8919f2c84bccb75b94393010ea857a4d28754354cbaf7043f49d47ff89318f7c[.]apk

Resubmissions

21/12/2024, 23:02

241221-21ca4ssqhy10

20/12/2024, 07:27

241220-jalsratphm10

Sharing

Copy URL Twitter E-mail

General

Target
8919f2c84bccb75b94393010ea857a4d28754354cbaf7043f49d47ff89318f7c.apk
Size 7.1MB
Sample241220-jalsratphm
SHA256 8919f2c84bccb75b94393010ea857a4d28754354cbaf7043f49d47ff89318f7c
MD5 2ee1c7272b7efc3155f00066226643c2
SHA1 86fcca0d8e4778ce3bbda033dbb8e6ae1558b5e1
SHA512 b6ba882ee7cfd1735779d9438c0c3d0660d726a1e0ec8f392dbe316f162efe3b5bfb06a9caa866624df988cfd9c91ad1c2f3cac8a51dc6edb51c4a9cfd72e128
SSDEEP 196608:RUITvGePB7u5D6jc/WT9ZfGmw1Inj4KB8c8akpPq2s:5TvVkDD/KGmhZB8ekVq2s
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 5 IoCs

description	ioc
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE
Required by call screening services to bind with the system. Allows apps to filter and manage incoming phone calls.	android.permission.BIND_SCREENING_SERVICE
Required by autofill services to bind with the system. Allows apps to autofill information in forms.	android.permission.BIND_AUTOFILL_SERVICE
Required by input method services to bind with the system. Allows apps to provide custom input methods (keyboards).	android.permission.BIND_INPUT_METHOD
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE

Requests dangerous framework permissions 1 IoCs

description	ioc
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES

File Explorer

8919f2c84bccb75b94393010ea857a4d28754354cbaf7043f49d47ff89318f7c.apk

.apk 7.1MB
bayadoje

.apk 7.6MB

8919f2c84bccb75b94393010ea857a4d28754354cbaf7043f49d47ff89318f7c.apk

SHA256 8919f2c84bccb75b94393010ea857a4d28754354cbaf7043f49d47ff89318f7c
MD5 2ee1c7272b7efc3155f00066226643c2
SHA1 86fcca0d8e4778ce3bbda033dbb8e6ae1558b5e1
SHA512 b6ba882ee7cfd1735779d9438c0c3d0660d726a1e0ec8f392dbe316f162efe3b5bfb06a9caa866624df988cfd9c91ad1c2f3cac8a51dc6edb51c4a9cfd72e128
SSDEEP 196608:RUITvGePB7u5D6jc/WT9ZfGmw1Inj4KB8c8akpPq2s:5TvVkDD/KGmhZB8ekVq2s
MD5 SHA1 SHA512 SSDEEP

android

com.mocereti.fill

bayadoje

SHA256 129240b79c82258e10643b16f0947b2ccbb88e6fea642176a85f8d21d94a2ab6
MD5 baf3c550534acd7dce3795cb7176d738
SHA1 2f99a11bedeaa8357b75414e0797d8cfb337aa7d
SHA512 c3180ee141d9080aa97c38936dfb9bb164a8151912f2b9594275566eb8f107dfbd8bd167e8e2472a7a53562f34b5f3be88ccc501efe37ae404c4b8ddfa346f34
SSDEEP 98304:so/Krg4JmdxU1g9hZB0/HRCQoR9cKzqtKsRm2ieSyeTgnrSs2a+5nWKCYFWY:sJmdxU1IN0J6zqNBYErSs2a+xH
MD5 SHA1 SHA512 SSDEEP

android

com.kofisahoke.access

com.kofisahoke.access.yGgANYZhwSkKYzdM

android.provider.Telephony.SMS_RECEIVED android.provider.Telephony.SMS_DELIVER

com.kofisahoke.access.abzxaarho

android.provider.Telephony.WAP_PUSH_DELIVER

com.kofisahoke.access.CjLVEcMdYV

android.intent.action.BOOT_COMPLETED android.intent.action.PHONE_STATE

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED android.intent.action.TIME_SET android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.work.diagnostics.REQUEST_DIAGNOSTICS

androidx.profileinstaller.ProfileInstallReceiver

androidx.profileinstaller.action.INSTALL_PROFILE androidx.profileinstaller.action.SKIP_FILE androidx.profileinstaller.action.SAVE_PROFILE androidx.profileinstaller.action.BENCHMARK_OPERATION

Android Permissions

8919f2c84bccb75b94393010ea857a4d28754354cbaf7043f49d47ff89318f7c.apk

Permissions

android.permission.QUERY_ALL_PACKAGES

com.mocereti.fill.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

android.permission.REORDER_TASKS

android.permission.WAKE_LOCK

android.permission.FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.CREDENTIAL_MANAGER_SET_ALLOWED_PROVIDERS

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

8919f2c84bccb75b94393010ea857a4d28754354cbaf7043f49d47ff89318f7c.apk

com.mocereti.fill.vzouuqbEAikyaHe

com.mocereti.fill.pRYmzpehXp

androidx.work.impl.background.systemalarm.SystemAlarmService

androidx.work.impl.background.systemjob.SystemJobService

androidx.work.impl.foreground.SystemForegroundService

androidx.room.MultiInstanceInvalidationService

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.profileinstaller.ProfileInstallReceiver

androidx.startup.InitializationProvider

bayadoje

com.kofisahoke.access.sFcQyiFFfYO

com.kofisahoke.access.MdlJFjpaV

com.kofisahoke.access.iiprhacabghro

com.kofisahoke.access.XDFssbeilPWNf

com.kofisahoke.access.dwwTaGOXVzdsn

com.kofisahoke.access.IoHyKiOcMlntZn

com.kofisahoke.access.vioyzivcnuipaxzw

com.kofisahoke.access.TEvHodyeTepbq

com.kofisahoke.access.egLPWNNZqF

com.kofisahoke.access.EyliEVDqDzmJibdC

com.kofisahoke.access.pROByJVUzxzO

com.kofisahoke.access.ADZIoclZYSlH

com.kofisahoke.access.QlSnKFfKf

androidx.work.impl.background.systemalarm.SystemAlarmService

androidx.work.impl.background.systemjob.SystemJobService

androidx.work.impl.foreground.SystemForegroundService

androidx.room.MultiInstanceInvalidationService

com.kofisahoke.access.yGgANYZhwSkKYzdM

com.kofisahoke.access.abzxaarho

com.kofisahoke.access.CjLVEcMdYV

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.profileinstaller.ProfileInstallReceiver

androidx.startup.InitializationProvider

Android Permissions

8919f2c84bccb75b94393010ea857a4d28754354cbaf7043f49d47ff89318f7c.apk