General

  • Target

    dump.apk

  • Size

    6.3MB

  • MD5

    056d831fb3f4423ea395c02d68841887

  • SHA1

    7e7c3a6eaf542db371ca38a1ad9d6728b5d13daf

  • SHA256

    724a56172f40177da76242ee169ac336b63d5df85889368d1531f593b658606b

  • SHA512

    fe52d68fc2caacd72b7d4f5e808f34be84657b967b329446cf2e4f3c22fdeb9ca3dda058c3276cf1773fa937bf380da93688f93c07ce4c238a1c9694647c88d2

  • SSDEEP

    98304:6tObNxGuckjHfKQ2OXa1m5l3AMZTn7KKGDaY/2gZ6gjFAYJErRKmkPS:6tObNZKQ2OK1m5l37Zr7KKGegqW8QzS

Score
10/10

Malware Config

Extracted

Family

sova

C2

http://193.42.32.84/

http://193.42.32.87/

Signatures

  • SOVA_v5 payload 1 IoCs
  • Sova family
  • Requests dangerous framework permissions 13 IoCs

Files

  • dump.apk
    .apk android

    com.help.marine

    com.tapston.burgerking.ui.LauncherActivity


Android Permissions

dump.apk

Permissions

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.SEND_SMS

android.permission.WAKE_LOCK

android.permission.READ_CONTACTS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.RECEIVE_LAUNCH_BROADCASTS

android.permission.GET_PACKAGE_SIZE

android.permission.READ_EXTERNAL_STORAGE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.GET_TASKS

android.permission.QUERY_ALL_PACKAGES

android.permission.BLUETOOTH

com.meizu.flyme.permission.PUSH

android.permission.INSTALL_PACKAGES

android.permission.GET_ACCOUNTS

com.huawei.appmarket.service.commondata.permission.GET_COMMON_DATA

android.permission.USE_FINGERPRINT

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.QUICKBOOT_POWERON

android.permission.RECEIVE_SMS

com.google.android.gms.permission.ACTIVITY_RECOGNITION

android.permission.ACCESS_CONTENT_PROVIDERS_EXTERNALLY

android.permission.ACCESS_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.READ_PHONE_NUMBERS

android.permission.CHANGE_NETWORK_STATE

com.moutai.mall.permission.PUSH_PROVIDER

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.CLEAR_APP_CACHE

android.permission.READ_EXTERNAL_STORAGE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.VIBRATE

android.permission.ACTION_MANAGE_OVERLAY_PERMISSION

android.permission.REORDER_TASKS

android.permission.CALL_PHONE

android.permission.QUERY_ALL_PACKAGES

android.permission.FOREGROUND_SERVICE

android.permission.REQUEST_DELETE_PACKAGES

com.moutai.mall.permission.PROCESS_PUSH_MSG

android.permission.WRITE_CONTACTS

android.permission.DISABLE_KEYGUARD

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_SMS

android.permission.INTERNET

android.permission.CHANGE_WIFI_STATE