Static task
static1
Behavioral task
behavioral1
Sample
4e78e543ce69845df20633df07e709b811a7e4585b2c148f8543d6ad5dcceae9.apk
Resource
android-x86-arm-20220823-en
Behavioral task
behavioral2
Sample
4e78e543ce69845df20633df07e709b811a7e4585b2c148f8543d6ad5dcceae9.apk
Resource
android-x64-20220823-en
Behavioral task
behavioral3
Sample
4e78e543ce69845df20633df07e709b811a7e4585b2c148f8543d6ad5dcceae9.apk
Resource
android-x64-arm64-20220823-en
General
-
Target
4e78e543ce69845df20633df07e709b811a7e4585b2c148f8543d6ad5dcceae9
-
Size
10MB
-
MD5
a53477ce84afba80f30b3d2b16880e09
-
SHA1
679bcb3e1c25a7ff776b711675825f65e61f216f
-
SHA256
4e78e543ce69845df20633df07e709b811a7e4585b2c148f8543d6ad5dcceae9
-
SHA512
bf1bbbf99cc42821bd38d1fdccf338838a3e648e309de22e85747ba375446efcbcd378ff8c9486ef89f98b1a4849e86d82cdcc4bce3ee5a307cc8a4d73dc361f
-
SSDEEP
196608:MI6udiB6P7ML2R1H0x4ZKULbuz55ykgXEIQg5HQUuq7be86EePBvUlVi/:xX+6P7MLQWuvavyDfhuq7bR6EePBvN
Malware Config
Signatures
-
Requests dangerous framework permissions 13 IoCs
Processes:
description ioc Allows an app to access precise location. android.permission.ACCESS_FINE_LOCATION Allows an app to access location in the background. android.permission.ACCESS_BACKGROUND_LOCATION Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether. android.permission.PROCESS_OUTGOING_CALLS Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call. android.permission.CALL_PHONE Allows an application to record audio. android.permission.RECORD_AUDIO Allows an application to read the user's contacts data. android.permission.READ_CONTACTS Allows an application to receive SMS messages. android.permission.RECEIVE_SMS Allows an application to read SMS messages. android.permission.READ_SMS Allows an application to send SMS messages. android.permission.SEND_SMS Required to be able to access the camera device. android.permission.CAMERA
Files
-
4e78e543ce69845df20633df07e709b811a7e4585b2c148f8543d6ad5dcceae9.apk android
Android Manifest
4e78e543ce69845df20633df07e709b811a7e4585b2c148f8543d6ad5dcceae9
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_BACKGROUND_LOCATION
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_EXTERNAL_STORAGE
android.permission.PROCESS_OUTGOING_CALLS
android.permission.READ_PHONE_STATE
android.permission.CALL_PHONE
android.permission.CAPTURE_AUDIO_OUTPUT
android.permission.RECORD_AUDIO
android.permission.READ_CONTACTS
android.permission.RECEIVE_SMS
android.permission.READ_SMS
android.permission.SEND_SMS
android.permission.WRITE_SMS
android.permission.CAMERA
android.permission.SYSTEM_ALERT_WINDOW
android.permission.ACCESS_NETWORK_STATE
android.permission.INTERNET
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.KILL_BACKGROUND_PROCESSES
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS
android.permission.PACKAGE_USAGE_STATS
android.permission.VIBRATE
android.permission.WAKE_LOCK
com.google.android.gms.permission.AD_ID
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
com.my.spy.app.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION