General

  • Target

    6ba90f081a14bab1149cd44eb3479268da0663cb147b78b903ba6cad481e2fe7.bin

  • Size

    2.4MB

  • MD5

    048bc3923be1f40c40e581ada2d79aa5

  • SHA1

    e7606319392c29efd8832642edd1c36030960dd7

  • SHA256

    6ba90f081a14bab1149cd44eb3479268da0663cb147b78b903ba6cad481e2fe7

  • SHA512

    f7b0bcad24f0657043e34e526c3340314673cbfb33fc2bb06ef9f5066f869bc43448efa5fb9d1d06ad83414056bea3b35a6609ec598db2ea626c2c97ac076827

  • SSDEEP

    49152:ToY+7H1g6FbXUbsQIfbT1s+phpayST6DYU736nW/tg9srAN:sj7H1g6FbXMnIDZs+JayST68g6nXsrAN

Score
10/10

Malware Config

Signatures

  • Ajina family
  • Requests dangerous framework permissions 5 IoCs

Files

  • 6ba90f081a14bab1149cd44eb3479268da0663cb147b78b903ba6cad481e2fe7.bin
    .apk android

    kakovo.xua.pelmeni

    kakovo.xua.pelmeni.ui.MainActivity


Android Permissions

6ba90f081a14bab1149cd44eb3479268da0663cb147b78b903ba6cad481e2fe7.bin

Permissions

android.permission.READ_SMS

android.permission.RECEIVE_SMS

android.permission.READ_PHONE_STATE

android.permission.READ_PHONE_NUMBERS

android.permission.CALL_PHONE

android.permission.INTERNET

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

android.permission.USE_EXACT_ALARM

kakovo.xua.pelmeni.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION