7faeb96392261b57b17b2e560499e4eca10fb73ab70ca0dc37740c2b6fa9226b[.]bin

General

Target
7faeb96392261b57b17b2e560499e4eca10fb73ab70ca0dc37740c2b6fa9226b.bin
Size 3.3MB
Sample250702-12ebesal2y
SHA256 7faeb96392261b57b17b2e560499e4eca10fb73ab70ca0dc37740c2b6fa9226b
MD5 28250115f2d1b89eb8b5a375afb849ea
SHA1 37044c66d61723fd3d6c6d3c067c3f3c7b569982
SHA512 352a84776394d145f98b0400fc13bdeb79439dc28c1a7e2e9f9ac56d0ca1bdeab5d5379933a33513a9e6134fc874724bd7a63996aea47c8f843ea7a95d634dd0
SSDEEP 98304:X9+xiJW4Kn3E5DUTjVGdMDcs1piLbmVp1bZ1Cdjf27Zx1cCv5:TJW4K3E5D+GVs1piL+bZsjfI35
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Attempts to obfuscate APK file format
Applies obfuscation techniques to the APK format in order to hinder analysis

Requests dangerous framework permissions 12 IoCs

description	ioc
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read image files from external storage.	android.permission.READ_MEDIA_IMAGES
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an application to read video files from external storage.	android.permission.READ_MEDIA_VIDEO
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows applications to use exact alarm APIs.	android.permission.SCHEDULE_EXACT_ALARM

File Explorer

7faeb96392261b57b17b2e560499e4eca10fb73ab70ca0dc37740c2b6fa9226b.bin

.apk 3.3MB

7faeb96392261b57b17b2e560499e4eca10fb73ab70ca0dc37740c2b6fa9226b.bin

SHA256 7faeb96392261b57b17b2e560499e4eca10fb73ab70ca0dc37740c2b6fa9226b
MD5 28250115f2d1b89eb8b5a375afb849ea
SHA1 37044c66d61723fd3d6c6d3c067c3f3c7b569982
SHA512 352a84776394d145f98b0400fc13bdeb79439dc28c1a7e2e9f9ac56d0ca1bdeab5d5379933a33513a9e6134fc874724bd7a63996aea47c8f843ea7a95d634dd0
SSDEEP 98304:X9+xiJW4Kn3E5DUTjVGdMDcs1piLbmVp1bZ1Cdjf27Zx1cCv5:TJW4K3E5D+GVs1piL+bZsjfI35
MD5 SHA1 SHA512 SSDEEP

qezd.bhlt.tngxq

Android Permissions

7faeb96392261b57b17b2e560499e4eca10fb73ab70ca0dc37740c2b6fa9226b.bin

Permissions

android.permission.INTERNET

android.permission.WRITE_CONTACTS

android.permission.GET_ACCOUNTS

android.permission.AUTHENTICATE_ACCOUNTS

android.permission.READ_PHONE_STATE

android.permission.BROADCAST_PACKAGE_REMOVED

android.permission.WRITE_SYNC_SETTINGS

android.permission.SEND_SMS

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_CONTACTS

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_MEDIA_IMAGES

android.permission.POST_NOTIFICATIONS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.READ_MEDIA_VIDEO

android.permission.WAKE_LOCK

android.permission.FOREGROUND_SERVICE

com.google.android.c2dm.permission.RECEIVE

android.permission.READ_SMS

android.permission.SCHEDULE_EXACT_ALARM

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

7faeb96392261b57b17b2e560499e4eca10fb73ab70ca0dc37740c2b6fa9226b.bin

qezd.bhlt.tngxq.MainActivity

qezd.bhlt.tngxq.Activity

com.google.android.gms.common.api.GoogleApiActivity

androidx.work.impl.background.systemalarm.SystemAlarmService

androidx.room.MultiInstanceInvalidationService

com.google.android.datatransport.runtime.backends.TransportBackendDiscovery

org.eclipse.paho.android.service.MqttService

androidx.work.impl.foreground.SystemForegroundService

com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService

com.google.firebase.messaging.FirebaseMessagingService

qezd.bhlt.tngxq.AppServices

com.google.firebase.components.ComponentDiscoveryService

qezd.bhlt.tngxq.FirebaseMessagingService

qezd.bhlt.tngxq.AndroidServices

androidx.work.impl.background.systemjob.SystemJobService

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.diagnostics.DiagnosticsReceiver

qezd.bhlt.tngxq.BootCompletedReceiver

androidx.work.impl.background.systemalarm.RescheduleReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

com.google.firebase.provider.FirebaseInitProvider

androidx.startup.InitializationProvider

Sharing

General

Malware Config

Signatures

File Explorer

7faeb96392261b57b17b2e560499e4eca10fb73ab70ca0dc37740c2b6fa9226b.bin

qezd.bhlt.tngxq.MainActivity

qezd.bhlt.tngxq.Activity

com.google.android.gms.common.api.GoogleApiActivity

androidx.work.impl.background.systemalarm.SystemAlarmService

androidx.room.MultiInstanceInvalidationService

com.google.android.datatransport.runtime.backends.TransportBackendDiscovery

org.eclipse.paho.android.service.MqttService

androidx.work.impl.foreground.SystemForegroundService

com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService

com.google.firebase.messaging.FirebaseMessagingService

qezd.bhlt.tngxq.AppServices

com.google.firebase.components.ComponentDiscoveryService

qezd.bhlt.tngxq.FirebaseMessagingService

qezd.bhlt.tngxq.AndroidServices

androidx.work.impl.background.systemjob.SystemJobService

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.diagnostics.DiagnosticsReceiver

qezd.bhlt.tngxq.BootCompletedReceiver

androidx.work.impl.background.systemalarm.RescheduleReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

com.google.firebase.provider.FirebaseInitProvider

androidx.startup.InitializationProvider

Android Permissions

7faeb96392261b57b17b2e560499e4eca10fb73ab70ca0dc37740c2b6fa9226b.bin