app-debug[.]apk | Triage

Sharing

Copy URL Twitter E-mail

General

Target

app-debug.apk
Size

15.8MB
MD5

83ac1568e0e40f2df2ee2d66341217e2
SHA1

a73402a4f62492294b65e99d81cc0625c5adc111
SHA256

1e0ceb8b254e45c6813758d12082b5c8a01b74a74c4d49d9a2cbedf1c8635dbb
SHA512

e383e6b1c2ee5ffcfcc158a4d4e6a57c44ee48c33393b09874c8d329b11e35c0f2c7b312c259f6b4a1f6f7cba3cb4cee20261fefb5c18a0525552dd8837e3b16
SSDEEP

98304:AvPBPQ7u2l+SU9BeblE831Qjri0/K62s9AnRIjzwSmt:A9QVlZ+i31gxfwSmt

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 2 IoCs

description	ioc
Allows read access to the device's phone number(s).	android.permission.READ_PHONE_NUMBERS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE

Files

app-debug.apk
.apk android

com.ptsecurity.check

com.ptsecurity.check.MainActivity

Activities

com.ptsecurity.check.MainActivity

android.intent.action.MAIN

Permissions

android.permission.READ_PHONE_NUMBERS
android.permission.READ_PHONE_STATE
android.permission.READ_PRIVILEGED_PHONE_STATE
android.permission.BIND_ACCESSIBILITY_SERVICE

Receivers

androidx.profileinstaller.ProfileInstallReceiver

androidx.profileinstaller.action.INSTALL_PROFILE
androidx.profileinstaller.action.SKIP_FILE

Services

com.ptsecurity.check.MySuperService

android.accessibilityservice.AccessibilityService

Android Permissions

app-debug.apk

Permissions

android.permission.READ_PHONE_NUMBERS

android.permission.READ_PHONE_STATE

android.permission.READ_PRIVILEGED_PHONE_STATE

android.permission.BIND_ACCESSIBILITY_SERVICE