General

  • Target

    c1ce078c5b96357b004d0100ba885c22e32b0b629c697c00279284fcc907dc2d.bin

  • Size

    212KB

  • MD5

    b9900f8290d0e89670bb6c0bd2a5d1ae

  • SHA1

    603ea9220054b02f5624026273ac087923a42541

  • SHA256

    c1ce078c5b96357b004d0100ba885c22e32b0b629c697c00279284fcc907dc2d

  • SHA512

    3ca6fd3b700badb59e1d475dcac96dd9ee33c2d525e262f49d5517dc68d3b45a8ee663041aabb0a80c99493c71a7223b34610f518e4423d06983fc00fb3b9c2b

  • SSDEEP

    3072:pl/dAqzT1L9xLMAODAG+KdILUcVEl59nGcABd0J8igOJ6DBmLS2y1b33EyQ1axLR:plxT3/2sElAB0goOmLVy1bkl1axLIP9A

Score
10/10

Malware Config

Signatures

  • XLoader payload 1 IoCs
  • Xloader_apk family
  • Attempts to obfuscate APK file format

    Applies obfuscation techniques to the APK format in order to hinder analysis

  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 11 IoCs

Files

  • c1ce078c5b96357b004d0100ba885c22e32b0b629c697c00279284fcc907dc2d.bin
    .apk android arch:arm

    kvkaqnb.zmcjfpfvc.acqdhy.mexjnilu

    upz7.yeqh


Android Permissions

c1ce078c5b96357b004d0100ba885c22e32b0b629c697c00279284fcc907dc2d.bin

Permissions

android.ycfg.npwv.txldzpgs

android.cejkqkgq.wyul.rhjey

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.VIBRATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WAKE_LOCK

android.permission.INTERNET

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.READ_CONTACTS

android.permission.READ_PHONE_STATE

android.permission.GET_ACCOUNTS

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.FOREGROUND_SERVICE

android.permission.POST_NOTIFICATIONS

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.MANAGE_EXTERNAL_STORAGE

android.permission.READ_PHONE_NUMBERS