General

  • Target

    cb1410896f2dcf2d73459979821e5aa2b90bc290d3f754232b673f0164ae419a.bin

  • Size

    2.6MB

  • MD5

    916f196f46e579c9cfd0fd2ee8b857ce

  • SHA1

    a564ee1b40688f7890de38f2879c3d4619223b70

  • SHA256

    cb1410896f2dcf2d73459979821e5aa2b90bc290d3f754232b673f0164ae419a

  • SHA512

    30e93a1ceefa2dfce2c010b33aec0ed8afb9a3ffcf11eb5e637a432a06dad11b254301b33386e63f4fbe144aeafbb0f612e1ed4fb110fd9880b2ffa767862e2f

  • SSDEEP

    49152:3YdN7VbCIJ+xsYXmQuAhm1cRHs0xtr3d4IDNtURi5r1q8tgcsrj6:3WN7Vmg+jmQurKR/LraHw5Iesrj6

Score
10/10

Malware Config

Extracted

Family

ajina

C2

92.255.85.150:8080

Signatures

  • Ajina family
  • Requests dangerous framework permissions 5 IoCs

Files

  • cb1410896f2dcf2d73459979821e5aa2b90bc290d3f754232b673f0164ae419a.bin
    .apk android

    a_chto.s_ebalom.googl_a_XD

    a_chto.s_ebalom.googl_a_XD.ui.MainActivity


Android Permissions

cb1410896f2dcf2d73459979821e5aa2b90bc290d3f754232b673f0164ae419a.bin

Permissions

android.permission.READ_SMS

android.permission.RECEIVE_SMS

android.permission.READ_PHONE_STATE

android.permission.READ_PHONE_NUMBERS

android.permission.CALL_PHONE

android.permission.INTERNET

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

android.permission.USE_EXACT_ALARM

a_chto.s_ebalom.googl_a_XD.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION