7ec62d3c50d033b0857fe6f7e1e09de219001cf3bcc25fe5ddac25596b0c2922[.]apk

Sharing

Copy URL Twitter E-mail

General

Target
7ec62d3c50d033b0857fe6f7e1e09de219001cf3bcc25fe5ddac25596b0c2922.apk
Size 8.3MB
Sample251104-ar6ptaaq2v
SHA256 6ca691c97ab0028ce9acade5d079289668b1d0339ad330181c84fc7e7114c509
MD5 12215a810e34537734e8802673a35c2d
SHA1 47c3a8e85e57a263a911c9f670e014b420866722
SHA512 92e2fc419e120c451f9f331731da6b1fd9bef2de75403bf85cf34be5d6a1651d2eafa560d1db8cc7ce38cde10c75705b87c4d366d4172688c62c85fbd90c0cec
SSDEEP 196608:kAD11ar8RAb2GWt/HM/Gqniw1kdRDcCekj1y6n7c4:n1ar8/GRniwwws5y+7c4
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Attempts to obfuscate APK file format
Applies obfuscation techniques to the APK format in order to hinder analysis

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE

Requests dangerous framework permissions 1 IoCs

description	ioc
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES

File Explorer

7ec62d3c50d033b0857fe6f7e1e09de219001cf3bcc25fe5ddac25596b0c2922.apk

.apk 8.3MB
base.apk

.apk 3.5MB

7ec62d3c50d033b0857fe6f7e1e09de219001cf3bcc25fe5ddac25596b0c2922.apk

SHA256 6ca691c97ab0028ce9acade5d079289668b1d0339ad330181c84fc7e7114c509
MD5 12215a810e34537734e8802673a35c2d
SHA1 47c3a8e85e57a263a911c9f670e014b420866722
SHA512 92e2fc419e120c451f9f331731da6b1fd9bef2de75403bf85cf34be5d6a1651d2eafa560d1db8cc7ce38cde10c75705b87c4d366d4172688c62c85fbd90c0cec
SSDEEP 196608:kAD11ar8RAb2GWt/HM/Gqniw1kdRDcCekj1y6n7c4:n1ar8/GRniwwws5y+7c4
MD5 SHA1 SHA512 SSDEEP

android

com.half.powder

base.apk

SHA256 68d0569af255f25f773e3e4f9506b1d253ea108511b4df70b45430f6a5691090
MD5 41eae3fea4761463a82c98b1e9b88504
SHA1 159ffafa7b9bb3824b924402714dacbb33284092
SHA512 9630429ff1e8afcc415f2a42103f3aea1afb12af0ca8cfcca9c30f1725ed0020a6a13007b837ec6b4716cf9c220298b6ec45c05a9551ee6a3936c18300a1a2e5
SSDEEP 98304:KN+2eWaL3X0LixH+pvRbKn8x2GwituDSQMGO:h2eWI3XgSH+pZbKnk2GluDS1
MD5 SHA1 SHA512 SSDEEP

android

com.xoyitomesavile.gozuba

com.lemifokubizu.tuyevu.fonivefotu.habihutelataketo

android.app.action.DEVICE_ADMIN_DISABLED android.app.action.DEVICE_ADMIN_ENABLED android.app.action.ACTION_DEVICE_ADMIN_DISABLE_REQUESTED android.app.action.ACTION_PASSWORD_FAILED android.app.action.ACTION_PASSWORD_SUCCEEDED

com.lemifokubizu.tuyevu.cucemelarejedu.sako

android.intent.action.BOOT_COMPLETED android.intent.action.QUICKBOOT_POWERON com.htc.intent.action.QUICKBOOT_POWERON android.intent.action.REBOOT

com.lemifokubizu.tuyevu.cucemelarejedu.buveli

android.intent.action.PACKAGE_ADDED android.intent.action.PACKAGE_REMOVED android.intent.action.ACTION_SHUTDOWN android.intent.action.ACTION_POWER_CONNECTED android.intent.action.ACTION_POWER_DISCONNECTED android.net.conn.CONNECTIVITY_CHANGE android.net.wifi.WIFI_STATE_CHANGED android.intent.action.AIRPLANE_MODE android.intent.action.SCREEN_ON android.intent.action.SCREEN_OFF android.intent.action.USER_PRESENT android.intent.action.BATTERY_OKAY android.intent.action.DATE_CHANGED

com.lemifokubizu.tuyevu.cucemelarejedu.rebedamafazoto

android.intent.action.MY_PACKAGE_REPLACED

com.lemifokubizu.tuyevu.cozeferiga.naze

android.provider.Telephony.SMS_RECEIVED

com.lemifokubizu.tuyevu.cozeferiga.tero

android.provider.Telephony.WAP_PUSH_DELIVER

com.lemifokubizu.tuyevu.cozeferiga.joromabizo

android.provider.Telephony.SMS_DELIVER

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED android.intent.action.TIME_SET android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

Android Permissions

7ec62d3c50d033b0857fe6f7e1e09de219001cf3bcc25fe5ddac25596b0c2922.apk

Permissions

android.permission.REQUEST_INSTALL_PACKAGES

Sharing

General

Malware Config

Signatures

File Explorer

7ec62d3c50d033b0857fe6f7e1e09de219001cf3bcc25fe5ddac25596b0c2922.apk

com.olympic.hen.Dbiologygadget

androidx.startup.InitializationProvider

base.apk

com.xoyitomesavile.gozuba.kuvutovedefebo

com.lemifokubizu.tuyevu.jugidupove

com.lemifokubizu.tuyevu.kayamamiya

com.lemifokubizu.tuyevu.cubixi

com.lemifokubizu.tuyevu.xuze.vemogususe.xataburege

com.lemifokubizu.tuyevu.beka.bokaropemopusa

com.lemifokubizu.tuyevu.fonivefotu.posarehe

com.lemifokubizu.tuyevu.cozeferiga.vitopakaxolo

com.lemifokubizu.tuyevu.vodapi.mezufezu

com.lemifokubizu.tuyevu.cozeferiga.bidewatugukave

com.lemifokubizu.tuyevu.cavimita

com.lemifokubizu.tuyevu.wakogifuwu.wakovuzaku

com.lemifokubizu.tuyevu.beka.gevoke

com.lemifokubizu.tuyevu.beka.polajifodisa

com.lemifokubizu.tuyevu.beka.hokafohiyifazoxo

com.lemifokubizu.tuyevu.didekamibace.hitakibujuyitici

com.lemifokubizu.tuyevu.yobi.jisokunafo

com.lemifokubizu.tuyevu.cozeferiga.yipilusobupi

androidx.work.impl.background.systemalarm.SystemAlarmService

androidx.work.impl.background.systemjob.SystemJobService

androidx.work.impl.foreground.SystemForegroundService

androidx.room.MultiInstanceInvalidationService

com.lemifokubizu.tuyevu.fonivefotu.habihutelataketo

com.lemifokubizu.tuyevu.cucemelarejedu.sako

com.lemifokubizu.tuyevu.cucemelarejedu.buveli

com.lemifokubizu.tuyevu.cucemelarejedu.rebedamafazoto

com.lemifokubizu.tuyevu.cozeferiga.naze

com.lemifokubizu.tuyevu.cozeferiga.tero

com.lemifokubizu.tuyevu.cozeferiga.joromabizo

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.WorkManagerInitializer

Android Permissions

7ec62d3c50d033b0857fe6f7e1e09de219001cf3bcc25fe5ddac25596b0c2922.apk