General

  • Target

    afa38fac5b33e58845528d8e9565807c9c8ff9e6209264f7b0f50c692e229c7b.bin

  • Size

    2.4MB

  • MD5

    c91a08120114bbd817891d08cb9c4a53

  • SHA1

    86e9b728b48b825a93183fa5744fca5865d9de42

  • SHA256

    afa38fac5b33e58845528d8e9565807c9c8ff9e6209264f7b0f50c692e229c7b

  • SHA512

    88766732832f32cbd48981041ca5ab2868767bc6b8d694ff5b9cdd8643f39146e8f199cb3f04272e1fbf9791317c919623df8247e425dbe4afd5be107b7e6104

  • SSDEEP

    49152:ToY+7H1g6FbXUbsQIfbT1s+phpayST6DYU736nW/tg9srAH:sj7H1g6FbXMnIDZs+JayST68g6nXsrAH

Score
10/10

Malware Config

Signatures

  • Ajina family
  • Requests dangerous framework permissions 5 IoCs

Files

  • afa38fac5b33e58845528d8e9565807c9c8ff9e6209264f7b0f50c692e229c7b.bin
    .apk android

    kakovo.xua.pelmeni

    kakovo.xua.pelmeni.ui.MainActivity


Android Permissions

afa38fac5b33e58845528d8e9565807c9c8ff9e6209264f7b0f50c692e229c7b.bin

Permissions

android.permission.READ_SMS

android.permission.RECEIVE_SMS

android.permission.READ_PHONE_STATE

android.permission.READ_PHONE_NUMBERS

android.permission.CALL_PHONE

android.permission.INTERNET

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

android.permission.USE_EXACT_ALARM

kakovo.xua.pelmeni.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION