67130F843EBF484C6A87002C8B52218864184E07BCC50227175DF52BD23CA001[.]apk

Sharing

Copy URL Twitter E-mail

General

Target
67130F843EBF484C6A87002C8B52218864184E07BCC50227175DF52BD23CA001.apk
Size 1.8MB
Sample260305-l1py7sbs91
SHA256 67130f843ebf484c6a87002c8b52218864184e07bcc50227175df52bd23ca001
MD5 3b114ad5d6dc3c7b7a800e25994f14f4
SHA1 5993356afbad23bf175837b75b573384ef224da9
SHA512 b0a1feb00a672a72bde9eac30e6a97eb1adc86c5c45e34bb56a0b4f5dde5f276f07223d67be02ba58e63ab7f66f20a88d38618644751c3aa7be466df4c287d56
SSDEEP 24576:7eo2g6JF3CaKoWyJDAS/opD6GSUMfm9nCpfCSc629pihNYTFiuhO1PCg3F:7eoAtCa1WK/ot/b62kYTFh2Cg3F
TLSH
T1CE9533D59B20445BF0EB2EBC32D7F22B173957A816DC8616741495AC7DEF0CA2F2AC81
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE

Requests dangerous framework permissions 10 IoCs

description	ioc
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE

Insecure Codesign Algorithm 1 IoCs

File was codesigned using an insecure algorithm.

resource
67130F843EBF484C6A87002C8B52218864184E07BCC50227175DF52BD23CA001.apk

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
67130F843EBF484C6A87002C8B52218864184E07BCC50227175DF52BD23CA001.apk

File Explorer

67130F843EBF484C6A87002C8B52218864184E07BCC50227175DF52BD23CA001.apk

.apk 1.8MB

67130F843EBF484C6A87002C8B52218864184E07BCC50227175DF52BD23CA001.apk

SHA256 67130f843ebf484c6a87002c8b52218864184e07bcc50227175df52bd23ca001
MD5 3b114ad5d6dc3c7b7a800e25994f14f4
SHA1 5993356afbad23bf175837b75b573384ef224da9
SHA512 b0a1feb00a672a72bde9eac30e6a97eb1adc86c5c45e34bb56a0b4f5dde5f276f07223d67be02ba58e63ab7f66f20a88d38618644751c3aa7be466df4c287d56
SSDEEP 24576:7eo2g6JF3CaKoWyJDAS/opD6GSUMfm9nCpfCSc629pihNYTFiuhO1PCg3F:7eoAtCa1WK/ot/b62kYTFh2Cg3F
TLSH
T1CE9533D59B20445BF0EB2EBC32D7F22B173957A816DC8616741495AC7DEF0CA2F2AC81
MD5 SHA1 SHA512 SSDEEP TLSH

android

Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.
Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

fb305ddc9a61641a3378af87ceb27405053a7f2e

Digest Algorithm

sha1

Digest Matches

Trusted

Not trusted

Signing Certificate

CN=Android,OU=Android,O=Android,L=Mountain View,ST=California,C=US,1.2.840.113549.1.9.1=#0c13616e64726f696440616e64726f69642e636f6d

Chains

Jan 1, 0001

fpfjrkdyuhonyrbxbe.qdgumajrwfhrmtr.nylsioxr

hcwrujynnkgip.utikhtocbytjj.gnrsx.Usettleuseless

hcwrujynnkgip.utikhtocbytjj.gnrsx.Zentrymirror

hcwrujynnkgip.utikhtocbytjj.gnrsx.Qgaugephysical

hcwrujynnkgip.utikhtocbytjj.gnrsx.Rcouchconvince

hcwrujynnkgip.utikhtocbytjj.gnrsx.Drailawesome

com.google.android.gms.common.api.GoogleApiActivity

hcwrujynnkgip.utikhtocbytjj.gnrsx.Zprivateinclude

hcwrujynnkgip.utikhtocbytjj.gnrsx.Timpulsegown

hcwrujynnkgip.utikhtocbytjj.gnrsx.Qartworklife

hcwrujynnkgip.utikhtocbytjj.gnrsx.gmvqusehu

hcwrujynnkgip.utikhtocbytjj.gnrsx.Gunderwing

hcwrujynnkgip.utikhtocbytjj.gnrsx.dlbkes

hcwrujynnkgip.utikhtocbytjj.gnrsx.Crenewyouth

hcwrujynnkgip.utikhtocbytjj.gnrsx.Ejazzkidney

hcwrujynnkgip.utikhtocbytjj.gnrsx.Ojumpreward

hcwrujynnkgip.utikhtocbytjj.gnrsx.Gpavescare

hcwrujynnkgip.utikhtocbytjj.gnrsx.Wevilpark

hcwrujynnkgip.utikhtocbytjj.gnrsx.Yauditrun

hcwrujynnkgip.utikhtocbytjj.gnrsx.Yroofgown

hcwrujynnkgip.utikhtocbytjj.gnrsx.hnzzy

android.intent.action.SEND android.intent.action.SENDTO

hcwrujynnkgip.utikhtocbytjj.gnrsx.Husepass

hcwrujynnkgip.utikhtocbytjj.gnrsx.Yknowjungle

hcwrujynnkgip.utikhtocbytjj.gnrsx.Nwooltask

hcwrujynnkgip.utikhtocbytjj.gnrsx.Ctestdelay

hcwrujynnkgip.utikhtocbytjj.gnrsx.Sbusgovern

hcwrujynnkgip.utikhtocbytjj.gnrsx.Zvoicearmy

hcwrujynnkgip.utikhtocbytjj.gnrsx.Mfrostvisa

hcwrujynnkgip.utikhtocbytjj.gnrsx.xiztxctmvu

hcwrujynnkgip.utikhtocbytjj.gnrsx.Uonepiece

hcwrujynnkgip.utikhtocbytjj.gnrsx.Fpartyscissors

hcwrujynnkgip.utikhtocbytjj.gnrsx.Cretireplastic

hcwrujynnkgip.utikhtocbytjj.gnrsx.Dspeedpurpose

hcwrujynnkgip.utikhtocbytjj.gnrsx.Arocketdish

hcwrujynnkgip.utikhtocbytjj.gnrsx.Uexerciseunique

hcwrujynnkgip.utikhtocbytjj.gnrsx.vcynwniiacxap

hcwrujynnkgip.utikhtocbytjj.gnrsx.Idamageumbrella

hcwrujynnkgip.utikhtocbytjj.gnrsx.qbaaoswwabnhkix

android.intent.action.MAIN

hcwrujynnkgip.utikhtocbytjj.gnrsx.Nprofitcredit

hcwrujynnkgip.utikhtocbytjj.gnrsx.Zyearsorry

hcwrujynnkgip.utikhtocbytjj.gnrsx.uouph

hcwrujynnkgip.utikhtocbytjj.gnrsx.Bnownotable

hcwrujynnkgip.utikhtocbytjj.gnrsx.Wpledgeanswer

hcwrujynnkgip.utikhtocbytjj.gnrsx.jvje

hcwrujynnkgip.utikhtocbytjj.gnrsx.Wwirecorrect

hcwrujynnkgip.utikhtocbytjj.gnrsx.Dexcesselse

hcwrujynnkgip.utikhtocbytjj.gnrsx.Troombetween

hcwrujynnkgip.utikhtocbytjj.gnrsx.Ystereodeposit

hcwrujynnkgip.utikhtocbytjj.gnrsx.Lgoddessmath

hcwrujynnkgip.utikhtocbytjj.gnrsx.Rrealbrass

hcwrujynnkgip.utikhtocbytjj.gnrsx.Fcorrecttilt

Android Permissions

67130F843EBF484C6A87002C8B52218864184E07BCC50227175DF52BD23CA001.apk

Permissions

android.permission.CALL_PHONE

android.permission.ACCESS_NETWORK_STATE

android.permission.INSTALL_SHORTCUT

android.permission.INTERNET

android.permission.READ_CONTACTS

android.permission.READ_PHONE_STATE

android.permission.USE_FULL_SCREEN_INTENT

android.permission.REQUEST_DELETE_PACKAGES

android.permission.RECORD_AUDIO

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

android.permission.SEND_SMS

android.permission.BLUETOOTH

android.permission.RECEIVE_SMS

android.permission.GET_ACCOUNTS

android.permission.WAKE_LOCK

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.INTERNET

android.permission.BLUETOOTH

android.permission.READ_EXTERNAL_STORAGE

android.permission.READ_SMS

android.permission.WRITE_EXTERNAL_STORAGE

Sharing

General

Malware Config

Signatures

File Explorer

67130F843EBF484C6A87002C8B52218864184E07BCC50227175DF52BD23CA001.apk

File Signature issue

hcwrujynnkgip.utikhtocbytjj.gnrsx.Usettleuseless

hcwrujynnkgip.utikhtocbytjj.gnrsx.Zentrymirror

hcwrujynnkgip.utikhtocbytjj.gnrsx.Qgaugephysical

hcwrujynnkgip.utikhtocbytjj.gnrsx.Rcouchconvince

hcwrujynnkgip.utikhtocbytjj.gnrsx.Drailawesome

com.google.android.gms.common.api.GoogleApiActivity

hcwrujynnkgip.utikhtocbytjj.gnrsx.Zprivateinclude

hcwrujynnkgip.utikhtocbytjj.gnrsx.Timpulsegown

hcwrujynnkgip.utikhtocbytjj.gnrsx.Qartworklife

hcwrujynnkgip.utikhtocbytjj.gnrsx.gmvqusehu

hcwrujynnkgip.utikhtocbytjj.gnrsx.Gunderwing

hcwrujynnkgip.utikhtocbytjj.gnrsx.dlbkes

hcwrujynnkgip.utikhtocbytjj.gnrsx.Crenewyouth

hcwrujynnkgip.utikhtocbytjj.gnrsx.Ejazzkidney

hcwrujynnkgip.utikhtocbytjj.gnrsx.Ojumpreward

hcwrujynnkgip.utikhtocbytjj.gnrsx.Gpavescare

hcwrujynnkgip.utikhtocbytjj.gnrsx.Wevilpark

hcwrujynnkgip.utikhtocbytjj.gnrsx.Yauditrun

hcwrujynnkgip.utikhtocbytjj.gnrsx.Yroofgown

hcwrujynnkgip.utikhtocbytjj.gnrsx.hnzzy

hcwrujynnkgip.utikhtocbytjj.gnrsx.Husepass

hcwrujynnkgip.utikhtocbytjj.gnrsx.Yknowjungle

hcwrujynnkgip.utikhtocbytjj.gnrsx.Nwooltask

hcwrujynnkgip.utikhtocbytjj.gnrsx.Ctestdelay

hcwrujynnkgip.utikhtocbytjj.gnrsx.Sbusgovern

hcwrujynnkgip.utikhtocbytjj.gnrsx.Zvoicearmy

hcwrujynnkgip.utikhtocbytjj.gnrsx.Mfrostvisa

hcwrujynnkgip.utikhtocbytjj.gnrsx.xiztxctmvu

hcwrujynnkgip.utikhtocbytjj.gnrsx.Uonepiece

hcwrujynnkgip.utikhtocbytjj.gnrsx.Fpartyscissors

hcwrujynnkgip.utikhtocbytjj.gnrsx.Cretireplastic

hcwrujynnkgip.utikhtocbytjj.gnrsx.Dspeedpurpose

hcwrujynnkgip.utikhtocbytjj.gnrsx.Arocketdish

hcwrujynnkgip.utikhtocbytjj.gnrsx.Uexerciseunique

hcwrujynnkgip.utikhtocbytjj.gnrsx.vcynwniiacxap

hcwrujynnkgip.utikhtocbytjj.gnrsx.Idamageumbrella

hcwrujynnkgip.utikhtocbytjj.gnrsx.qbaaoswwabnhkix

hcwrujynnkgip.utikhtocbytjj.gnrsx.Nprofitcredit

hcwrujynnkgip.utikhtocbytjj.gnrsx.Zyearsorry

hcwrujynnkgip.utikhtocbytjj.gnrsx.uouph

hcwrujynnkgip.utikhtocbytjj.gnrsx.Bnownotable

hcwrujynnkgip.utikhtocbytjj.gnrsx.Wpledgeanswer

hcwrujynnkgip.utikhtocbytjj.gnrsx.jvje

hcwrujynnkgip.utikhtocbytjj.gnrsx.Wwirecorrect

hcwrujynnkgip.utikhtocbytjj.gnrsx.Dexcesselse

hcwrujynnkgip.utikhtocbytjj.gnrsx.Troombetween

hcwrujynnkgip.utikhtocbytjj.gnrsx.Ystereodeposit

hcwrujynnkgip.utikhtocbytjj.gnrsx.Lgoddessmath

hcwrujynnkgip.utikhtocbytjj.gnrsx.Rrealbrass

hcwrujynnkgip.utikhtocbytjj.gnrsx.Fcorrecttilt

hcwrujynnkgip.utikhtocbytjj.gnrsx.xnyboma

hcwrujynnkgip.utikhtocbytjj.gnrsx.hvplruazz

hcwrujynnkgip.utikhtocbytjj.gnrsx.akzszftqe

hcwrujynnkgip.utikhtocbytjj.gnrsx.tpmurabpolpplwx

hcwrujynnkgip.utikhtocbytjj.gnrsx.cammufypqmve

hcwrujynnkgip.utikhtocbytjj.gnrsx.hzcluqpaomxj

hcwrujynnkgip.utikhtocbytjj.gnrsx.bxczo

hcwrujynnkgip.utikhtocbytjj.gnrsx.jzczrykoqhpmrxd

hcwrujynnkgip.utikhtocbytjj.gnrsx.ftrolipqh

hcwrujynnkgip.utikhtocbytjj.gnrsx.lqr

hcwrujynnkgip.utikhtocbytjj.gnrsx.xww

hcwrujynnkgip.utikhtocbytjj.gnrsx.rwwrovnvbuxqp

hcwrujynnkgip.utikhtocbytjj.gnrsx.xtjjbtnkfoawwna

hcwrujynnkgip.utikhtocbytjj.gnrsx.ybgetcyxde

hcwrujynnkgip.utikhtocbytjj.gnrsx.vxiqzjwgnrvhl

hcwrujynnkgip.utikhtocbytjj.gnrsx.eatfpwvsualbohfn

hcwrujynnkgip.utikhtocbytjj.gnrsx.lbboettcvhlqfe

Android Permissions

67130F843EBF484C6A87002C8B52218864184E07BCC50227175DF52BD23CA001.apk