1
Sample
1f8aa27d59c8b9c5d1f28610c1f195c7c6efa2c80f98842fd3fb18b4241472c3.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral2
Sample
1f8aa27d59c8b9c5d1f28610c1f195c7c6efa2c80f98842fd3fb18b4241472c3.apk
Resource
android-x64-20240624-en
Behavioral task
behavioral3
Sample
1f8aa27d59c8b9c5d1f28610c1f195c7c6efa2c80f98842fd3fb18b4241472c3.apk
Resource
android-x64-arm64-20240624-en
Behavioral task
behavioral4
Sample
base.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral5
Sample
base.apk
Resource
android-x64-20240624-en
Behavioral task
behavioral6
Sample
base.apk
Resource
android-x64-arm64-20240624-en
Target
1f8aa27d59c8b9c5d1f28610c1f195c7c6efa2c80f98842fd3fb18b4241472c3.apk
Size
6.2MB
MD5
5b3ce001c0ea9a77b5665c1a306577bf
SHA1
b62e459587848bdecca63ef848349ecdaa6a97d0
SHA256
1f8aa27d59c8b9c5d1f28610c1f195c7c6efa2c80f98842fd3fb18b4241472c3
SHA512
338c3f164516ad3670bf3690732db14c3b684d450979ed3ff5d5b8fd297d50308fb8323ccc43f61f06a65f5d7027f3b7c57ad393b247c295dc3b9223881cf168
SSDEEP
98304:Cd2ZrWcENKuqxWc8fL84x5i+/fg6QMzfr2J5cTYFxpVuSaLsjA2ridR:mkuq684x5MtcTsvVRciAGcR
tanglebot
https://t.me/anbsh26
https://t.me/anbshaa
https://t.me/anbshbb
| resource | yara_rule |
|---|---|
| sample | family_tanglebot3 |
| static1/unpack001/base.apk | family_tanglebot2 |
Applies obfuscation techniques to the APK format in order to hinder analysis
| description | ioc |
|---|---|
| Required by accessibility services to bind with the system. Allows apps to access accessibility features. | android.permission.BIND_ACCESSIBILITY_SERVICE |
| description | ioc |
|---|---|
| Allows an app to access approximate location. | android.permission.ACCESS_COARSE_LOCATION |
| Required to be able to access the camera device. | android.permission.CAMERA |
| Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps. | android.permission.SYSTEM_ALERT_WINDOW |
| Allows an application to request installing packages. | android.permission.REQUEST_INSTALL_PACKAGES |
| Allows an app to access precise location. | android.permission.ACCESS_FINE_LOCATION |
| Allows an application to read from external storage. | android.permission.READ_EXTERNAL_STORAGE |
| Allows an application to collect component usage statistics. | android.permission.PACKAGE_USAGE_STATS |
| Allows an application to write to external storage. | android.permission.WRITE_EXTERNAL_STORAGE |
| Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. | android.permission.READ_PHONE_STATE |
| Allows an application to read from external storage. | android.permission.READ_EXTERNAL_STORAGE |
| Required to be able to discover and pair nearby Bluetooth devices. | android.permission.BLUETOOTH_SCAN |
| Allows an application to write to external storage. | android.permission.WRITE_EXTERNAL_STORAGE |
| Allows an app to access location in the background. | android.permission.ACCESS_BACKGROUND_LOCATION |
| Required to be able to connect to paired Bluetooth devices. | android.permission.BLUETOOTH_CONNECT |
| Allows an application to record audio. | android.permission.RECORD_AUDIO |
android.intent.action.MAIN
com.example.android.apis.content.SESSION_API_PACKAGE_INSTALLED
android.permission.ACCESS_WIFI_STATE
android.permission.ACCESS_COARSE_LOCATION
android.permission.BLUETOOTH
android.permission.CAMERA
android.permission.ACCESS_NETWORK_STATE
android.permission.SYSTEM_ALERT_WINDOW
android.permission.BLUETOOTH
android.permission.REQUEST_INSTALL_PACKAGES
android.permission.ACCESS_FINE_LOCATION
android.permission.READ_EXTERNAL_STORAGE
android.permission.PACKAGE_USAGE_STATS
com.google.android.gms.permission.ACTIVITY_RECOGNITION
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.GET_TASKS
android.permission.FOREGROUND_SERVICE
android.permission.RECEIVE_LAUNCH_BROADCASTS
android.permission.READ_PHONE_STATE
android.permission.ACTION_MANAGE_OVERLAY_PERMISSION
android.permission.WAKE_LOCK
android.permission.READ_EXTERNAL_STORAGE
android.permission.GET_PACKAGE_SIZE
android.permission.BLUETOOTH_SCAN
android.permission.QUERY_ALL_PACKAGES
android.permission.QUICKBOOT_POWERON
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
android.permission.USE_FULL_SCREEN_INTENT
android.permission.INTERNET
android.permission.VIBRATE
android.permission.CHANGE_WIFI_STATE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_BACKGROUND_LOCATION
android.permission.DISABLE_KEYGUARD
android.permission.BLUETOOTH_CONNECT
android.permission.RECORD_AUDIO
android.intent.action.CHOOSER
android.intent.action.MAIN
android.permission.INTERNET
android.permission.QUERY_ALL_PACKAGES
android.permission.REQUEST_DELETE_PACKAGES
android.permission.FOREGROUND_SERVICE
android.permission.READ_PHONE_STATE
android.permission.CALL_PHONE
android.permission.RECORD_AUDIO
android.permission.CAMERA
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS
android.permission.WAKE_LOCK
android.intent.action.USER_PRESENT
android.intent.action.SCREEN_ON
android.intent.action.SCREEN_OFF
restartinstallerservice
android.intent.action.PHONE_STATE
android.provider.Telephony.SMS_RECEIVED
android.provider.Telephony.SMS_DELIVER
android.accessibilityservice.AccessibilityService
android.permission.ACCESS_WIFI_STATE
android.permission.ACCESS_COARSE_LOCATION
android.permission.BLUETOOTH
android.permission.CAMERA
android.permission.ACCESS_NETWORK_STATE
android.permission.SYSTEM_ALERT_WINDOW
android.permission.BLUETOOTH
android.permission.REQUEST_INSTALL_PACKAGES
android.permission.ACCESS_FINE_LOCATION
android.permission.READ_EXTERNAL_STORAGE
android.permission.PACKAGE_USAGE_STATS
com.google.android.gms.permission.ACTIVITY_RECOGNITION
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.GET_TASKS
android.permission.FOREGROUND_SERVICE
android.permission.RECEIVE_LAUNCH_BROADCASTS
android.permission.READ_PHONE_STATE
android.permission.ACTION_MANAGE_OVERLAY_PERMISSION
android.permission.WAKE_LOCK
android.permission.READ_EXTERNAL_STORAGE
android.permission.GET_PACKAGE_SIZE
android.permission.BLUETOOTH_SCAN
android.permission.QUERY_ALL_PACKAGES
android.permission.QUICKBOOT_POWERON
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
android.permission.USE_FULL_SCREEN_INTENT
android.permission.INTERNET
android.permission.VIBRATE
android.permission.CHANGE_WIFI_STATE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_BACKGROUND_LOCATION
android.permission.DISABLE_KEYGUARD
android.permission.BLUETOOTH_CONNECT
android.permission.RECORD_AUDIO