Resubmissions

16-12-2024 22:35

241216-2hvdzaskey 10

12-12-2024 22:07

241212-11qm3aypez 10

General

  • Target

    9aba04336d441f199887d2d445dbd58309b3ed756a26eb726b26e3f8ff957df9.bin

  • Size

    260KB

  • MD5

    4f7b32500ea2e5250e81b3a8b878be1c

  • SHA1

    db21c59f74c6e3de12e8eca2395cae36e6852793

  • SHA256

    9aba04336d441f199887d2d445dbd58309b3ed756a26eb726b26e3f8ff957df9

  • SHA512

    00effd48b0adf4d470ac1f984623103921773cb8d51e7fa0e7438d6f9278d2a4970c88a19b02f45708c2f345cab1619eead0a209b8590e69030b57546c90045c

  • SSDEEP

    6144:CcYLu/UgO2iLqivVgV4G+qdFzJtlRrrAXEzfwfanvc:GCfiBgZdFzHWywynE

Score
6/10

Malware Config

Signatures

  • Attempts to obfuscate APK file format

    Applies obfuscation techniques to the APK format in order to hinder analysis

  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 11 IoCs

Files

  • 9aba04336d441f199887d2d445dbd58309b3ed756a26eb726b26e3f8ff957df9.bin
    .apk android arch:arm

    efriwei.kpqnszgsk.kbhjgq.uvdqbxbs

    npk7.kmlvymx


Android Permissions

9aba04336d441f199887d2d445dbd58309b3ed756a26eb726b26e3f8ff957df9.bin

Permissions

android.hiiykg.ddmo.hutjgwsz

android.evnisdua.qdgh.odqgi

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.VIBRATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WAKE_LOCK

android.permission.INTERNET

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.READ_CONTACTS

android.permission.READ_PHONE_STATE

android.permission.GET_ACCOUNTS

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.FOREGROUND_SERVICE

android.permission.POST_NOTIFICATIONS

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.MANAGE_EXTERNAL_STORAGE

android.permission.READ_PHONE_NUMBERS