General

  • Target

    Ahmyth-aligned-debugSigned.apk

  • Size

    293KB

  • MD5

    b61a1d00aeff285cc431240812842b11

  • SHA1

    fe19925c10490943cdaa71b8d3cad773171bceeb

  • SHA256

    5374067c96c4e8a59abde4a3f045122e0ac6032e625fccaaa283be6d1461b399

  • SHA512

    f9c31fd3fba8be02de90097d8511d90320bd8c42a721127e109631e0c300e139dfb7f4089e4ec1cbde4edddda9c2b18d82d3b1b7ae1cab642df369db96ff4843

  • SSDEEP

    6144:T7Cv+PMenyQyVyE2LjVR9GEvW63BgwJLzD7PHbDfOLB:TOsMenyO3V2wW63uSXDLPk

Score
10/10

Malware Config

Extracted

Family

ahmyth

C2

http://192.168.209.12:42474

Signatures

  • Ahmyth family
  • Declares broadcast receivers with permission to handle system events 1 IoCs
  • Requests dangerous framework permissions 8 IoCs

Files

  • Ahmyth-aligned-debugSigned.apk
    .apk android

    ahmyth.mine.king.ahmyth

    ahmyth.mine.king.ahmyth.MainActivity


Android Permissions

Ahmyth-aligned-debugSigned.apk

Permissions

android.permission.CAMERA

android.permission.WAKE_LOCK

android.permission.WRITE_SETTINGS

android.permission.WRITE_SECURE_SETTINGS

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMISATIONS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MANAGE_EXTERNAL_STORAGE

android.permission.WAKE_LOCK

android.permission.WRITE_SETTINGS

android.permission.WRITE_SECURE_SETTINGS

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMISATIONS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.RECORD_AUDIO

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.WAKE_LOCK

android.permission.WRITE_SETTINGS

android.permission.WRITE_SECURE_SETTINGS

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMISATIONS

android.permission.RECEIVE_BOOT_COMPLETED