Overview

overview

10

Static

static

10

8d6e142a9b...7b.apk

android_x86

8

Resubmissions

16-06-2022 16:39

220616-t6ez7aafc9 10

10-06-2022 11:23

220610-ng7e9aaebq 8

21-01-2022 23:31

220121-3hqw8adac2 7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8d6e142a9b2c44b5fd43326af05ac40cbbe8b74ec05803086894907c0e243a7b

  • Size

    6.2MB

  • MD5

    73e532519bcab9adc579bac24d889895

  • SHA1

    8108bcda08173ff6ee82a7b1ea1cd781364493d8

  • SHA256

    8d6e142a9b2c44b5fd43326af05ac40cbbe8b74ec05803086894907c0e243a7b

  • SHA512

    9352ebdfee46ced1bee3054688aee3702e0a03a83207e0d8f50bfefc54781bcd902c05699a27b350056b19f55001235441d59da69586cc008a9a92e29e4a7f25

  • SSDEEP

    98304:7NNYtstaIGtASqelJjhE2JE5RS5356GxRuMrq4461WSMleD5Wr7N40wdyEVrl6iH:7ggtWrdE505pPuIqx61WJlekN7wdN

Score
10/10
abstractemu

Malware Config

Signatures

  • AbstractEmu is a rooting malware first seen in October 2021. 1 IoCs
  • Abstractemu family
    abstractemu
  • Requests dangerous framework permissions 7 IoCs

Files

  • 8d6e142a9b2c44b5fd43326af05ac40cbbe8b74ec05803086894907c0e243a7b
    .apk android arch:arm64 arch:arm

    com.nightlight.app

    com.nightlight.app.MainActivity


Android Permissions

8d6e142a9b2c44b5fd43326af05ac40cbbe8b74ec05803086894907c0e243a7b

Permissions

android.permission.SYSTEM_ALERT_WINDOW

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.GET_ACCOUNTS

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.BLUETOOTH

android.permission.READ_PHONE_STATE

android.permission.WAKE_LOCK

android.permission.READ_CONTACTS

android.permission.INTERNET

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

android.permission.ACTION_MANAGE_OVERLAY_PERMISSION

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.VIBRATE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

com.google.android.c2dm.permission.RECEIVE