[.]trashed-1688821088-Skype[.]apk

Sharing

Copy URL

Twitter E-mail

General

Target

.trashed-1688821088-Skype.apk
Size

48.6MB
MD5

1da9e8b2111b770131ef94ee824aa37e
SHA1

9020c652ac7d6a7834ab884a2fd05b6de5666896
SHA256

c6bdb19cce73130173c6eff7961f220359c6006dd9936111eeae25975c26773c
SHA512

42c8cc5bbbaf3c24f7795a6aff229e96a136ddfd27bce058da912e5b4687f7ca4d006eaa4ada29cee9cf1bd8ab28b7e47927f61e260b540a20fe0b05fd9c784a
SSDEEP

786432:tl7qUTKEwOCVqdsE1rNHDgUGk3KKiS7A4H0mX2UBcYLoQF/E5vlgKKud:zWHQdXj6oKHSaKNLPXMd

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 12 IoCs

Processes:

description	ioc
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS

Files

.trashed-1688821088-Skype.apk
.apk android arch:arm

com.skype.raider

com.skype4life.MainActivity

Activities

com.skype4life.MainActivity

android.intent.action.MAIN
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.CALL
android.intent.action.DIAL
android.intent.action.VIEW
android.intent.action.SEND
android.intent.action.SEND_MULTIPLE
android.intent.action.VIEW

com.microsoft.identity.client.BrowserTabActivity

android.intent.action.VIEW

Permissions

android.permission.INTERNET
android.permission.CHANGE_NETWORK_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_COARSE_LOCATION
android.permission.CAMERA
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_CONTACTS
android.permission.READ_PROFILE
android.permission.READ_PHONE_STATE
android.permission.WAKE_LOCK
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.RECORD_AUDIO
android.permission.VIBRATE
android.permission.BLUETOOTH
com.skype.raider.permission.C2D_MESSAGE
com.google.android.c2dm.permission.RECEIVE
android.permission.RECEIVE_BOOT_COMPLETED
com.google.android.gms.permission.ACTIVITY_RECOGNITION
android.permission.AUTHENTICATE_ACCOUNTS
android.permission.BROADCAST_STICKY
android.permission.CALL_PHONE
android.permission.DISABLE_KEYGUARD
android.permission.GET_ACCOUNTS
android.permission.GET_TASKS
android.permission.MANAGE_ACCOUNTS
android.permission.READ_SYNC_SETTINGS
android.permission.READ_SYNC_STATS
android.permission.USE_CREDENTIALS
android.permission.WRITE_CONTACTS
android.permission.WRITE_SETTINGS
android.permission.WRITE_SYNC_SETTINGS
com.anddoes.launcher.permission.UPDATE_COUNT
com.htc.launcher.permission.READ_SETTINGS
com.htc.launcher.permission.UPDATE_SHORTCUT
com.majeur.launcher.permission.UPDATE_BADGE
com.sec.android.provider.badge.permission.READ
com.sec.android.provider.badge.permission.WRITE
com.sonyericsson.home.permission.BROADCAST_BADGE
android.permission.FOREGROUND_SERVICE
android.permission.USE_FULL_SCREEN_INTENT
android.permission.SYSTEM_ALERT_WINDOW
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS
com.amazon.device.messaging.permission.RECEIVE
com.skype.raider.permission.RECEIVE_ADM_MESSAGE
com.skype.raider.permission.ACCOUNT
android.permission.READ_EXTERNAL_STORAGE
android.permission.DOWNLOAD_WITHOUT_NOTIFICATION
com.huawei.android.launcher.permission.CHANGE_BADGE
android.permission.USE_FINGERPRINT
android.permission.POST_NOTIFICATIONS
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
android.permission.RECORD_VIDEO
com.android.vending.BILLING
android.permission.NFC

Receivers

com.skype.campaignreceiver.CampaignReceiver

com.android.vending.INSTALL_REFERRER

com.skype.device.PackageReplacedListener

android.intent.action.MY_PACKAGE_REPLACED

com.microsoft.react.push.notificationprocessing.PushReceiver

android.intent.action.MY_PACKAGE_REPLACED
com.microsoft.react.push.PushConstants.ACTION_REGISTER
com.microsoft.react.push.PushConstants.ACTION_UNREGISTER
com.microsoft.react.push.PushConstants.ACTION_MESSAGE_RECEIVED
DeleteNotificationActionReceived
LocalNotificationActionReceived
LocalNotificationSelected

com.microsoft.react.push.adm.ADMPushMessageReceiver

com.amazon.device.messaging.intent.REGISTRATION
com.amazon.device.messaging.intent.RECEIVE

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY
android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW
android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.TIME_SET
android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.work.diagnostics.REQUEST_DIAGNOSTICS

Services

com.skype4life.syncadapter.AccountService

android.content.SyncAdapter
android.accounts.AccountAuthenticator

com.microsoft.react.push.gcm.MessageListenerService

com.google.firebase.MESSAGING_EVENT

androidx.sharetarget.ChooserTargetServiceCompat

android.service.chooser.ChooserTargetService

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

com.microsoft.tokenshare.TokenSharingService

com.microsoft.tokenshare.TokenSharingService
Beer.json
Clap.json
Dropthemic.json
Facepalm.json
Fire.json
Heart.json
Highfive.json
ICBC.json
ICBC_portrait.json
Laugh.json
LocalizedStrings_ar.json
LocalizedStrings_bg.json
LocalizedStrings_ca.json
LocalizedStrings_cs.json
LocalizedStrings_da.json
LocalizedStrings_de.json
LocalizedStrings_el.json
LocalizedStrings_en-GB.json
LocalizedStrings_en.json
LocalizedStrings_es-MX.json
LocalizedStrings_es.json
LocalizedStrings_et.json
LocalizedStrings_fi.json
LocalizedStrings_fr-CA.json
LocalizedStrings_fr.json
LocalizedStrings_he.json
LocalizedStrings_hi.json
LocalizedStrings_hr.json
LocalizedStrings_hu.json
LocalizedStrings_id.json
LocalizedStrings_it.json
LocalizedStrings_ja.json
LocalizedStrings_ko.json
LocalizedStrings_lt.json
LocalizedStrings_lv.json
LocalizedStrings_ms.json
LocalizedStrings_nb.json
LocalizedStrings_nl.json
LocalizedStrings_pl.json
LocalizedStrings_pt-BR.json
LocalizedStrings_pt.json
LocalizedStrings_ro.json
LocalizedStrings_ru.json
LocalizedStrings_sk.json
LocalizedStrings_sl.json
LocalizedStrings_sr-Latn.json
LocalizedStrings_sv.json
LocalizedStrings_th.json
LocalizedStrings_tr.json
LocalizedStrings_uk.json
LocalizedStrings_vi.json
LocalizedStrings_zh-CN.json
LocalizedStrings_zh-TW.json
Mistletoe.json
Penguin.json
Rudolfsurprise.json
Sad.json
Sarcastic.json
SkypeAssets-Light.ttf
Snowflake.json
Surprised.json
ThirdPartyNoticesAndroid.json
Type4.png
.png
Type6.png
.png
Type9.png
.png
Xmascwl.json
Xmasyes.json
Yes.json
accessibility_strings.xml
api_key.txt
capture_photo.json
capture_recording_progress_60_seconds.json
determinent0-33.json
determinent33-66.json
determinent33.json
determinent66-100.json
determinent66.json
indeterminate.json
indeterminate40.json
indeterminate80.json
indeterminent.json
index.android.bundle
splash_loader.json
splash_loader_next.json
strings.xml
sync_addressbook.json
ts_configuration.jwt

.trashed-1688821088-Skype.apk

Permissions

android.permission.INTERNET

android.permission.CHANGE_NETWORK_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.CAMERA

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_CONTACTS

android.permission.READ_PROFILE

android.permission.READ_PHONE_STATE

android.permission.WAKE_LOCK

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.RECORD_AUDIO

android.permission.VIBRATE

android.permission.BLUETOOTH

com.skype.raider.permission.C2D_MESSAGE

com.google.android.c2dm.permission.RECEIVE

android.permission.RECEIVE_BOOT_COMPLETED

com.google.android.gms.permission.ACTIVITY_RECOGNITION

android.permission.AUTHENTICATE_ACCOUNTS

android.permission.BROADCAST_STICKY

android.permission.CALL_PHONE

android.permission.DISABLE_KEYGUARD

android.permission.GET_ACCOUNTS

android.permission.GET_TASKS

android.permission.MANAGE_ACCOUNTS

android.permission.READ_SYNC_SETTINGS

android.permission.READ_SYNC_STATS

android.permission.USE_CREDENTIALS

android.permission.WRITE_CONTACTS

android.permission.WRITE_SETTINGS

android.permission.WRITE_SYNC_SETTINGS

com.anddoes.launcher.permission.UPDATE_COUNT

com.htc.launcher.permission.READ_SETTINGS

com.htc.launcher.permission.UPDATE_SHORTCUT

com.majeur.launcher.permission.UPDATE_BADGE

com.sec.android.provider.badge.permission.READ

com.sec.android.provider.badge.permission.WRITE

com.sonyericsson.home.permission.BROADCAST_BADGE

android.permission.FOREGROUND_SERVICE

android.permission.USE_FULL_SCREEN_INTENT

android.permission.SYSTEM_ALERT_WINDOW

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

com.amazon.device.messaging.permission.RECEIVE

com.skype.raider.permission.RECEIVE_ADM_MESSAGE

com.skype.raider.permission.ACCOUNT

android.permission.READ_EXTERNAL_STORAGE

android.permission.DOWNLOAD_WITHOUT_NOTIFICATION

Sharing

General

Malware Config

Signatures

Files

com.skype.raider

com.skype4life.MainActivity

Activities

com.skype4life.MainActivity

com.microsoft.identity.client.BrowserTabActivity

Permissions

Receivers

com.skype.campaignreceiver.CampaignReceiver

com.skype.device.PackageReplacedListener

com.microsoft.react.push.notificationprocessing.PushReceiver

com.microsoft.react.push.adm.ADMPushMessageReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.diagnostics.DiagnosticsReceiver

Services

com.skype4life.syncadapter.AccountService

com.microsoft.react.push.gcm.MessageListenerService

androidx.sharetarget.ChooserTargetServiceCompat

com.google.firebase.messaging.FirebaseMessagingService

com.microsoft.tokenshare.TokenSharingService

Android Permissions

.trashed-1688821088-Skype.apk