General

  • Target

    3a4a15973dc4d7cb2ae937bfe07d8986792f540d015b23f82cd4d7fe00fe0ac6.bin

  • Size

    2.5MB

  • MD5

    50804019d3ff94013196703944781d2d

  • SHA1

    a22315a106f313ee74acddfebf6fc1c24f61e5d6

  • SHA256

    3a4a15973dc4d7cb2ae937bfe07d8986792f540d015b23f82cd4d7fe00fe0ac6

  • SHA512

    97d8af36c10a07cfb3d0a804a2e3e4a7b3f8602bf559d37214b472129b6821c233348389f29a12fbd11bc026209a4eac56b58f0ff285c3c671dca45a93693418

  • SSDEEP

    49152:C7/eV14V2WTc1yyGrMPY7PxtSJd5Uhguw74ADwMbZN7g3srplU:C7/eoKN9Pe+Jd5LD4ADTesrp2

Score
10/10

Malware Config

Extracted

Family

ajina

C2

150.241.78.113:8080

Signatures

  • Ajina family
  • Requests dangerous framework permissions 5 IoCs

Files

  • 3a4a15973dc4d7cb2ae937bfe07d8986792f540d015b23f82cd4d7fe00fe0ac6.bin
    .apk android

    privet.go_bistro.minet

    privet.go_bistro.minet.ui.MainActivity


Android Permissions

3a4a15973dc4d7cb2ae937bfe07d8986792f540d015b23f82cd4d7fe00fe0ac6.bin

Permissions

android.permission.READ_SMS

android.permission.RECEIVE_SMS

android.permission.READ_PHONE_STATE

android.permission.READ_PHONE_NUMBERS

android.permission.CALL_PHONE

android.permission.INTERNET

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

android.permission.USE_EXACT_ALARM

privet.go_bistro.minet.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION