General

  • Target

    HaK-Panel-FF-v4.apk

  • Size

    7.2MB

  • MD5

    309e2fd30e12f83bcf903349bd2bb1a1

  • SHA1

    4dc61cdceb739479a002eff111e574e454ad5468

  • SHA256

    5f7c49b89a2b0b48cf7230160deb8940ef40cf8717c071579cecb21278fda9bc

  • SHA512

    82f3456ecd49cf9bf3e6bd8464aa8305407f96f13bc3b102cc1d7396a7ffd60d1232c04c4dc02576f1afd39fd60662210ba2195833daa0f36d3493278a103b06

  • SSDEEP

    196608:vSQrjG5hmc1iS8fBO+MLTsnVz73Vv9T4XXfpmiffpmi9:La5/Yh+snVz7FvV2fpmiffpmi9

Score
10/10

Malware Config

Extracted

Family

ahmyth

C2

http://147.185.221.17:25603

Signatures

  • Ahmyth family
  • Requests dangerous framework permissions 17 IoCs

Files

  • HaK-Panel-FF-v4.apk
    .apk android

    com.my.newprojectsensi

    .LoginActivity


Android Permissions

HaK-Panel-FF-v4.apk

Permissions

android.permission.SYSTEM_ALERT_WINDOW

android.permission.WAKE_LOCK

android.permission.CAMERA

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MANAGE_EXTERNAL_STORAGE

android.permission.WRITE_SETTINGS

android.permission.WRITE_SECURE_SETTINGS

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.RECEIVE_SMS

android.permission.WRITE_SMS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.READ_PHONE_STATE

android.permission.READ_CALL_LOG

android.permission.PROCESS_OUTGOING_CALLS

android.permission.READ_CONTACTS

android.permission.RECORD_AUDIO

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_BACKGROUND_LOCATION

android.permission.REQUEST_IGNORE_BATTERY_OPTIMISATIONS