ae5483625f278378e9d8930562c3be0dc41c9132fbcaad3894c78b76eb986141.zip
- SHA256 87a5dba089affa7f851623ac8314c00ad9d9c890ea6038f24a44b6a5ebd9c4f3
Password
infected
Behavioral task
behavioral1
Sample
ae5483625f278378e9d8930562c3be0dc41c9132fbcaad3894c78b76eb986141.apk
Resource
android-34-x64-arm64-20260325.1-en
android-14-x64
1 signatures
300 seconds
General
- Target ae5483625f278378e9d8930562c3be0dc41c9132fbcaad3894c78b76eb986141.zip
- Size 478KB
- Sample261029-vjg2psev9k
- SHA256 87a5dba089affa7f851623ac8314c00ad9d9c890ea6038f24a44b6a5ebd9c4f3
- MD5 29a99fa51a7d776dceda3357d4fa6f83
- SHA1 ae55fe7941373fd45ee6f6452001f1dfc0ca9605
- SHA512 80da286b9cf1a0e02517512ab2d3204828264631ea2cbbe07df7a4721ca386bb6aa3e7c7a6364d5f03866a305e6e36f720fb622774b7b72ab1f6ca89976b74ce
- SSDEEP 12288:EtewWF0WFR9/85Rqrdo5dd4z2nf7d1xXrLho1N:EteLdF05x5n4I7dLXrO1N
- TLSH T116A4231BD44F16C3E9AF84F28E53E88C0751ECA4C3A954876BC52AE9854AC72DB74387
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Detects Mirai 3 IoCs
resource yara_rule static1/unpack001/ae5483625f278378e9d8930562c3be0dc41c9132fbcaad3894c78b76eb986141.apk family_mirai_plaintext static1/unpack001/ae5483625f278378e9d8930562c3be0dc41c9132fbcaad3894c78b76eb986141.apk family_mirai_plaintext static1/unpack001/ae5483625f278378e9d8930562c3be0dc41c9132fbcaad3894c78b76eb986141.apk family_mirai_plaintext - Declares broadcast receivers with permission to handle system events 1 IoCs
description ioc Required by device admin receivers to bind with the system. Allows apps to manage device administration features. android.permission.BIND_DEVICE_ADMIN - Declares services with permission to bind to the system 5 IoCs
description ioc Required by accessibility services to bind with the system. Allows apps to access accessibility features. android.permission.BIND_ACCESSIBILITY_SERVICE Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device. android.permission.BIND_NOTIFICATION_LISTENER_SERVICE Required by input method services to bind with the system. Allows apps to provide custom input methods (keyboards). android.permission.BIND_INPUT_METHOD Required by dream services to bind with the system. Allows apps to provide interactive screensavers (dreams). android.permission.BIND_DREAM_SERVICE Required by quick settings tile services to bind with the system. Allows apps to add custom tiles to the quick settings menu. android.permission.BIND_QUICK_SETTINGS_TILE - Requests dangerous framework permissions 8 IoCs
description ioc Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE Allows an application to collect component usage statistics. android.permission.PACKAGE_USAGE_STATS Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps. android.permission.SYSTEM_ALERT_WINDOW Allows an application to read or write the system settings. android.permission.WRITE_SETTINGS Allows an application a broad access to external storage in scoped storage. android.permission.MANAGE_EXTERNAL_STORAGE Allows applications to use exact alarm APIs. android.permission.SCHEDULE_EXACT_ALARM - Untrusted Codesign Signers 1 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack001/ae5483625f278378e9d8930562c3be0dc41c9132fbcaad3894c78b76eb986141.apk
File Explorer
-
