General

  • Target

    bb2d36e68fa7e7916d7dd2050cede2bc736f64cc11909225880469f03276cd93.bin

  • Size

    2.5MB

  • MD5

    7e2b0158ec8975dc6c5f0308d92b1e5f

  • SHA1

    103a7e1d98013069b54194512894d7379cca06e4

  • SHA256

    bb2d36e68fa7e7916d7dd2050cede2bc736f64cc11909225880469f03276cd93

  • SHA512

    b794c047ddb18f2cf765ea4fa7e08ad0070a95f6913d4212a3826d2b6f3d42d716545acc609462b86bdb3ab3479505176df0a79475c74f8af1cea57759bc81c4

  • SSDEEP

    49152:SHx6ojsZK+wXZ+QuFe/UP7JWFdrjMbotgRsrZbqRS:SHx6ojsZKbXLuFxTJW/gzsrZbh

Score
10/10

Malware Config

Extracted

Family

ajina

C2

92.255.85.150:8080

Signatures

  • Ajina family
  • Requests dangerous framework permissions 5 IoCs

Files

  • bb2d36e68fa7e7916d7dd2050cede2bc736f64cc11909225880469f03276cd93.bin
    .apk android

    a_chto.s_ebalom.googl_a_XD

    a_chto.s_ebalom.googl_a_XD.ui.MainActivity


Android Permissions

bb2d36e68fa7e7916d7dd2050cede2bc736f64cc11909225880469f03276cd93.bin

Permissions

android.permission.READ_SMS

android.permission.RECEIVE_SMS

android.permission.READ_PHONE_STATE

android.permission.READ_PHONE_NUMBERS

android.permission.CALL_PHONE

android.permission.INTERNET

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

android.permission.USE_EXACT_ALARM

a_chto.s_ebalom.googl_a_XD.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION