General

  • Target
    cheat standoff.apk
  • Size 263KB
  • Sample261017-s44ebsht7r
  • SHA256 1146b75d51651c1aa3be5c29ab8efe02aaa0098a6d41b69256b826120647adc0
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • ahmyth

C2
  • http://154.47.21.17:42474

Signatures

  • Family: AhMyth

    AhMyth is an open source Android remote administration tool.

  • Requests dangerous framework permissions 10 IoCs
  • Insecure Codesign Algorithm 1 IoCs

    File was codesigned using an insecure algorithm.

  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • cheat standoff.apk
    .apk 263KB

cheat standoff.apk

  • SHA256 1146b75d51651c1aa3be5c29ab8efe02aaa0098a6d41b69256b826120647adc0
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Insecure Codesign Algorithm

    File was codesigned using an insecure algorithm.

  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

File Signature issue

Digest
91acb68fdb956b0df114ba3397e79507168a8e37
Digest Algorithm
sha1
Digest Matches
Trusted
Not trusted
Signing Certificate
CN=Android,OU=Android,O=Android,L=Mountain View,ST=California,C=US,1.2.840.113549.1.9.1=#0c13616e64726f696440616e64726f69642e636f6d
Chains

Jan 1, 0001

ahmyth.mine.king.ahmyth

Android Permissions

cheat standoff.apk

Permissions

android.permission.WAKE_LOCK

android.permission.CAMERA

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.READ_PHONE_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.READ_CALL_LOG

android.permission.RECORD_AUDIO

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.ACCESS_FINE_LOCATION

android.permission.READ_CONTACTS