EBA (1)[.]apk | Triage™

Resubmissions

16/05/2025, 05:10

250516-ftr74ahn8s10

16/06/2023, 08:15

230616-j5y2kadh539

14/06/2023, 14:14

230614-rjzd7shh999

Sharing

Copy URL Twitter E-mail

General

Target
EBA (1).apk
Size 2.3MB
Sample250516-ftr74ahn8s
SHA256 7a65b831c9f781e49c47393345bbe2ffff6859a608b9a5413d7f3b76683ff178
MD5 dea6771be19c050e11694df90336d400
SHA1 89ee06f706c25921dc4025078f08bf1f8b270343
SHA512 b405aaa6ef4781d4f7b34e3f44bcb65b58ea342fce19a24f340d1e084372ad575ee612aeac7ef78ab52da07fc434d642feaad21438d51f03c345ca4752829efc
SSDEEP 49152:GsUhzGTzpUllkhrr+0lDbk2Ta+RJA0dzGUDUOcCB310TwcxfWZehr6cBSoLFVMtx:1pXCloH+0BbE+RJjzGUDhIwqfbrxLQtx
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE

Requests dangerous framework permissions 10 IoCs

description	ioc
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to send SMS messages.	android.permission.SEND_SMS

File Explorer

EBA (1).apk

.apk 2.3MB

EBA (1).apk

SHA256 7a65b831c9f781e49c47393345bbe2ffff6859a608b9a5413d7f3b76683ff178
MD5 dea6771be19c050e11694df90336d400
SHA1 89ee06f706c25921dc4025078f08bf1f8b270343
SHA512 b405aaa6ef4781d4f7b34e3f44bcb65b58ea342fce19a24f340d1e084372ad575ee612aeac7ef78ab52da07fc434d642feaad21438d51f03c345ca4752829efc
SSDEEP 49152:GsUhzGTzpUllkhrr+0lDbk2Ta+RJA0dzGUDUOcCB310TwcxfWZehr6cBSoLFVMtx:1pXCloH+0BbE+RJjzGUDhIwqfbrxLQtx
MD5 SHA1 SHA512 SSDEEP

android

bamboo.orbit.notable

identify.sad.culture.TSfOuReLbKxChBmSrJkBgKoQmWeQcMnYlAkKfQjTrQnOwAfRx

identify.sad.culture.KIzSxHqWwBePsXyCeLuSzPgAwYjCcFaPtAyYeOeFkFeApLtYeFu

identify.sad.culture.UGdImSsBcRlRrZdMwNuNjLfRxPeZiDaGmNrEuNfEaLiBhQa

identify.sad.culture.OMxBcCxYuQwMw

identify.sad.culture.DFzObGnPuRsPdJaMd

identify.sad.culture.MJlFhSgWbSkNq

identify.sad.culture.EJqLeZnAtKbNmGxXuKiZpPpSyNcDhTtWiMb

identify.sad.culture.FZgHtNxCwCn

identify.sad.culture.RPhFwBzPsOySpSrMlJiUhYrDcLtAiPiFlSmDsChWySd

com.google.android.gms.common.api.GoogleApiActivity

identify.sad.culture.QLdZkCqObEuYnTxMpOpZcExNmWpCwPfXu

identify.sad.culture.GZbAyQtQbCmXqYxFoUkXhGeHzIoYrIeTyAsFh

identify.sad.culture.LZqCmZaKl

identify.sad.culture.KCcQzOhJgTtLrTpDtNqBpYgOjJhMeGqKtCcQhKxGiDlOzPmRmSmBeMi

identify.sad.culture.QSqYoMzOiGeWeNaUhRkIwCyOiRrFtBjNuRuMnZxPiJgTlJuCuNxHnKx

identify.sad.culture.vmbujtgsj

identify.sad.culture.KYsFaNnOmThKeFwPyFmJqTnJgAtSpGcDoDcYkUyJwYyLoBdEkOhRxOl

identify.sad.culture.qfgznvsa

identify.sad.culture.AWcHnZtWpRfSoOgAwCdYxKcZsEzZuIdMoBxIlZhTaSuFxLrYkJcOb

identify.sad.culture.LBjPhOwAtLdXhEqBmLcFyTqPaYgZfGhPxBdHwDfQoQaOkLq

identify.sad.culture.BWfFiYzMmYfMePsPiBlNzKfTmXnBnBeOb

identify.sad.culture.hqqoutv

identify.sad.culture.BDnUxNzApInQrAmBzKpOpTkTxDyRnQoFxAmJuQd

identify.sad.culture.OBkRhErDzCdRxIaRsClQaWxYjPfHbShFhJdLwYhMeSnJmGh

identify.sad.culture.LSrMoUjFfCxNsKrCdWuJp

identify.sad.culture.UDqDnBhOsYmCmMuNpYqKjPxMoRnRuUkBuUpGqDkHkWqOeDh

identify.sad.culture.ueylaqzgpedalc

android.intent.action.SEND android.intent.action.SENDTO

identify.sad.culture.CNkQpSkXnJnYuZcWj

identify.sad.culture.FAkBkHaPuEzHeDpYaXyDjZfCjBrAmGcOxSfXjDiBxChOsTeNg

identify.sad.culture.YCzGxQfErKdIbBrShRkMdIsNy

identify.sad.culture.KGlDsQeZzGrXrGhYiQyQwRcHbUpUrMt

identify.sad.culture.QYyRxHbJzXfInCyCbSeDy

identify.sad.culture.DIpDrSsUeRaHdUqCoNmAoDbXyPwJdTaAhBiShKjPeNpLo

identify.sad.culture.UHpToGfGwLyIyCtMeFdYmRhRlZdCrEyAaDuHkEeWlDo

identify.sad.culture.isrdabxkosflnby

identify.sad.culture.TBrDcFxFfOkLmQtSpXjJqRgNlJdSbWsUbUeJqOnKu

identify.sad.culture.NFrSbLrSrXjPmKqSeLiXgQaHaPwTrZdLxReJmFcUwQiBuEpSxSsKh

identify.sad.culture.NQuSbNiPpLfJpOoLzSy

identify.sad.culture.DRxOaTnUtYmGuCdOuCiWgGgZqYtJmZcUxPiIpPyXyJuApJjYbRwRc

identify.sad.culture.LHeKbXqZeTmHpDmEzJeLsKoQtTkRxHdMhBjSo

identify.sad.culture.vmtzepmwcapmr

identify.sad.culture.FGuWjJfKyJhQwEfCeBkMpPmHeDeRmRoKoLyJrLbDoLqIxMrAt

identify.sad.culture.zptggpzfe

android.intent.action.MAIN

identify.sad.culture.MDcUjZgQwQuCdZePlHdEcZhKmEkTwBxZqMfCaHcRnNqQoEuKjZnOs

identify.sad.culture.DMiToUjBhKlHgBuUx

identify.sad.culture.HSxQrKwXgZtFuHrLdLfXzRjNfOtAsFkQdNy

identify.sad.culture.hfeampa

identify.sad.culture.SPpEwUbYx

identify.sad.culture.brm

identify.sad.culture.SOyAtJkSbKiRkJtElZkMhCiKiFsXhWhYsDqYfMyKgPbLhOgBfXpEjEz

identify.sad.culture.IDrKjWbUtTpJpFgPzJhOqUqAuYnZoLsJiRtQcYu

identify.sad.culture.QRrJiIyZjRrJdHrWzTwLuSxIwFnDkAu

identify.sad.culture.XPoHwEwSwRrYr

identify.sad.culture.XLuHxNgTcMyMkTsNwDl

Android Permissions

EBA (1).apk

Permissions

android.permission.SET_ALARM

android.permission.ACCESS_NETWORK_STATE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.RECORD_AUDIO

android.permission.INTERNET

android.permission.DISABLE_KEYGUARD

android.permission.CALL_PHONE

android.permission.FOREGROUND_SERVICE

android.permission.READ_SMS

android.permission.RECEIVE_SMS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.REQUEST_DELETE_PACKAGES

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.READ_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

android.permission.WAKE_LOCK

android.permission.USE_FULL_SCREEN_INTENT

android.permission.GET_ACCOUNTS

android.permission.READ_CONTACTS

android.permission.SEND_SMS

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

EBA (1).apk

identify.sad.culture.TSfOuReLbKxChBmSrJkBgKoQmWeQcMnYlAkKfQjTrQnOwAfRx

identify.sad.culture.KIzSxHqWwBePsXyCeLuSzPgAwYjCcFaPtAyYeOeFkFeApLtYeFu

identify.sad.culture.UGdImSsBcRlRrZdMwNuNjLfRxPeZiDaGmNrEuNfEaLiBhQa

identify.sad.culture.OMxBcCxYuQwMw

identify.sad.culture.DFzObGnPuRsPdJaMd

identify.sad.culture.MJlFhSgWbSkNq

identify.sad.culture.EJqLeZnAtKbNmGxXuKiZpPpSyNcDhTtWiMb

identify.sad.culture.FZgHtNxCwCn

identify.sad.culture.RPhFwBzPsOySpSrMlJiUhYrDcLtAiPiFlSmDsChWySd

com.google.android.gms.common.api.GoogleApiActivity

identify.sad.culture.QLdZkCqObEuYnTxMpOpZcExNmWpCwPfXu

identify.sad.culture.GZbAyQtQbCmXqYxFoUkXhGeHzIoYrIeTyAsFh

identify.sad.culture.LZqCmZaKl

identify.sad.culture.KCcQzOhJgTtLrTpDtNqBpYgOjJhMeGqKtCcQhKxGiDlOzPmRmSmBeMi

identify.sad.culture.QSqYoMzOiGeWeNaUhRkIwCyOiRrFtBjNuRuMnZxPiJgTlJuCuNxHnKx

identify.sad.culture.vmbujtgsj

identify.sad.culture.KYsFaNnOmThKeFwPyFmJqTnJgAtSpGcDoDcYkUyJwYyLoBdEkOhRxOl

identify.sad.culture.qfgznvsa

identify.sad.culture.AWcHnZtWpRfSoOgAwCdYxKcZsEzZuIdMoBxIlZhTaSuFxLrYkJcOb

identify.sad.culture.LBjPhOwAtLdXhEqBmLcFyTqPaYgZfGhPxBdHwDfQoQaOkLq

identify.sad.culture.BWfFiYzMmYfMePsPiBlNzKfTmXnBnBeOb

identify.sad.culture.hqqoutv

identify.sad.culture.BDnUxNzApInQrAmBzKpOpTkTxDyRnQoFxAmJuQd

identify.sad.culture.OBkRhErDzCdRxIaRsClQaWxYjPfHbShFhJdLwYhMeSnJmGh

identify.sad.culture.LSrMoUjFfCxNsKrCdWuJp

identify.sad.culture.UDqDnBhOsYmCmMuNpYqKjPxMoRnRuUkBuUpGqDkHkWqOeDh

identify.sad.culture.ueylaqzgpedalc

identify.sad.culture.CNkQpSkXnJnYuZcWj

identify.sad.culture.FAkBkHaPuEzHeDpYaXyDjZfCjBrAmGcOxSfXjDiBxChOsTeNg

identify.sad.culture.YCzGxQfErKdIbBrShRkMdIsNy

identify.sad.culture.KGlDsQeZzGrXrGhYiQyQwRcHbUpUrMt

identify.sad.culture.QYyRxHbJzXfInCyCbSeDy

identify.sad.culture.DIpDrSsUeRaHdUqCoNmAoDbXyPwJdTaAhBiShKjPeNpLo

identify.sad.culture.UHpToGfGwLyIyCtMeFdYmRhRlZdCrEyAaDuHkEeWlDo

identify.sad.culture.isrdabxkosflnby

identify.sad.culture.TBrDcFxFfOkLmQtSpXjJqRgNlJdSbWsUbUeJqOnKu

identify.sad.culture.NFrSbLrSrXjPmKqSeLiXgQaHaPwTrZdLxReJmFcUwQiBuEpSxSsKh

identify.sad.culture.NQuSbNiPpLfJpOoLzSy

identify.sad.culture.DRxOaTnUtYmGuCdOuCiWgGgZqYtJmZcUxPiIpPyXyJuApJjYbRwRc

identify.sad.culture.LHeKbXqZeTmHpDmEzJeLsKoQtTkRxHdMhBjSo

identify.sad.culture.vmtzepmwcapmr

identify.sad.culture.FGuWjJfKyJhQwEfCeBkMpPmHeDeRmRoKoLyJrLbDoLqIxMrAt

identify.sad.culture.zptggpzfe

identify.sad.culture.MDcUjZgQwQuCdZePlHdEcZhKmEkTwBxZqMfCaHcRnNqQoEuKjZnOs

identify.sad.culture.DMiToUjBhKlHgBuUx

identify.sad.culture.HSxQrKwXgZtFuHrLdLfXzRjNfOtAsFkQdNy

identify.sad.culture.hfeampa

identify.sad.culture.SPpEwUbYx

identify.sad.culture.brm

identify.sad.culture.SOyAtJkSbKiRkJtElZkMhCiKiFsXhWhYsDqYfMyKgPbLhOgBfXpEjEz

identify.sad.culture.IDrKjWbUtTpJpFgPzJhOqUqAuYnZoLsJiRtQcYu

identify.sad.culture.QRrJiIyZjRrJdHrWzTwLuSxIwFnDkAu

identify.sad.culture.XPoHwEwSwRrYr

identify.sad.culture.XLuHxNgTcMyMkTsNwDl

identify.sad.culture.gogu

identify.sad.culture.rwmlr

identify.sad.culture.iwcnuo

identify.sad.culture.bejrysqwbkvqfl

identify.sad.culture.uqxjisdjvgt

identify.sad.culture.nbdqu

identify.sad.culture.hmspgdv

identify.sad.culture.giqdfyvc

identify.sad.culture.nxsswlhwfzsb

identify.sad.culture.vkxtkzwjdc

identify.sad.culture.iuffl

identify.sad.culture.edrujilsqivqxbem

identify.sad.culture.yxo

identify.sad.culture.ejlhyhebukbs

identify.sad.culture.ltmrsgpek

identify.sad.culture.pffyif

identify.sad.culture.mxbwzviwfcvk

identify.sad.culture.dglutdbr

Android Permissions