1[.]apk[.]zip | Triage™

Target
1.apk.zip
Size 518KB
Sample250708-ma3caaspv2
SHA256 d677d39c12a49cab629c518d8551020406eab7a995e5d7ae51514c0351358b07
MD5 1b673ceed99a37464cfd78f224a141f3
SHA1 c3afcf8bf0a7854ada8f7721602d368f429ee94a
SHA512 4bf8faab1b2d96ffdde9f9a4789befa3671efba278ccce25e078e0ed3f074e4d717d61bd9d175e615ac76b562b393d6eb1a64919f6c95a7694165ba934538206
SSDEEP 12288:/Ie9rca75GhFg7yUmfJsjK1GwSnTvDZxz2qGdlzKwzBvhb6B:we9rdtyUmfJlGTvlpY51vhmB
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE

Requests dangerous framework permissions 8 IoCs

description	ioc
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows read access to the device's phone number(s).	android.permission.READ_PHONE_NUMBERS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE

File Explorer

1.apk.zip

.zip 518KB
1.apk

.apk 525KB

1.apk.zip

SHA256 d677d39c12a49cab629c518d8551020406eab7a995e5d7ae51514c0351358b07
MD5 1b673ceed99a37464cfd78f224a141f3
SHA1 c3afcf8bf0a7854ada8f7721602d368f429ee94a
SHA512 4bf8faab1b2d96ffdde9f9a4789befa3671efba278ccce25e078e0ed3f074e4d717d61bd9d175e615ac76b562b393d6eb1a64919f6c95a7694165ba934538206
SSDEEP 12288:/Ie9rca75GhFg7yUmfJsjK1GwSnTvDZxz2qGdlzKwzBvhb6B:we9rdtyUmfJlGTvlpY51vhmB
MD5 SHA1 SHA512 SSDEEP

Password

infected

1.apk

SHA256 824e35d8dd11acdcb3c48d8c66114eccb25c2fff2d8cb047cd5b4b6c22c481a7
MD5 0667d65c7bed97a450e322223ca31c1a
SHA1 6f1e791fbf59410bc23e79479500f8e52e5e1686
SHA512 37b457e1c35144efe9b6d469a9056cb89cdf10ba1e318438b59fd7070ecf7bd6b6708c645787103a1a26c870c36e7c75096f7bd14c4372532638e31f8245c389
SSDEEP 12288:je3vs2mwDBDuhsqP4Gshblm6OAQmWSj/sx4DWCNYO:je3UnwDB44Gwlm6OAQm7sbGz
MD5 SHA1 SHA512 SSDEEP

android arch:arm64 arch:arm arch:x86 arch:x64

Password

infected

com.houseboat00

1.apk.zip

1.apk

com.houseboat00.p082u

com.houseboat00.p062y

com.houseboat00.p023b

com.houseboat00.p075u

com.houseboat00.p085h

com.houseboat00.p095a

com.houseboat00.p081i

com.houseboat00.p077v

com.houseboat00.p034k

com.houseboat00.p081f

com.houseboat00.p075z

com.houseboat00.p060g

com.houseboat00.p027l

com.houseboat00.p051e

com.houseboat00.p062q

com.houseboat00.p096f

com.houseboat00.p085a

com.houseboat00.p035k

com.houseboat00.p081l

com.houseboat00.p033g

com.houseboat00.p095t

com.houseboat00.p039z

com.houseboat00.p026v

com.houseboat00.p027z

com.houseboat00.p072i

com.houseboat00.p056x

com.houseboat00.p020j

com.houseboat00.p040v

com.houseboat00.p090e

com.houseboat00.p041p

com.houseboat00.p058z