Resubmissions

21/03/2023, 04:20

230321-eyhc1sag4w 7

General

  • Target

    XODO PDF READER & EDITOR [ARM7] V8.3.5 [PRO] [MOD EXTRA].apk

  • Size

    29.3MB

  • MD5

    a251b38199fc8fafe650c251b9eaa9d5

  • SHA1

    254a61c6a7674859d2272db438fd36ad6000f65c

  • SHA256

    9d4acae415c7a59c760613c5b340d870e09600773a1f0e1dc30ca1cc2c9aa3ee

  • SHA512

    e4dab2b64fdfe84017082ccce0ba8f9cd917ef5211cdfe396c893913f9fa6ce6b3e5d4ca4e9072543079b6ca9849738063b285d9cae6acd0b747fdaf6d1f0488

  • SSDEEP

    786432:6XACMRnLtMavgGxa5HsQc5La2ws6C9NwEx4:mAZpxvgGxa5rc5La7DCq

Score
7/10

Malware Config

Signatures

  • Requests dangerous framework permissions 3 IoCs

Files

  • XODO PDF READER & EDITOR [ARM7] V8.3.5 [PRO] [MOD EXTRA].apk
    .apk android arch:arm

    com.xodo.pdf.reader

    viewer.CompleteReaderMainActivity


Android Permissions

XODO PDF READER & EDITOR [ARM7] V8.3.5 [PRO] [MOD EXTRA].apk

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.VIBRATE

android.permission.WAKE_LOCK

android.permission.RECORD_AUDIO

android.permission.MANAGE_EXTERNAL_STORAGE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

android.permission.POST_NOTIFICATIONS