arsink | ezphone-3[.]1[.]apk

Target
ezphone-3.1.apk
Size 1.2MB
Sample260424-qmw8ksbs8v
SHA256 28a11b7da057d8e5c4815cf37eddc327c5625cc4c6febf32e5cc99b50cb5586f
MD5 dc5591b3e7d6bd83702fe11bd108862b
SHA1 6c667fe6deca4bd1e1f07e56c609e5af7db72933
SHA512 2c9b4121503232036ba58c052ae5b634aff6a61d8833e706fa8a902527d952f1ea9f9b90cb2d5954dcb2451d9f23496b9cc0a293fa736b61ba122c44c0962d44
SSDEEP 24576:IEup/l5xoclECis2zOTwl7+qrJRRiREKJj1dMjiFS:I1RxocShzbymRwZj1ujiQ
TLSH
T16945333322859251F8E92A754F5EB6B1CAD13E6A6F2CCFC87905F304C5FB98DB641680
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

rat arsink

Malware Config

Detects Arsink RAT 1 IoCs

resource	yara_rule
sample	family_arsink

Requests dangerous framework permissions 4 IoCs

description	ioc
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
ezphone-3.1.apk

SHA256 28a11b7da057d8e5c4815cf37eddc327c5625cc4c6febf32e5cc99b50cb5586f
MD5 dc5591b3e7d6bd83702fe11bd108862b
SHA1 6c667fe6deca4bd1e1f07e56c609e5af7db72933
SHA512 2c9b4121503232036ba58c052ae5b634aff6a61d8833e706fa8a902527d952f1ea9f9b90cb2d5954dcb2451d9f23496b9cc0a293fa736b61ba122c44c0962d44
SSDEEP 24576:IEup/l5xoclECis2zOTwl7+qrJRRiREKJj1dMjiFS:I1RxocShzbymRwZj1ujiQ
TLSH
T16945333322859251F8E92A754F5EB6B1CAD13E6A6F2CCFC87905F304C5FB98DB641680
MD5 SHA1 SHA512 SSDEEP TLSH

android

Detects Arsink RAT
Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

Digest

82a3a708d12fbf167de2884e2b1c9ec894af37aa7fa2a939eeb7f0c9bdd12265

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

C=debugging

com.ezphone

Permissions

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.SET_WALLPAPER

android.permission.BIND_WALLPAPER

android.permission.SET_WALLPAPER_COMPONENT

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE