Resubmissions

17-10-2022 10:31

221017-mkq21abef7 7

17-10-2022 10:25

221017-mfzhksbfhl 7

General

  • Target

    Phonesky.apk

  • Size

    58.7MB

  • MD5

    2e117f7f0b3b161f59bd63ddcc002c4f

  • SHA1

    f2a872655bb2a6c22ac95e6777a4b82aa5242f88

  • SHA256

    b7a933f0e9f1a45abc9fa359de36a5b9660e4b860f7b4a525d099bd31a599228

  • SHA512

    ce5d028321209a5d3e3ed88e8a5e03a1f63cc731aad62e75298f42f388b143315428cf6b3a96b8a81842fedb5955435a2d72a2b65075853c962cfc0e1d1aa6e0

  • SSDEEP

    393216:CDHrhXIEZt47lqgz0AtEzJdDFzt81Tq6qwQPGwF8QSYb:CFJ06dDQ1G6zJrUb

Score
7/10

Malware Config

Signatures

  • Requests dangerous framework permissions 11 IoCs

Files

  • Phonesky.apk
    .apk android arch:arm64

    com.android.vending

    com.google.android.finsky.setupui.VpaSelectionOptionalStepActivity


Android Permissions

Phonesky.apk

Permissions

android.permission.READ_DEVICE_CONFIG

android.permission.WRITE_DEVICE_CONFIG

com.google.android.finsky.permission.DSE

com.google.android.finsky.permission.DEVELOPER_GROUP_ID_INFO

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.CHANGE_WIFI_STATE

android.permission.BLUETOOTH_SCAN

android.permission.BLUETOOTH_ADVERTISE

android.permission.BLUETOOTH_CONNECT

android.permission.HIDE_NON_SYSTEM_OVERLAY_WINDOWS

android.permission.MANAGE_CLOUDSEARCH

android.permission.SEND_SMS

android.permission.SEND_SMS_NO_CONFIRMATION

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.permission.READ_PHONE_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.READ_CONTACTS

com.android.vending.permission.C2D_MESSAGE

com.android.vending.billing.IN_APP_NOTIFY.permission.C2D_MESSAGE

com.google.android.c2dm.permission.RECEIVE

android.permission.GET_TASKS

android.permission.REAL_GET_TASKS

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.CLEAR_APP_CACHE

android.permission.CHANGE_COMPONENT_ENABLED_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PRIVILEGED_PHONE_STATE

android.permission.CHANGE_NETWORK_STATE

com.google.android.providers.gsf.permission.READ_GSERVICES

com.google.android.providers.gsf.permission.WRITE_GSERVICES

android.permission.ACCESS_DOWNLOAD_MANAGER

android.permission.ACCESS_DOWNLOAD_MANAGER_ADVANCED

android.permission.SEND_DOWNLOAD_COMPLETED_INTENTS

android.permission.INSTALL_PACKAGES

android.permission.DELETE_PACKAGES

android.permission.NFC

com.android.vending.INTENT_VENDING_ONLY

android.permission.RECEIVE_BOOT_COMPLETED

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.STATUS_BAR

com.android.vending.TOS_ACKED

android.permission.WAKE_LOCK

android.permission.ACCESS_WIFI_STATE

android.permission.USE_FINGERPRINT

android.permission.USE_BIOMETRIC

com.google.android.finsky.permission.INSTANT_APP_STATE