a20a036f0a2e222ab4ada00e01a6975aeef05a86fa9199c0fa6f08739c6d741a[.]bin

General

Target
a20a036f0a2e222ab4ada00e01a6975aeef05a86fa9199c0fa6f08739c6d741a.bin
Size 553KB
Sample260403-twb6jsax4z
SHA256 a20a036f0a2e222ab4ada00e01a6975aeef05a86fa9199c0fa6f08739c6d741a
MD5 b4f8c1f0d6865ca4304a4a9444f0542f
SHA1 120cfc24b32413fcb038a5dfa89f03538187b528
SHA512 1001ecf132248dfac92f63063676962b7a483005cab04ddbafef098e4097949001303632dffadfe1426ba56bca7fa1a38048671d649a7651f02ae2fc115e4092
SSDEEP 12288:QjEhp2BFjYlpglxbFrBaAurfghx7sFZp10gKV2jfqaYQMknp:QjEhp2BFjYOhpxYmgKBCnp
TLSH
T1E1C41287F24D842BE9D5E87C58630BE0FA70B954E31222D74FC4CE262E917DC9752B86
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE

Requests dangerous framework permissions 17 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to collect component usage statistics.	android.permission.PACKAGE_USAGE_STATS
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an application a broad access to external storage in scoped storage.	android.permission.MANAGE_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
a20a036f0a2e222ab4ada00e01a6975aeef05a86fa9199c0fa6f08739c6d741a.bin

File Explorer

a20a036f0a2e222ab4ada00e01a6975aeef05a86fa9199c0fa6f08739c6d741a.bin

.apk 553KB

a20a036f0a2e222ab4ada00e01a6975aeef05a86fa9199c0fa6f08739c6d741a.bin

SHA256 a20a036f0a2e222ab4ada00e01a6975aeef05a86fa9199c0fa6f08739c6d741a
MD5 b4f8c1f0d6865ca4304a4a9444f0542f
SHA1 120cfc24b32413fcb038a5dfa89f03538187b528
SHA512 1001ecf132248dfac92f63063676962b7a483005cab04ddbafef098e4097949001303632dffadfe1426ba56bca7fa1a38048671d649a7651f02ae2fc115e4092
SSDEEP 12288:QjEhp2BFjYlpglxbFrBaAurfghx7sFZp10gKV2jfqaYQMknp:QjEhp2BFjYOhpxYmgKBCnp
TLSH
T1E1C41287F24D842BE9D5E87C58630BE0FA70B954E31222D74FC4CE262E917DC9752B86
MD5 SHA1 SHA512 SSDEEP TLSH

android arch:arm64 arch:arm arch:x86 arch:x64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

9d090df1c72c74381e415dc14d57b17e44a3defbba4daa2aa091448e85058804

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=Android Debug,OU=Android,O=Unknown,L=Unknown,ST=Unknown,C=US

com.betweenagoalax

android.permission.INSTALL_SHORTCUT android.permission.WRITE_EXTERNAL_STORAGE android.permission.BATTERY_STATS android.permission.USE_FINGERPRINT android.permission.GET_PACKAGE_SIZE android.permission.CLEAR_APP_CACHE android.permission.ACCESS_NOTIFICATION_POLICY android.permission.USE_FINGERPRINT android.permission.BATTERY_STATS android.permission.WRITE_EXTERNAL_STORAGE android.permission.POST_NOTIFICATIONS android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS android.permission.FOREGROUND_SERVICE android.permission.RECEIVE_BOOT_COMPLETED android.permission.INTERNET android.permission.RECEIVE_SMS android.permission.READ_SMS android.permission.READ_PHONE_STATE android.permission.SEND_SMS android.permission.WAKE_LOCK android.permission.CALL_PHONE android.permission.USES_POLICY_FORCE_LOCK android.permission.VIBRATE android.permission.REQUEST_COMPANION_RUN_IN_BACKGROUND android.permission.REQUEST_COMPANION_USE_DATA_IN_BACKGROUND android.permission.REQUEST_DELETE_PACKAGES android.permission.MODIFY_AUDIO_SETTINGS android.permission.ACCESS_WIFI_STATE android.permission.ACCESS_NETWORK_STATE android.permission.WRITE_SETTINGS android.permission.REORDER_TASKS android.permission.PACKAGE_USAGE_STATS android.permission.REQUEST_INSTALL_PACKAGES android.permission.MANAGE_EXTERNAL_STORAGE android.permission.SYSTEM_ALERT_WINDOW android.permission.SYSTEM_OVERLAY_WINDOW android.permission.RECORD_AUDIO android.permission.ACCESS_FINE_LOCATION android.permission.ACCESS_COARSE_LOCATION android.permission.QUERY_ALL_PACKAGES android.permission.READ_PHONE_STATE

Android Permissions

a20a036f0a2e222ab4ada00e01a6975aeef05a86fa9199c0fa6f08739c6d741a.bin

Permissions

android.permission.INSTALL_SHORTCUT

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.BATTERY_STATS

android.permission.USE_FINGERPRINT

android.permission.GET_PACKAGE_SIZE

android.permission.CLEAR_APP_CACHE

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.USE_FINGERPRINT

android.permission.BATTERY_STATS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.POST_NOTIFICATIONS

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.INTERNET

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.permission.READ_PHONE_STATE

android.permission.SEND_SMS

android.permission.WAKE_LOCK

android.permission.CALL_PHONE

android.permission.USES_POLICY_FORCE_LOCK

android.permission.VIBRATE

android.permission.REQUEST_COMPANION_RUN_IN_BACKGROUND

android.permission.REQUEST_COMPANION_USE_DATA_IN_BACKGROUND

android.permission.REQUEST_DELETE_PACKAGES

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_SETTINGS

android.permission.REORDER_TASKS

android.permission.PACKAGE_USAGE_STATS

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.MANAGE_EXTERNAL_STORAGE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.SYSTEM_OVERLAY_WINDOW

android.permission.RECORD_AUDIO

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.QUERY_ALL_PACKAGES

android.permission.READ_PHONE_STATE

a20a036f0a2e222ab4ada00e01a6975aeef05a86fa9199c0fa6f08739c6d741a.bin

File Signature issue

com.betweenagoalax.p011u

com.betweenagoalax.p022r

com.betweenagoalax.p016l

com.betweenagoalax.p011t

com.betweenagoalax.p041a

com.betweenagoalax.p064u

com.betweenagoalax.p027v

com.betweenagoalax.p017x

com.betweenagoalax.p046u

com.betweenagoalax.p086u

com.betweenagoalax.p048r

com.betweenagoalax.p025f

com.betweenagoalax.p044l

com.betweenagoalax.p069u

com.betweenagoalax.p084e

com.betweenagoalax.p076e

com.betweenagoalax.p026d

com.betweenagoalax.p063t

com.betweenagoalax.p098j

com.betweenagoalax.p032j

com.betweenagoalax.p042x

com.betweenagoalax.p012w

com.betweenagoalax.p080z

com.betweenagoalax.p010y

com.betweenagoalax.p078p

com.betweenagoalax.p055z

com.betweenagoalax.p040p

com.betweenagoalax.p097w

com.betweenagoalax.p061y

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

a20a036f0a2e222ab4ada00e01a6975aeef05a86fa9199c0fa6f08739c6d741a.bin

File Signature issue

com.betweenagoalax.p011u

com.betweenagoalax.p022r

com.betweenagoalax.p016l

com.betweenagoalax.p011t

com.betweenagoalax.p041a

com.betweenagoalax.p064u

com.betweenagoalax.p027v

com.betweenagoalax.p017x

com.betweenagoalax.p046u

com.betweenagoalax.p086u

com.betweenagoalax.p048r

com.betweenagoalax.p025f

com.betweenagoalax.p044l

com.betweenagoalax.p069u

com.betweenagoalax.p084e

com.betweenagoalax.p076e

com.betweenagoalax.p026d

com.betweenagoalax.p063t

com.betweenagoalax.p098j

com.betweenagoalax.p032j

com.betweenagoalax.p042x

com.betweenagoalax.p012w

com.betweenagoalax.p080z

com.betweenagoalax.p010y

com.betweenagoalax.p078p

com.betweenagoalax.p055z

com.betweenagoalax.p040p

com.betweenagoalax.p097w

com.betweenagoalax.p061y

Android Permissions

a20a036f0a2e222ab4ada00e01a6975aeef05a86fa9199c0fa6f08739c6d741a.bin