Delta_Executor(delta-executor[.]com)[.]zip

General

Target

Delta_Executor(delta-executor.com).zip
Size

122.4MB
MD5

b761f4725588eed4f8965f038c5e6e1e
SHA1

6f5f736f1527455928ab0a8e7c834409c3649865
SHA256

951518787623fea79c3ee310381785082bf08044b24661ecde1bb5d8be8a6797
SHA512

59ce9d6f8bc020ed4593ed82c1245abdbd8eafeee9e63c0169d9056a1bd4a914363b4e17299af4510557cb4d36bcf02f83d3666b5180621ae5a0d0ca42569354
SSDEEP

3145728:mOpjCMjJhDflrWhATQhwyKUM/AEvNkwmi1zGr8/BfAoiE:hpjCMjJ1trWhuXUmNkni8q3

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 4 IoCs

description	ioc
Required to be able to connect to paired Bluetooth devices.	android.permission.BLUETOOTH_CONNECT
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE

Files

Delta_Executor(delta-executor.com).zip
.zip
Delta_Executor(delta-executor.com).apk
.apk android arch:arm

com.roblox.client

com.roblox.client.startup.ActivitySplash

Activities

com.roblox.client.ActivityProtocolLaunch

android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW

com.roblox.client.startup.ActivitySplash

android.intent.action.MAIN

Permissions

android.permission.BLUETOOTH
android.permission.BLUETOOTH_CONNECT
android.permission.VIBRATE
com.android.vending.BILLING
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.READ_CONTACTS
android.permission.FOREGROUND_SERVICE
android.permission.WRITE_EXTERNAL_STORAGE
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
android.permission.READ_EXTERNAL_STORAGE
android.permission.WAKE_LOCK
com.google.android.c2dm.permission.RECEIVE

Receivers

com.roblox.client.signup.multiscreen.SMSBroadcastReceiver

com.google.android.gms.auth.api.phone.SMS_RETRIEVED

com.roblox.client.XAPKUpdateReceiver

android.intent.action.MY_PACKAGE_REPLACED

com.appsflyer.SingleInstallBroadcastReceiver

com.android.vending.INSTALL_REFERRER

com.roblox.client.startup.BootCompletedBroadcastReceiver

android.intent.action.BOOT_COMPLETED

com.google.android.gms.measurement.AppMeasurementInstallReferrerReceiver

com.android.vending.INSTALL_REFERRER

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

Services

com.roblox.client.fcm.RbxFcmListenerService

com.google.firebase.MESSAGING_EVENT

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

com.google.firebase.iid.FirebaseInstanceIdService

com.google.firebase.INSTANCE_ID_EVENT

Sharing

General

Malware Config

Signatures

Files

com.roblox.client

com.roblox.client.startup.ActivitySplash

Activities

com.roblox.client.ActivityProtocolLaunch

com.roblox.client.startup.ActivitySplash

Permissions

Receivers

com.roblox.client.signup.multiscreen.SMSBroadcastReceiver

com.roblox.client.XAPKUpdateReceiver

com.appsflyer.SingleInstallBroadcastReceiver

com.roblox.client.startup.BootCompletedBroadcastReceiver

com.google.android.gms.measurement.AppMeasurementInstallReferrerReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

Services

com.roblox.client.fcm.RbxFcmListenerService

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.iid.FirebaseInstanceIdService