General

  • Target
    sample
  • Size 5.1MB
  • Sample251225-pbq2rawnft
  • SHA256 a0c9d6eb1932c96a11301c00cf96ce9767fb11401e090f215f972df06b09a878
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Extracted

Family
  • albiriox

C2
  • 194.32.79.94:5555

Signatures

  • Albiriox family
  • Detects Albiriox payload 1 IoCs
  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 3 IoCs
  • Unsigned APK 1 IoCs

    Checks for missing APK codesign signature.

File Explorer

  • sample
    .apk 5.1MB

sample

  • SHA256 a0c9d6eb1932c96a11301c00cf96ce9767fb11401e090f215f972df06b09a878
  • MD5 SHA1 SHA512 SSDEEP
  • Detects Albiriox payload

  • Unsigned APK

    Checks for missing APK codesign signature.

com.nmz.nmz

Android Permissions

sample

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.FOREGROUND_SERVICE

android.permission.FOREGROUND_SERVICE_DATA_SYNC

android.permission.FOREGROUND_SERVICE_CONNECTED_DEVICE

android.permission.WAKE_LOCK

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.SYSTEM_ALERT_WINDOW

android.permission.SCHEDULE_EXACT_ALARM

android.permission.USE_EXACT_ALARM

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.QUERY_ALL_PACKAGES

android.permission.REQUEST_DELETE_PACKAGES

android.permission.DISABLE_KEYGUARD

android.permission.SYSTEM_ALERT_WINDOW

android.permission.USE_FULL_SCREEN_INTENT

com.nmz.nmz.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION