General

  • Target

    base.apk

  • Size

    6.8MB

  • MD5

    9dd4eb011bafac6e73a907540d322d3b

  • SHA1

    3aa6c192286519c7e141d3160aac75737e993577

  • SHA256

    6d10f77b6b77d58345c5feb8fb9bd7d94ae470282ab899a56fd5cb8ab1696312

  • SHA512

    40f2be3a7fc656e471cfe43a5a4622ba6b289aaf415d9f13971762cf8402eaadd941a486569929ccc0b6260dd21ede94f21ab384fed68199d7a0d59220e82652

  • SSDEEP

    98304:M/8jL2/hXD7jVcGciQ3loKY3xQjQQESkXFnzrd2sBhFGnWZrkFHPFJWJhYDjJ2cW:tfwvNGUBeQQUXFzrdBt6J9JShxcW

Score
10/10

Malware Config

Signatures

  • PixPirate payload 1 IoCs
  • Pixpirate family
  • Requests dangerous framework permissions 5 IoCs

Files

  • base.apk
    .apk android arch:arm64 arch:arm arch:mips arch:x86

    com.cross.July

    com.stardust.autojs.execution.ScriptExecuteActivity


Android Permissions

base.apk

Permissions

android.permission.INTERNET

android.permission.QUERY_ALL_PACKAGES

android.permission.FOREGROUND_SERVICE

android.permission.USE_FULL_SCREEN_INTENT

android.permission.WAKE_LOCK

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.REQUEST_DELETE_PACKAGES

android.permission.INSTALL_PACKAGES

android.permission.READ_INSTALL_SESSIONS

android.permission.ACCESS_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.VIBRATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.READ_PHONE_NUMBERS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.READ_SYNC_SETTINGS

android.permission.AUTHENTICATE_ACCOUNTS

android.permission.WRITE_SYNC_SETTINGS

android.permission.SYSTEM_ALERT_WINDOW

com.google.android.gms.permission.AD_ID