General

  • Target

    SharkBot (4).apk

  • Size

    13.5MB

  • MD5

    fbbce12a67330ab04ae6f774e71a8f24

  • SHA1

    54334b07761041f00953cb0048a5b1ef96b6fdc1

  • SHA256

    7f55dddcfad05403f71580ec2e5acafdc8c9555e72f724eb1f9e37bf09b8cc0c

  • SHA512

    e1dfe3a9c023290de819aa93e2835cca1acaeada3959c99efce2eac4cea8e734e7ce6aaf019002c49d31d1ea1215c753304e7ce8da383e5243681953d0017c5d

  • SSDEEP

    393216:BH5macX7X52NWdXJq2TNhMfw6zpMrfum7H:BZqgY5b2qH

Score
10/10

Malware Config

Extracted

Family

sharkbot

C2

http://statscodicefiscale.xyz/stats/

Signatures

  • Sharkbot family
  • Requests dangerous framework permissions 3 IoCs

Files

  • SharkBot (4).apk
    .apk android

    com.pagnotto28.sellsourcecode.supercleaner

    com.pagnotto28.sellsourcecode.supercleaner.screen.main.MainActivity


Android Permissions

SharkBot (4).apk

Permissions

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.CHANGE_WIFI_STATE

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.FOREFGROUND_SERVICE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.WRITE_SYNC_SETTINGS

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.REQUEST_DELETE_PACKAGES

android.permission.WAKE_LOCK

android.permission.GET_PACKAGE_SIZE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.QUICKBOOT_POWERON

android.permission.CLEAR_APP_CACHE

android.permission.WRITE_SETTINGS

android.permission.INTERNET

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.GET_TASKS

android.permission.PACKAGE_USAGE_STATS

android.permission.FOREGROUND_SERVICE

android.permission.CAMERA

android.permission.USE_FINGERPRINT

android.permission.ACCESS_WIFI_STATE

android.permission.RECEIVE_USER_PRESENT

android.permission.CHANGE_NETWORK_STATE

android.permission.SET_WALLPAPER

android.permission.VIBRATE

android.permission.QUERY_ALL_PACKAGES

android.permission.ACCESS_NETWORK_STATE