General

  • Target

    khalo7abibi.apk

  • Size

    263KB

  • MD5

    87f0153d6038981760800a2766716d0c

  • SHA1

    f21ca5d76954d43c7b269c79fad3b3241d8bf827

  • SHA256

    24f2a2c59ec1bd0e466f91cdca1faec387e8b76ad4d676d92cd1cce0536c8225

  • SHA512

    0e83add738ea70b1ff4b2e67dfb2da51db51fdc201a71d63bad0d3061f1651cfc00a414c1d8e1559b7d2a288c29b58ee957c7f834253944b06febc1932d10b82

  • SSDEEP

    6144:z5CnvAL9Wl3w6UYHjj1mIOjBWyv5COkOL5+kjjsMNL:z5Cn+4BDZhOjlhCyLHT

Score
10/10

Malware Config

Extracted

Family

ahmyth

C2

http://41.36.71.13:5505

Signatures

  • Ahmyth family
  • Requests dangerous framework permissions 10 IoCs

Files

  • khalo7abibi.apk
    .apk android

    ahmyth.mine.king.ahmyth

    ahmyth.mine.king.ahmyth.MainActivity


Android Permissions

khalo7abibi.apk

Permissions

android.permission.WAKE_LOCK

android.permission.CAMERA

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.READ_PHONE_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.READ_CALL_LOG

android.permission.RECORD_AUDIO

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.ACCESS_FINE_LOCATION

android.permission.READ_CONTACTS