Lycan UnaVidaPlay[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Lycan UnaVidaPlay.zip
Size

3.1MB
MD5

5420cc10a13338c1a829feaf2c775557
SHA1

9c7dd3001aa92aeceefdbbb9ed1d58361cbf4a12
SHA256

92e1d24a6e19b44361278bf94658923673487c26566530b17ac1c4ebafa1f75a
SHA512

9d53e4127813c53531bd92542d962fbd01916fb0dabc5d4eb7a628a85f4175a4a09c4569951f2e54bbc5b9a236ee834abdc0529fbf72bd867344d046b6d29d46
SSDEEP

98304:k3llFUcFj7zTl/7BRC8Im6SPImK0QmHc/O:k39USHzp/tRem6SQYF

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 2 IoCs

description	ioc
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE

Files

Lycan UnaVidaPlay.zip
.zip
Lycan UnaVidaPlay.apk
.apk android

com.splashtop.streamer.addon.knox

com.ccswe.appmanager.ui.deviceadmin.DeviceAdminActivity

Activities

com.ccswe.appmanager.ui.files.selector.FileSelectorActivity

android.intent.action.GET_CONTENT

com.ccswe.appmanager.ui.widget.configure.ConfigureWidgetActivity

android.appwidget.action.APPWIDGET_CONFIGURE

Permissions

android.permission.REQUEST_DELETE_PACKAGES
android.permission.sec.MDM_APP_MGMT
com.android.vending.CHECK_LICENSE
com.samsung.android.knox.permission.KNOX_APP_MGMT
android.permission.ACCESS_NETWORK_STATE
android.permission.FOREGROUND_SERVICE
android.permission.INЕTANET
android.permission.READ_EXTERNAL_STORAGE
android.permission.USE_BIOMETRIC
android.permission.USE_FINGERPRINT
android.permission.WAKE_LOCK
android.permission.WRITE_EXTERNAL_STORAGE
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

Receivers

com.ccswe.appmanager.receivers.AdminReceiver

android.app.action.DEVICE_ADMIN_ENABLED
android.app.action.DEVICE_ADMIN_DISABLE_REQUESTED
android.app.action.DEVICE_ADMIN_DISABLED

com.ccswe.appmanager.receivers.ApplicationsWidgetProvider

android.appwidget.action.APPWIDGET_UPDATE

com.ccswe.appmanager.receivers.LocalePluginSettingReceiver

com.twofortyfouram.locale.intent.action.FIRE_SETTING

Services
UnaVidaPlay.jpg
.jpg