7481906134[.]zip

General

Target

7481906134.zip
Size

42.2MB
MD5

7902f53228f89d3b5031d6f47f57bd2c
SHA1

0fb3b7a67a4e7722915201eefc72d732a625a56a
SHA256

ade253a145f97642e4bc3619d1edcf8bc8f58dbf0a401fc0e6a484164288b5ab
SHA512

628f8d43e6246cddfcf837f20fdb72c2c0a7ca41cf3c9f41d3b578e20682cf51c08f77136a08759e3c74974461b31d28070fd39bdb7bfb9896a734068283f3ee
SSDEEP

786432:o6RklPYrqbPhOKuKlY89ZoULKLH4KsYySyU0GyhBE87R:oJVaq7hO+uOZoUL5KDcUuhD7R

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 8 IoCs

Processes:

description	ioc
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write the user's calendar data.	android.permission.WRITE_CALENDAR
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION

Files

7481906134.zip
.zip

Password: infected
18d6623b99b28e8306d27b40ba60b3684dc939e7b0b437cef47f9c85999a5617
.apk android arch:arm64

com.ltc.peter.shoot.tslgame

atspeter.dev.SPActivity

Activities

atspeter.dev.SPActivity

android.intent.action.MAIN

com.unity3d.player.UnityPlayerActivity

android.intent.action.MAIN

com.saypromo.SPAdActivity

applicationB.intent.action.Launch

Permissions

android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
com.android.launcher.permission.INSTALL_SHORTCUT
android.permission.INSTALL_SHORTCUT
android.permission.FOREGROUND_SERVICE
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_WIFI_STATE
com.android.vending.BILLING
android.permission.VIBRATE
android.permission.WAKE_LOCK
com.google.android.c2dm.permission.RECEIVE
android.permission.RECEIVE_BOOT_COMPLETED
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
android.permission.READ_PHONE_STATE
android.permission.WRITE_CALENDAR
android.permission.FOREGROUND_SERVICE
android.permission.RECEIVE_BOOT_COMPLETED
com.android.launcher.permission.INSTALL_SHORTCUT
android.permission.INSTALL_SHORTCUT
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.READ_PHONE_STATE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.VIBRATE
android.permission.BLUETOOTH

Receivers

com.fyber.inneractive.sdk.mraid.IAMraidKit

com.fyber.inneractive.sdk.intent.action.REGISTER_KIT

com.fyber.inneractive.sdk.nativead.IANativeKit

com.fyber.inneractive.sdk.intent.action.REGISTER_KIT

com.fyber.inneractive.sdk.video.IAVideoKit

com.fyber.inneractive.sdk.intent.action.REGISTER_KIT

com.google.android.gms.measurement.AppMeasurementInstallReferrerReceiver

com.android.vending.INSTALL_REFERRER

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

atspeter.dev.utils.ReferrReceiver

com.android.vending.INSTALL_REFERRER

Services

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

Resubmissions

Sharing

General

Malware Config

Signatures

Files

Password: infected

com.ltc.peter.shoot.tslgame

atspeter.dev.SPActivity

Activities

atspeter.dev.SPActivity

com.unity3d.player.UnityPlayerActivity

com.saypromo.SPAdActivity

Permissions

Receivers

com.fyber.inneractive.sdk.mraid.IAMraidKit

com.fyber.inneractive.sdk.nativead.IANativeKit

com.fyber.inneractive.sdk.video.IAVideoKit

com.google.android.gms.measurement.AppMeasurementInstallReferrerReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

atspeter.dev.utils.ReferrReceiver

Services

com.google.firebase.messaging.FirebaseMessagingService