General

  • Target

    e6a7d0535aadf5e24f3a6983ba4eaf3d0475a16cbb9ca36d622318565515eeae.apk

  • Size

    18.2MB

  • MD5

    242fbd01b282e422779c8e0588781245

  • SHA1

    5ab65fcc69c3aadf3be39ecd41389be6d2cf8714

  • SHA256

    e6a7d0535aadf5e24f3a6983ba4eaf3d0475a16cbb9ca36d622318565515eeae

  • SHA512

    847923f71a516e381fe2fc9a8a015e88fe5dbf13b2084ad14e83cc64cc515067ce23bad4f083cb7965cd85cbdbcbb40f1fe5c3775899fdfa7f7190f791a19279

  • SSDEEP

    393216:03K4Q0egxbm51H9Z3ObN8QHFAwMxKvYlH:wQ0V81Hw6NKvYl

Score
10/10

Malware Config

Extracted

Family

teabot

C2

https://befukiv.com/cortina

https://befukiv.com/muchaspuchas

Signatures

  • Teabot family
  • Requests dangerous framework permissions 4 IoCs

Files

  • e6a7d0535aadf5e24f3a6983ba4eaf3d0475a16cbb9ca36d622318565515eeae.apk
    .apk android arch:arm64 arch:arm arch:x86 arch:x64

    com.tragisoap.fileandpdfmanager

    com.tragisoap.fileandpdfmanager.PreviewActivity


Android Permissions

e6a7d0535aadf5e24f3a6983ba4eaf3d0475a16cbb9ca36d622318565515eeae.apk

Permissions

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MANAGE_EXTERNAL_STORAGE

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

com.tragisoap.fileandpdfmanager.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION