ef80429d554a6f7a0b1ad97a2ca5df4d[.]apk

General

Target
ef80429d554a6f7a0b1ad97a2ca5df4d.apk
Size 160KB
Sample260306-e83fyaas5s
SHA256 2b43af46398ece7b9e1e41bb7c2e2ff3ec227edb38283bea7622115bb76a7823
MD5 ef80429d554a6f7a0b1ad97a2ca5df4d
SHA1 18492f451511e2f736646ed61778365c6936f342
SHA512 11c0599ce5b3a82b0438a8a41d965417e45fb41ba9b8511a6104544738270bf1c4abff0429c20957dc7427663e7c4281529330d068364ef64f50c61c1e828c17
SSDEEP 3072:gMG+RF83rVeAghsxDehY8JqdkBHqH+QQDDDRsI9OsI90/HdXAdPZ/HdXAdP+l:gm6rVeAghEDvKqduiQq4Xk/Xk+l
TLSH
T1F2F301D2A351B1ACF037B1F419B42B6733D8C48452EB771345209655FE39BA80FACE29
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE

Requests dangerous framework permissions 6 IoCs

description	ioc
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
ef80429d554a6f7a0b1ad97a2ca5df4d.apk

File Explorer

ef80429d554a6f7a0b1ad97a2ca5df4d.apk

.apk 160KB

ef80429d554a6f7a0b1ad97a2ca5df4d.apk

SHA256 2b43af46398ece7b9e1e41bb7c2e2ff3ec227edb38283bea7622115bb76a7823
MD5 ef80429d554a6f7a0b1ad97a2ca5df4d
SHA1 18492f451511e2f736646ed61778365c6936f342
SHA512 11c0599ce5b3a82b0438a8a41d965417e45fb41ba9b8511a6104544738270bf1c4abff0429c20957dc7427663e7c4281529330d068364ef64f50c61c1e828c17
SSDEEP 3072:gMG+RF83rVeAghsxDehY8JqdkBHqH+QQDDDRsI9OsI90/HdXAdPZ/HdXAdP+l:gm6rVeAghEDvKqduiQq4Xk/Xk+l
TLSH
T1F2F301D2A351B1ACF037B1F419B42B6733D8C48452EB771345209655FE39BA80FACE29
MD5 SHA1 SHA512 SSDEEP TLSH

android

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

7a58213d28eacc5b9b73089cf77e85effaa25634272d160c8a83f9258f2a11df

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=wtvjorewpmpne,O=ucxmzby,C=US

com.ytnfrar.rtom

Android Permissions

ef80429d554a6f7a0b1ad97a2ca5df4d.apk

Permissions

android.permission.INTERNET

android.permission.CALL_PHONE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.READ_PHONE_STATE

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.READ_CONTACTS

android.permission.WAKE_LOCK

ef80429d554a6f7a0b1ad97a2ca5df4d.apk

File Signature issue

com.ytnfrar.rtom.fujyoosirmkzp.mnwtaptqlt

com.google.android.gms.common.api.GoogleApiActivity

com.ytnfrar.rtom.pjkmvmii.wrhyrvny

com.ytnfrar.rtom.whxscfuefqstpmqc

com.ytnfrar.rtom.fujyoosirmkzp.mjpmafs

com.ytnfrar.rtom.fujyoosirmkzp.uhqheljlv

com.ytnfrar.rtom.esmpbuievrxy

com.ytnfrar.rtom.fujyoosirmkzp.pflqhrqnquy

com.ytnfrar.rtom.fujyoosirmkzp.robp

com.ytnfrar.rtom.owupptcxzyqqx.imnousdjgxrfwv

com.ytnfrar.rtom.owupptcxzyqqx.ervtmtch

com.ytnfrar.rtom.zyflirdzmmmwfm

com.ytnfrar.rtom.owupptcxzyqqx.yrsdracpcim

com.ytnfrar.rtom.owupptcxzyqqx.snixyyxfkaiss

com.ytnfrar.rtom.owupptcxzyqqx.kjlhndc

com.ytnfrar.rtom.owupptcxzyqqx.sgauklhdaykgjtk

com.ytnfrar.rtom.owupptcxzyqqx.qwv

com.ytnfrar.rtom.pjkmvmii.dhyl

com.ytnfrar.rtom.dhkkcprtp

com.ytnfrar.rtom.sunyjv.pccqdlnpkqhhsisc

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

ef80429d554a6f7a0b1ad97a2ca5df4d.apk

File Signature issue

com.ytnfrar.rtom.fujyoosirmkzp.mnwtaptqlt

com.google.android.gms.common.api.GoogleApiActivity

com.ytnfrar.rtom.pjkmvmii.wrhyrvny

com.ytnfrar.rtom.whxscfuefqstpmqc

com.ytnfrar.rtom.fujyoosirmkzp.mjpmafs

com.ytnfrar.rtom.fujyoosirmkzp.uhqheljlv

com.ytnfrar.rtom.esmpbuievrxy

com.ytnfrar.rtom.fujyoosirmkzp.pflqhrqnquy

com.ytnfrar.rtom.fujyoosirmkzp.robp

com.ytnfrar.rtom.owupptcxzyqqx.imnousdjgxrfwv

com.ytnfrar.rtom.owupptcxzyqqx.ervtmtch

com.ytnfrar.rtom.zyflirdzmmmwfm

com.ytnfrar.rtom.owupptcxzyqqx.yrsdracpcim

com.ytnfrar.rtom.owupptcxzyqqx.snixyyxfkaiss

com.ytnfrar.rtom.owupptcxzyqqx.kjlhndc

com.ytnfrar.rtom.owupptcxzyqqx.sgauklhdaykgjtk

com.ytnfrar.rtom.owupptcxzyqqx.qwv

com.ytnfrar.rtom.pjkmvmii.dhyl

com.ytnfrar.rtom.dhkkcprtp

com.ytnfrar.rtom.sunyjv.pccqdlnpkqhhsisc

Android Permissions

ef80429d554a6f7a0b1ad97a2ca5df4d.apk