Overview

overview

10

Static

static

10

howdiduoi.apk

android-9-x86

10

Resubmissions

08/07/2026, 06:59

260708-hr38pads2m10

08/07/2026, 06:57

260708-hq2cpsc19q10

08/07/2026, 06:56

260708-hqd76sc19k10

Sharing

Copy URL Twitter E-mail

General

  • Target
    howdiduoi.apk
  • Size 884KB
  • Sample260708-hq2cpsc19q
  • SHA256 a4031274f345eda9ff78e293fa8759d1371dfcc301fee2d691d967e09f92aeb0
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
botnetmirai

Malware Config

Extracted

Family

  • mirai

C2

  • coolcams.duckdns.org

  • 141.11.88.125

Signatures

  • Family: Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai
  • Declares services with permission to bind to the system 2 IoCs
  • Requests dangerous framework permissions 2 IoCs
  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • howdiduoi.apk
    .apk 884KB

howdiduoi.apk

  • SHA256 a4031274f345eda9ff78e293fa8759d1371dfcc301fee2d691d967e09f92aeb0
  • MD5 SHA1 SHA512 SSDEEP TLSH
androidarch:arm

  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

File Signature issue

Digest
5c8f24b4ea32566eecb4da9c590e672c6863b7cc8e46d08752293479719abcdf
Digest Algorithm
sha256
Digest Matches
Trusted
Not trusted
Signer
CN=Android Debug,O=Android,C=US
com.google.android.system.service

Android Permissions

howdiduoi.apk

Permissions

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.INTERNET

android.permission.FOREGROUND_SERVICE

android.permission.FOREGROUND_SERVICE_DATA_SYNC

android.permission.WAKE_LOCK

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.SCHEDULE_EXACT_ALARM

android.permission.POST_NOTIFICATIONS

android.permission.BIND_ACCESSIBILITY_SERVICE

android.permission.BIND_NOTIFICATION_LISTENER_SERVICE

android.permission.READ_SYNC_SETTINGS

android.permission.WRITE_SYNC_SETTINGS

android.permission.AUTHENTICATE_ACCOUNTS