92394e82d9cf5de5cb9c7ac072e774496bd1c7e2944683837d30b188804c1810

General

Target
92394e82d9cf5de5cb9c7ac072e774496bd1c7e2944683837d30b188804c1810
Size 260KB
Sample260707-jcbesscw21
SHA256 92394e82d9cf5de5cb9c7ac072e774496bd1c7e2944683837d30b188804c1810
MD5 dff2db9dd80666b96d3fb567a677bd0c
SHA1 52a2de147442d4303b2f56914916beb7ec4f56ab
SHA512 1e47cb142a08d1634490f552b3756a800467645c1f871c485affea55ab3c1b3fb6e3ad71da93b8b6cf7c6c418f8cc9ef9e9359395e5b62dfe35bc74b23716953
SSDEEP 6144:MABYjEhtadO/SKgypt3IFXaAL0sLarY6zk/G4lxU/SLl+FtOzBp6eT:ejEh8dYXp7W4ZzkrlW/BOBpLT
TLSH
T1A244127B92D4D523C873B33443B2666F45F20D88A8A1D1315B3CF52D0DBAEC1BA9859D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Requests dangerous framework permissions 10 IoCs

description	ioc
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE

Insecure Codesign Algorithm 1 IoCs

File was codesigned using an insecure algorithm.

resource
92394e82d9cf5de5cb9c7ac072e774496bd1c7e2944683837d30b188804c1810

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
92394e82d9cf5de5cb9c7ac072e774496bd1c7e2944683837d30b188804c1810

File Explorer

92394e82d9cf5de5cb9c7ac072e774496bd1c7e2944683837d30b188804c1810

.apk 260KB

92394e82d9cf5de5cb9c7ac072e774496bd1c7e2944683837d30b188804c1810

SHA256 92394e82d9cf5de5cb9c7ac072e774496bd1c7e2944683837d30b188804c1810
MD5 dff2db9dd80666b96d3fb567a677bd0c
SHA1 52a2de147442d4303b2f56914916beb7ec4f56ab
SHA512 1e47cb142a08d1634490f552b3756a800467645c1f871c485affea55ab3c1b3fb6e3ad71da93b8b6cf7c6c418f8cc9ef9e9359395e5b62dfe35bc74b23716953
SSDEEP 6144:MABYjEhtadO/SKgypt3IFXaAL0sLarY6zk/G4lxU/SLl+FtOzBp6eT:ejEh8dYXp7W4ZzkrlW/BOBpLT
TLSH
T1A244127B92D4D523C873B33443B2666F45F20D88A8A1D1315B3CF52D0DBAEC1BA9859D
MD5 SHA1 SHA512 SSDEEP TLSH

android

Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.
Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

d71a336e915c0c019dd447d08d6be86e5f931a47

Digest Algorithm

sha1

Digest Matches

Trusted

Not trusted

Signing Certificate

CN=srixbwe vqhfkvu,OU=,O=,L=,ST=,C=

Chains

Jan 1, 0001

com.glrcibn.ubcnkmetfzn

Android Permissions

92394e82d9cf5de5cb9c7ac072e774496bd1c7e2944683837d30b188804c1810

Permissions

android.permission.READ_CONTACTS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_PHONE_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.VIBRATE

android.permission.WAKE_LOCK

android.permission.CALL_PHONE

android.permission.ACCESS_WIFI_STATE

com.android.browser.permission.READ_HISTORY_BOOKMARKS

android.permission.READ_SMS

android.permission.ACCESS_NETWORK_STATE

android.permission.GET_TASKS

android.permission.USES_POLICY_FORCE_LOCK

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.WRITE_SETTINGS

android.permission.SEND_SMS

android.permission.RECEIVE_SMS

android.permission.CHANGE_NETWORK_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_SMS

android.permission.CHANGE_WIFI_STATE

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

92394e82d9cf5de5cb9c7ac072e774496bd1c7e2944683837d30b188804c1810

File Signature issue

com.glrcibn.ubcnkmetfzn.zdfkbjluipc.xivMdOwat

com.jeckgjqkr.jqxcjpdbitq.CNUvaoeW

com.jeckgjqkr.jqxcjpdbitq.xqxuvy

com.jeckgjqkr.jqxcjpdbitq.qJgPKwTdn

com.jeckgjqkr.jqxcjpdbitq.dewpTGwRVSkm

com.glrcibn.ubcnkmetfzn.zdfkbjluipc.hbqbfpnoz.tRGdUsl

com.jeckgjqkr.jqxcjpdbitq.hwstlcnxhiu

com.jeckgjqkr.jqxcjpdbitq.qhcdoyspn

com.jeckgjqkr.jqxcjpdbitq.yehcvzy

com.jeckgjqkr.jqxcjpdbitq.dushohst

com.jeckgjqkr.jqxcjpdbitq.hzlqolpuwn

com.jeckgjqkr.jqxcjpdbitq.rmzyajuyder

com.glrcibn.ubcnkmetfzn.eioazd.cbywirjl.fAqMHvV

com.jeckgjqkr.jqxcjpdbitq.qlixysxbmpu

com.jeckgjqkr.jqxcjpdbitq.mouxwbh

com.glrcibn.ubcnkmetfzn.eioazd.JIMaieuUwNbl

com.jeckgjqkr.jqxcjpdbitq.krbwLt

com.jeckgjqkr.jqxcjpdbitq.xrvlhr

com.jeckgjqkr.jqxcjpdbitq.ucLlhlbIfVM

com.jeckgjqkr.jqxcjpdbitq.BOzDXNBXUVQ

com.jeckgjqkr.jqxcjpdbitq.gmsudhunv

com.jeckgjqkr.jqxcjpdbitq.xjvifg

com.jeckgjqkr.jqxcjpdbitq.CPrcsUzuXZIz

com.jeckgjqkr.jqxcjpdbitq.bqovdgud

com.jeckgjqkr.jqxcjpdbitq.AduJZJSBOEJ

com.jeckgjqkr.jqxcjpdbitq.jktrbF

com.jeckgjqkr.jqxcjpdbitq.jluasmweqa

com.jeckgjqkr.jqxcjpdbitq.eufmgcq

com.jeckgjqkr.jqxcjpdbitq.NABvExsujOm

com.jeckgjqkr.jqxcjpdbitq.ckxlsvflgnu

com.glrcibn.ubcnkmetfzn.vaixqtitlv.dbjdfhorz.OKEpbqBc

com.glrcibn.ubcnkmetfzn.vaixqtitlv.dbjdfhorz.RYVnpgODZ

com.jeckgjqkr.jqxcjpdbitq.pmrnxe

com.glrcibn.ubcnkmetfzn.vaixqtitlv.dbjdfhorz.jspHmY

com.glrcibn.ubcnkmetfzn.vaixqtitlv.UoeATOKb

com.glrcibn.ubcnkmetfzn.vaixqtitlv.ePIuArJwkao

com.jeckgjqkr.jqxcjpdbitq.zhxgbp

com.jeckgjqkr.jqxcjpdbitq.xuywueg

com.jeckgjqkr.jqxcjpdbitq.jdezqpoarw

com.glrcibn.ubcnkmetfzn.vaixqtitlv.dbjdfhorz.qtkmUNhxTQU

Android Permissions

92394e82d9cf5de5cb9c7ac072e774496bd1c7e2944683837d30b188804c1810