ae5483625f278378e9d8930562c3be0dc41c9132fbcaad3894c78b76eb986141.zip.zip 478KB
-
ae5483625f278378e9d8930562c3be0dc41c9132fbcaad3894c78b76eb986141.apk.apk 485KB
ae5483625f278378e9d8930562c3be0dc41c9132fbcaad3894c78b76eb986141.apk
- SHA256 ae5483625f278378e9d8930562c3be0dc41c9132fbcaad3894c78b76eb986141
- MD5 e407477ec67f390c7be2cab2d79d3fae
- SHA1 d4c06a93bf521416afe4e132eb19f6469bff797c
- SHA512 3f0af39bc3fe6fea167fde270da33d526fa3167309fe8eefba50aebdc567699aa5c244f3872f8301802ec3c2e33f492b321d8d0536002313c642226c49b7996a
- SSDEEP 12288:dYjeujVq5rDZ+dCcigapheUPuYC8mTnR+cb/JPyJ85b1W:ujeMyDZ+dagaPrGr8mTn0khPv/W
- TLSH T127B42384BEFD7E6FF52F14B48994593343E0B9B506A87D198B46C202BE07BF05694F48
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Mirai
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Password
infected
File Signature issue
Digest
a2ccbe2971db5ac7318aadb76bf3691845557f9a8350ee946d1ab30b3343df76
Digest Algorithm
sha256
Digest Matches
Trusted
Not trusted
Signer
CN=Android Debug,O=Android,C=US
Subject
CN=Android Debug,O=Android,C=US
Serial Number
01
Issuer
CN=Android Debug,O=Android,C=US
Timespan
Sep 16, 2026 - Sep 8, 2056
com.chingusapk.juan
com.chingusapk.juan.MainActivity
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.CHANGE_NETWORK_STATE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.WAKE_LOCK
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_PHONE_STATE
android.permission.FOREGROUND_SERVICE
android.permission.BIND_ACCESSIBILITY_SERVICE
android.permission.BIND_NOTIFICATION_LISTENER_SERVICE
android.permission.BIND_DEVICE_ADMIN
android.permission.BIND_DREAM_SERVICE
android.permission.BIND_TRUST_AGENT
android.permission.PACKAGE_USAGE_STATS
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS
android.permission.SYSTEM_ALERT_WINDOW
android.permission.WRITE_SETTINGS
android.permission.WRITE_SECURE_SETTINGS
android.permission.BIND_QUICK_SETTINGS_TILE
android.permission.REQUEST_DELETE_PACKAGES
android.permission.INSTALL_PACKAGES
android.permission.FOREGROUND_SERVICE_DATA_SYNC
android.permission.MANAGE_EXTERNAL_STORAGE
android.permission.SCHEDULE_EXACT_ALARM
android.permission.FOREGROUND_SERVICE_SPECIAL_USE
com.chingusapk.juan.MainActivity
android.intent.action.MAIN
com.chingusapk.juan.KyorijService
com.chingusapk.juan.PersistService
com.chingusapk.juan.AccessibilityService
android.accessibilityservice.AccessibilityService
com.chingusapk.juan.NotificationService
android.service.notification.NotificationListenerService
com.chingusapk.juan.IMEService
android.view.InputMethod
com.chingusapk.juan.DreamService
android.service.dreams.DreamService
com.chingusapk.juan.QSTileService
android.service.quicksettings.action.QS_TILE
com.chingusapk.juan.TrustAgentService
android.service.trust.TrustAgentService
com.chingusapk.juan.BootReceiver
android.intent.action.BOOT_COMPLETED
android.intent.action.QUICKBOOT_POWERON
android.intent.action.REBOOT
com.chingusapk.juan.RestartReceiver
com.chingusapk.juan.AdminReceiver
android.app.action.DEVICE_ADMIN_ENABLED
com.chingusapk.juan.SecretCodeReceiver
android.provider.Telephony.SECRET_CODE
com.chingusapk.juan.NetworkReceiver
android.net.wifi.STATE_CHANGE
android.net.wifi.WIFI_STATE_CHANGED
com.chingusapk.juan.PackageReceiver
android.intent.action.MY_PACKAGE_REPLACED