General

  • Target
    7dd6bd944f7b5d318488c7248eef0963d549541033eba73e70d6f58b2869d946
  • Size 5.8MB
  • Sample241216-c7psca1ral
  • SHA256 7dd6bd944f7b5d318488c7248eef0963d549541033eba73e70d6f58b2869d946
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Signatures

  • TangleBot payload 1 IoCs
  • Tanglebot family
  • Declares broadcast receivers with permission to handle system events 1 IoCs
  • Declares services with permission to bind to the system 2 IoCs
  • Requests dangerous framework permissions 1 IoCs

File Explorer

  • 7dd6bd944f7b5d318488c7248eef0963d549541033eba73e70d6f58b2869d946
    .apk 5.8MB
  • base.apk
    .apk 4.8MB

7dd6bd944f7b5d318488c7248eef0963d549541033eba73e70d6f58b2869d946

  • SHA256 7dd6bd944f7b5d318488c7248eef0963d549541033eba73e70d6f58b2869d946
  • MD5 SHA1 SHA512 SSDEEP
  • TangleBot payload

com.mem.installdropsession

Android Permissions

7dd6bd944f7b5d318488c7248eef0963d549541033eba73e70d6f58b2869d946

Permissions

android.permission.REQUEST_INSTALL_PACKAGES