Overview

overview

10

Static

static

10

5769ae3cc9...32.apk

android-10-x64

7

5769ae3cc9...32.apk

android-11-x64

7

5769ae3cc9...32.apk

android-13-x64

7

5769ae3cc9...32.apk

android-14-x64

7

5769ae3cc9...32.apk

android-15-x64

7

5769ae3cc9...32.apk

android-9-x86

6

Sharing

Copy URL Twitter E-mail

General

  • Target
    5769ae3cc93943dda4d1743f2febf6cec1282a0a6289da68cb55bb4724ec9332.apk
  • Size 2.4MB
  • Sample260120-kx2cdsev8f
  • SHA256 5769ae3cc93943dda4d1743f2febf6cec1282a0a6289da68cb55bb4724ec9332
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
phantomcard

Malware Config

Extracted

Family

  • phantomcard

C2

  • http://43.157.171.245//api/user_logout

  • http://43.157.171.245//baxi/b/?step=

  • http://43.157.171.245/api/user_config

Signatures

  • PhantomCard payload 1 IoCs
  • Phantomcard family
    phantomcard
  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 1 IoCs
  • Codesign digest Mismatch 1 IoCs

    File was altered after it was signed.

  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • 5769ae3cc93943dda4d1743f2febf6cec1282a0a6289da68cb55bb4724ec9332.apk
    .apk 2.4MB

5769ae3cc93943dda4d1743f2febf6cec1282a0a6289da68cb55bb4724ec9332.apk

  • SHA256 5769ae3cc93943dda4d1743f2febf6cec1282a0a6289da68cb55bb4724ec9332
  • MD5 SHA1 SHA512 SSDEEP TLSH
android

  • PhantomCard payload

  • Codesign digest Mismatch

    File was altered after it was signed.

  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

File Signature issue

Digest
549df0afe3a2386d94937691b8b08e3f74096a8c3bb7f08bd57768ade737e2bc
Digest Algorithm
sha256
Digest Matches
Not matched
Trusted
Not trusted
Signing Certificate
CN=rjlg,OU=kj1755178776554,O=io1755178776554,L=xinjiang,ST=xinjiang,C=xinjiang
Chains

Jan 1, 0001

rznnih.rigxko.ujyoeo

Android Permissions

5769ae3cc93943dda4d1743f2febf6cec1282a0a6289da68cb55bb4724ec9332.apk

Permissions

android.permission.NFC

android.permission.NFC_PREFERRED_PAYMENT_INFO

android.permission.WAKE_LOCK

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.INTERNET

android.permission.FOREGROUND_SERVICE

android.permission.FOREGROUND_SERVICE_DATA_SYNC

android.permission.USE_EXACT_ALARM

android.permission.VIBRATE

android.permission.SCHEDULE_EXACT_ALARM

rznnih.rigxko.ujyoeo.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION