Resubmissions

11-07-2023 11:42

230711-nt1s8sgg52 7

11-07-2023 11:40

230711-ns7v6agg43 7

11-07-2023 11:39

230711-nslypahh3s 7

General

  • Target

    flex_v2.2.492_arm64.apk

  • Size

    56.2MB

  • MD5

    8c78edec8618d0bc51945fed70661e53

  • SHA1

    eac3ee127e20da8e4b1fcceb9b4666d1ea465f24

  • SHA256

    6b096ffe84a49a76ce371bb4591722e8da316bee9f97493f619d8bd23ca57c72

  • SHA512

    248729bf8ffeff7cd9b1ec6f3043e0137abaedc8ba7e0e4ba22d1cbc64cb0d291834822a2910a53a4575c4438d4b5d9d133d314f9ce9407ce081efbd48ce67cf

  • SSDEEP

    1572864:jyV9tPpuUUW5SiRA4TaIaHcu7LgGZN7VQaX:Oa/e6hH7kyKaX

Score
7/10

Malware Config

Signatures

  • Requests dangerous framework permissions 9 IoCs

Files

  • flex_v2.2.492_arm64.apk
    .apk android arch:arm64

    com.abb.freeathomeflex

    com.abb.utils.ExtendedQtActivity


  • android_rcc_bundle.rcc
    .js
  • baseline.prof
  • widgets_de.fhm
  • widgets_en.fhm

Android Permissions

flex_v2.2.492_arm64.apk

Permissions

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_NETWORK_STATE

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.DOWNLOAD_WITHOUT_NOTIFICATION

android.permission.INTERNET

android.permission.SYSTEM_ALERT_WINDOW

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

android.permission.USE_BIOMETRIC

android.permission.USE_FINGERPRINT

android.permission.ACCESS_BACKGROUND_LOCATION

android.permission.ACCESS_WIFI_STATE

android.permission.BLUETOOTH_SCAN

android.permission.BLUETOOTH_CONNECT

android.permission.CAMERA

android.permission.VIBRATE

android.permission.INTERNET

android.permission.RECORD_AUDIO

android.permission.ACCESS_NETWORK_STATE

android.permission.WAKE_LOCK

android.permission.CHANGE_WIFI_MULTICAST_STATE

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.USE_FULL_SCREEN_INTENT

android.permission.MANAGE_OWN_CALLS

com.abb.freeathomeflex.permission.WIDGET_SERVICE

com.abb.freeathomeflex.permission.SCHEDULED_NOTIFICATION

com.google.android.c2dm.permission.RECEIVE

android.permission.POST_NOTIFICATIONS