Resubmissions

21/10/2022, 00:32

221021-avy45sdbh8 7

21/10/2022, 00:29

221021-as16qadbc6 7

General

  • Target

    Stellarium Plus v1.9.3 Licensed arm64-v8a.apk

  • Size

    78.9MB

  • MD5

    13147a54c633b63f0f409efbf6c40c80

  • SHA1

    fd1b1b3bb6fa88d465ca44f7383c889e3a410a3c

  • SHA256

    f66c4f5736dd91973f80dca94e8c8b7faef7f1b37dea9a5e0a5de61892cd4446

  • SHA512

    535607b3587cfc8ebd8b5b662bdaab655b29154b3a1770550112082e079537693d947cb66c70b2d15cc26ba89a7ce1b838cfbe5a1e4fff13b8454c077410f0fc

  • SSDEEP

    1572864:KhOKQzsM81pY1bV0gIDMLicFLLdtvXrRYfuR48e2wim7u+NHaOVkFPVQo6:lfzJUp2bV0gIy3h748O1NHaOW1v6

Score
7/10

Malware Config

Signatures

  • Requests dangerous framework permissions 2 IoCs

Files

  • Stellarium Plus v1.9.3 Licensed arm64-v8a.apk
    .apk android arch:arm64

    com.noctuasoftware.stellarium_plus

    com.noctuasoftware.stellarium_plus.Stellarium


Android Permissions

Stellarium Plus v1.9.3 Licensed arm64-v8a.apk

Permissions

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_FINE_LOCATION

com.android.vending.CHECK_LICENSE

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN