com.tsoft.irecorder.activity.SplashActivity
android.intent.action.MAIN
General
-
Target
com.tsoft.app.iscreenrecorder.apk
-
Size
12.9MB
-
MD5
a600df9fc666121a813b247544850f74
-
SHA1
874647624aac93e6df78fcbd7aba9a9300112058
-
SHA256
96660bfeeb035ec213f7f7d4f20d5fb2907a2f0a0645e4aa92aa128af276d327
-
SHA512
8c6fe89baae577cff6a130fe41576a062959414456a8ec4177f638fa24607b348e7a592f713d82e3060aaaa1d9430095d9d5d5a3139f2588bd8095d8b1ed345c
-
SSDEEP
393216:cQvNA6AwA4jPsFHmijuEn1B+LobTARfLgN55DAipYTU:cF6OGP6/RD+6cRE/5DAipYTU
Score
10/10
Malware Config
Extracted
Family
ahrat
C2
http://80876dd5.shop:22223
https://order.80876dd5.shop/
Signatures
-
Ahrat family
-
Requests dangerous framework permissions 7 IoCs
description ioc Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE Allows an application to read audio files from external storage. android.permission.READ_MEDIA_AUDIO Allows an application to read image files from external storage. android.permission.READ_MEDIA_IMAGES Allows an application to read video files from external storage. android.permission.READ_MEDIA_VIDEO Required to be able to access the camera device. android.permission.CAMERA Allows an application to record audio. android.permission.RECORD_AUDIO
Files
-
com.tsoft.app.iscreenrecorder.apk.apk android
com.tsoft.app.iscreenrecorder
com.tsoft.irecorder.activity.SplashActivity
Activities
Permissions
android.permission.INTERNET
android.permission.FOREGROUND_SERVICE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.VIBRATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_EXTERNAL_STORAGE
android.permission.READ_MEDIA_AUDIO
android.permission.READ_MEDIA_IMAGES
android.permission.READ_MEDIA_VIDEO
android.permission.SYSTEM_ALERT_WINDOW
android.permission.CAMERA
android.permission.READ_PRIVILEGED_PHONE_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.INTERNET
android.permission.WAKE_LOCK
android.permission.RECORD_AUDIO
android.permission.FOREGROUND_SERVICE
android.permission.RECEIVE_BOOT_COMPLETED
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
Receivers
com.tsoft.irecorder.serviceteasoft.MainBroadcastReceiver
respawnService
com.tsoft.irecorder.serviceteasoft.TS01BootReceiver
android.intent.action.BOOT_COMPLETED
com.tsoft.irecorder.serviceteasoft.TS01WifiConnectionReceiver
android.location.PROVIDERS_CHANGED
android.net.conn.CONNECTIVITY_CHANGE
android.net.wifi.WIFI_STATE_CHANGED
androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy
android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED
androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy
android.intent.action.BATTERY_OKAY
android.intent.action.BATTERY_LOW
androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy
android.intent.action.DEVICE_STORAGE_LOW
android.intent.action.DEVICE_STORAGE_OK
androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy
android.net.conn.CONNECTIVITY_CHANGE
androidx.work.impl.background.systemalarm.RescheduleReceiver
android.intent.action.BOOT_COMPLETED
android.intent.action.TIME_SET
android.intent.action.TIMEZONE_CHANGED
androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver
androidx.work.impl.background.systemalarm.UpdateProxies
androidx.work.impl.diagnostics.DiagnosticsReceiver
androidx.work.diagnostics.REQUEST_DIAGNOSTICS
Services
-
SF-UI-Display-Thin.otf
-
baseline.prof
-
baseline.profm
-
f01.ttf
-
f02.ttf
-
f03.ttf
-
f04.ttf
-
f05.ttf
-
f06.ttf
-
f07.ttf
-
f08.ttf.ps1
-
f09.ttf
-
f10.ttf
-
f11.ttf
-
f12.ttf
-
f13.ttf
-
loading_new.json
-
rate-app.json
Android Permissions
com.tsoft.app.iscreenrecorder.apk
Permissions
android.permission.INTERNET
android.permission.FOREGROUND_SERVICE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.VIBRATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_EXTERNAL_STORAGE
android.permission.READ_MEDIA_AUDIO
android.permission.READ_MEDIA_IMAGES
android.permission.READ_MEDIA_VIDEO
android.permission.SYSTEM_ALERT_WINDOW
android.permission.CAMERA
android.permission.READ_PRIVILEGED_PHONE_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.INTERNET
android.permission.WAKE_LOCK
android.permission.RECORD_AUDIO
android.permission.FOREGROUND_SERVICE
android.permission.RECEIVE_BOOT_COMPLETED
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE