General

  • Target

    f660f547593f9fae1ec7c520935f2fc227661f12546ee24fc20fd0a31d0bca09.bin

  • Size

    1.7MB

  • MD5

    651da6e7e8f6765c9ed2d9a5e54a2c8e

  • SHA1

    53f1f242c837a659ded81fb68700772a61e1b970

  • SHA256

    f660f547593f9fae1ec7c520935f2fc227661f12546ee24fc20fd0a31d0bca09

  • SHA512

    9e4fb97dc335c7b86651c52aaabbb23907bc5d28940c1b09708807d24e52cf643f326ea5f568a5ce7b9e062bca0d61f7677973959876a49ed24d813bc302e920

  • SSDEEP

    49152:trLTScWlO8qvWvqjjx1Il4UwKSJp2FIXpyxrqms:tGcGwvWCjDUwH2FIOrqms

Score
10/10

Malware Config

Extracted

Family

tanglebot

C2

https://t.me/+ZJAj-vCkxkE4N2E0

https://t.me/+jz7SONzTmCI0YmM0

https://t.me/+saoiPgiTyD1iZDBk

Signatures

  • TangleBot payload 1 IoCs
  • Tanglebot family
  • Declares services with permission to bind to the system 1 IoCs

Files

  • f660f547593f9fae1ec7c520935f2fc227661f12546ee24fc20fd0a31d0bca09.bin
    .apk android arch:arm arch:x64 arch:arm64 arch:x86

    ieue.peie.kdjd

    ieue.peie.kdjd.MainActivity


Android Permissions

f660f547593f9fae1ec7c520935f2fc227661f12546ee24fc20fd0a31d0bca09.bin

Permissions

android.permission.INTERNET

android.permission.QUERY_ALL_PACKAGES

android.permission.REQUEST_DELETE_PACKAGES

android.permission.FOREGROUND_SERVICE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.WAKE_LOCK