General

  • Target

    ae8bb99967710f3b0ab9c43d46928fa712a2b68e2bb6ee459c32dfa38b2c84a6.bin

  • Size

    2.5MB

  • MD5

    a4a7e60141141c2dadc276c2d25672c4

  • SHA1

    72932048bfc6e12a3ea268ef68dada2a64857381

  • SHA256

    ae8bb99967710f3b0ab9c43d46928fa712a2b68e2bb6ee459c32dfa38b2c84a6

  • SHA512

    b94131e4109b5242374488c170c1f3656f48193b278579f6289cc1cb7bf9413401a222adb925dbf07b76f901fdc2f9f85cfece93fbb3e542ecba2044464ac529

  • SSDEEP

    49152:l/zXEPEQH8QhfNCE6wjETySeTHRgzX83KwtgtsroPVA:l/r0LcQhlCE6KEAHqzXZfsroPe

Score
10/10

Malware Config

Extracted

Family

ajina

C2

185.147.124.206:8080

Signatures

  • Ajina family
  • Requests dangerous framework permissions 5 IoCs

Files

  • ae8bb99967710f3b0ab9c43d46928fa712a2b68e2bb6ee459c32dfa38b2c84a6.bin
    .apk android

    a_chto.s_ebalom.googl_a_XD

    a_chto.s_ebalom.googl_a_XD.ui.MainActivity


Android Permissions

ae8bb99967710f3b0ab9c43d46928fa712a2b68e2bb6ee459c32dfa38b2c84a6.bin

Permissions

android.permission.READ_SMS

android.permission.RECEIVE_SMS

android.permission.READ_PHONE_STATE

android.permission.READ_PHONE_NUMBERS

android.permission.CALL_PHONE

android.permission.INTERNET

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

android.permission.USE_EXACT_ALARM

a_chto.s_ebalom.googl_a_XD.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION