General

  • Target

    8a4a636ea506b03d9de49704453ecf69fb16d3fe0a7c080e7874a412d15c4e5d.bin

  • Size

    2.5MB

  • MD5

    9131ecb1186eb80f308568759bfea110

  • SHA1

    32ba1db29a022ca7e8f7bf18f255f5088cd34e79

  • SHA256

    8a4a636ea506b03d9de49704453ecf69fb16d3fe0a7c080e7874a412d15c4e5d

  • SHA512

    f37570b8f25f3d80bf4f7ab8f192068ced9d273a81cb749c551f78272bb48032909d49ce7d82ca9cc09c4c5536478ffb7e9d0b8846a0c94ed7f6663988cd588e

  • SSDEEP

    49152:SHx6ojsZK+wXZ+QuFe/UP7JWFdrjMbotgRsrZURO:SHx6ojsZKbXLuFxTJW/gzsrZf

Score
10/10

Malware Config

Extracted

Family

ajina

C2

92.255.85.150:8080

Signatures

  • Ajina family
  • Requests dangerous framework permissions 5 IoCs

Files

  • 8a4a636ea506b03d9de49704453ecf69fb16d3fe0a7c080e7874a412d15c4e5d.bin
    .apk android

    a_chto.s_ebalom.googl_a_XD

    a_chto.s_ebalom.googl_a_XD.ui.MainActivity


Android Permissions

8a4a636ea506b03d9de49704453ecf69fb16d3fe0a7c080e7874a412d15c4e5d.bin

Permissions

android.permission.READ_SMS

android.permission.RECEIVE_SMS

android.permission.READ_PHONE_STATE

android.permission.READ_PHONE_NUMBERS

android.permission.CALL_PHONE

android.permission.INTERNET

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

android.permission.USE_EXACT_ALARM

a_chto.s_ebalom.googl_a_XD.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION