c5e3edafdfda1ca0f0554802bbe32a8b09e8cc48161ed275b8fec6d74208171f

General

Target
c5e3edafdfda1ca0f0554802bbe32a8b09e8cc48161ed275b8fec6d74208171f
Size 2.3MB
Sample250415-jd1q3styb1
SHA256 c5e3edafdfda1ca0f0554802bbe32a8b09e8cc48161ed275b8fec6d74208171f
MD5 e80c4ffa4acd192981d142c435c52c49
SHA1 009fd7faf9dc52fd96bbfde826bbb4058409b8b8
SHA512 7255b61cc7969dcf8be0c32d09d94e299cad60ded377f0af38e19d665302fbb72e87bf918987c7c8628edbf9d3e4944596b1c7a68567a06f49a138648724c11f
SSDEEP 49152:sgmbZCDt7SEQT54zDfLIf/4DYWYvQQa7cBf3yQzkyxI0rd+I+Zsc0wGhpdojx:gs57wADzZDhYoloRyQwyxldKsc0wGhpA
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE

Requests dangerous framework permissions 11 IoCs

description	ioc
Allows applications to use exact alarm APIs.	android.permission.SCHEDULE_EXACT_ALARM
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to receive WAP push messages.	android.permission.RECEIVE_WAP_PUSH
Required to be able to access the camera device.	android.permission.CAMERA

File Explorer

c5e3edafdfda1ca0f0554802bbe32a8b09e8cc48161ed275b8fec6d74208171f

.apk 2.3MB

c5e3edafdfda1ca0f0554802bbe32a8b09e8cc48161ed275b8fec6d74208171f

SHA256 c5e3edafdfda1ca0f0554802bbe32a8b09e8cc48161ed275b8fec6d74208171f
MD5 e80c4ffa4acd192981d142c435c52c49
SHA1 009fd7faf9dc52fd96bbfde826bbb4058409b8b8
SHA512 7255b61cc7969dcf8be0c32d09d94e299cad60ded377f0af38e19d665302fbb72e87bf918987c7c8628edbf9d3e4944596b1c7a68567a06f49a138648724c11f
SSDEEP 49152:sgmbZCDt7SEQT54zDfLIf/4DYWYvQQa7cBf3yQzkyxI0rd+I+Zsc0wGhpdojx:gs57wADzZDhYoloRyQwyxldKsc0wGhpA
MD5 SHA1 SHA512 SSDEEP

android

quizzical.washbowl.calamity

Android Permissions

c5e3edafdfda1ca0f0554802bbe32a8b09e8cc48161ed275b8fec6d74208171f

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.SCHEDULE_EXACT_ALARM

android.permission.USE_EXACT_ALARM

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.READ_PHONE_STATE

android.permission.CALL_PHONE

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

android.permission.READ_SMS

android.permission.POST_NOTIFICATIONS

android.permission.RECEIVE_SMS

android.permission.SEND_SMS

android.permission.WRITE_SMS

android.permission.WAKE_LOCK

android.permission.BROADCAST_SMS

android.permission.RECEIVE_WAP_PUSH

android.permission.READ_CELL_BROADCASTS

android.permission.CAMERA

android.permission.FOREGROUND_SERVICE_DATA_SYNC

android.permission.FOREGROUND_SERVICE

android.permission.FOREGROUND_SERVICE_MEDIA_PROJECTION

android.permission.FOREGROUND_SERVICE_CAMERA

android.permission.QUERY_ALL_PACKAGES

c5e3edafdfda1ca0f0554802bbe32a8b09e8cc48161ed275b8fec6d74208171f

quizzical.washbowl.calamity.tSeCpfquNHRq

quizzical.washbowl.calamity.BNxTvRAhMfjDUM

quizzical.washbowl.calamity.DwXClmSCaA.KCzLynoqs

quizzical.washbowl.calamity.DwXClmSCaA.JmeDpgenEwpdQ

quizzical.washbowl.calamity.DwXClmSCaA.jcHNPgtoB

quizzical.washbowl.calamity.DwXClmSCaA.iOVgsILkEG

quizzical.washbowl.calamity.DwXClmSCaA.BXkdAsdDcrYcM

quizzical.washbowl.calamity.DwXClmSCaA.sZbWfbJufwu

quizzical.washbowl.calamity.DwXClmSCaA.fjeUMhUpxbV

quizzical.washbowl.calamity.GHaaTAnOKPGgc.MgxdmcqFY

quizzical.washbowl.calamity.lSaApZor

quizzical.washbowl.calamity.qOXrIKBLk.bEwWBJVQC

quizzical.washbowl.calamity.qOXrIKBLk.WsYgxJXINnjX

quizzical.washbowl.calamity.qOXrIKBLk.sUmQOPZyNUYer

quizzical.washbowl.calamity.qOXrIKBLk.NJSIugJoooprO

quizzical.washbowl.calamity.qOXrIKBLk.HuqyqqflMfLkq

quizzical.washbowl.calamity.uMQkaxQuYWBG.kFrqgnRPdf

quizzical.washbowl.calamity.uMQkaxQuYWBG.ccNnPZuuToQF

quizzical.washbowl.calamity.uMQkaxQuYWBG.yHgZibuBALfr

quizzical.washbowl.calamity.GHaaTAnOKPGgc.kVbGeekKD

Sharing

General

Malware Config

Signatures

File Explorer

c5e3edafdfda1ca0f0554802bbe32a8b09e8cc48161ed275b8fec6d74208171f

quizzical.washbowl.calamity.tSeCpfquNHRq

quizzical.washbowl.calamity.BNxTvRAhMfjDUM

quizzical.washbowl.calamity.DwXClmSCaA.KCzLynoqs

quizzical.washbowl.calamity.DwXClmSCaA.JmeDpgenEwpdQ

quizzical.washbowl.calamity.DwXClmSCaA.jcHNPgtoB

quizzical.washbowl.calamity.DwXClmSCaA.iOVgsILkEG

quizzical.washbowl.calamity.DwXClmSCaA.BXkdAsdDcrYcM

quizzical.washbowl.calamity.DwXClmSCaA.sZbWfbJufwu

quizzical.washbowl.calamity.DwXClmSCaA.fjeUMhUpxbV

quizzical.washbowl.calamity.GHaaTAnOKPGgc.MgxdmcqFY

quizzical.washbowl.calamity.lSaApZor

quizzical.washbowl.calamity.qOXrIKBLk.bEwWBJVQC

quizzical.washbowl.calamity.qOXrIKBLk.WsYgxJXINnjX

quizzical.washbowl.calamity.qOXrIKBLk.sUmQOPZyNUYer

quizzical.washbowl.calamity.qOXrIKBLk.NJSIugJoooprO

quizzical.washbowl.calamity.qOXrIKBLk.HuqyqqflMfLkq

quizzical.washbowl.calamity.uMQkaxQuYWBG.kFrqgnRPdf

quizzical.washbowl.calamity.uMQkaxQuYWBG.ccNnPZuuToQF

quizzical.washbowl.calamity.uMQkaxQuYWBG.yHgZibuBALfr

quizzical.washbowl.calamity.GHaaTAnOKPGgc.kVbGeekKD

Android Permissions

c5e3edafdfda1ca0f0554802bbe32a8b09e8cc48161ed275b8fec6d74208171f