8216296124[.]zip | Triage

Sharing

Reason

unknown chunk type: 29554

General

Target

8216296124.zip
Size

14.2MB
MD5

653ee122709e45a162a2e9805d446a2e
SHA1

2f16d9e14c79d7e15fcb7204fceda2ce163802ec
SHA256

46f5119142f8a6896e23f71e4430bc91334c82007efa8e63290547c9a7ed95e7
SHA512

2a5c8d478010cbd03ccc86dd6e67dc703e8bdfb12ddaa91ec745fefcb1bd2b37d082db899fb4623152e09e7f2512525b3110137a43b179a7dea0afb0fc382e44
SSDEEP

393216:C2SG9uiEvMSRF3eSia0ZGUDq9HDhSniav1:ZlEvMSFhMGUDqPY

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 6 IoCs

description	ioc
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access location in the background.	android.permission.ACCESS_BACKGROUND_LOCATION

Files

8216296124.zip
.zip

Password: infected
78c24c849e094cf85d56d2f0bf6d3679652757982d17830e6477b04fd98494bd
.apk android arch:arm arch:x86

ix.flame.illuminate

.MainActivity

Activities

.MainActivity

android.intent.action.MAIN

Permissions

android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.CAMERA
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.CONTROL_VPN
android.permission.CREATE_USERS
android.permission.DELETE_CACHE_FILES
android.permission.DELETE_PACKAGES
android.permission.GRANT_RUNTIME_PERMISSIONS
android.permission.GRANT_RUNTIME_PERMISSIONS_TO_TELEPHONY_DEFAULTS
android.permission.HIDE_NON_SYSTEM_OVERLAY_WINDOWS
android.permission.INTERNAL_SYSTEM_WINDOW
android.permission.SYSTEM_ALERT_WINDOW
android.permission.INSTALL_PACKAGES
android.permission.INSTALL_PACKAGE_UPDATES
android.permission.REQUEST_INSTALL_PACKAGES
android.permission.BIND_CELL_BROADCAST_SERVICE
android.permission.INSTALL_LOCATION_PROVIDER
android.permission.CONTROL_LOCATION_UPDATES
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_BACKGROUND_LOCATION
android.permission.READ_OEM_UNLOCK_STATE
android.permission.UPDATE_LOCK
android.permission.WAKE_LOCK
android.permission.ACCESS_MOCK_LOCATION
ACCESS_SUPERUSER

Services