Resubmissions

17/07/2023, 23:07

230717-24gp1afh5y 7

17/07/2023, 23:04

230717-22qvwsfb57 7

General

  • Target

    protohax-1.4.0-1.apk

  • Size

    10.5MB

  • MD5

    e8db262dee47f64e9d99b10939fa1bb0

  • SHA1

    02abb17144005f5fa448ecb7a1c3b436a8335be1

  • SHA256

    82746535babd1987e032a618ebe9111c4bfcc2e24fca7015a32b39027c9ab748

  • SHA512

    79ff1b17a9588be02f41e088a614054816b72c6c44e22c0490062b341fdd7daeb97e25b1de488453af678f3a5b52cdda6528d815c3c1cfe24ebf4840ad57c9bb

  • SSDEEP

    196608:4s3mwthMYsKJ8hx/JzAr6JoDE98ML4pysbN85fdoqU3n6jdtLn:l3jhMYsC8hx/JicoDatL4QsexdU6H

Score
7/10

Malware Config

Signatures

  • Requests dangerous framework permissions 1 IoCs

Files

  • protohax-1.4.0-1.apk
    .apk android arch:arm64 arch:x64

    dev.sora.protohax

    dev.sora.protohax.ui.activities.MainActivity


  • baseline.prof
  • baseline.profm
  • block_hardness.json
  • canonical_block_states_419.nbt.gz
    .gz
  • canonical_block_states_419.nbt
  • canonical_block_states_428.nbt.gz
    .gz
  • canonical_block_states_428.nbt
  • canonical_block_states_440.nbt.gz
    .gz
  • canonical_block_states_440.nbt
  • canonical_block_states_448.nbt.gz
    .gz
  • canonical_block_states_448.nbt
  • canonical_block_states_465.nbt.gz
    .gz
  • canonical_block_states_465.nbt
  • canonical_block_states_471.nbt.gz
    .gz
  • canonical_block_states_471.nbt
  • canonical_block_states_486.nbt.gz
    .gz
  • canonical_block_states_486.nbt
  • canonical_block_states_503.nbt.gz
    .gz
  • canonical_block_states_503.nbt
  • canonical_block_states_527.nbt.gz
    .gz
  • canonical_block_states_544.nbt.gz
    .gz
  • canonical_block_states_560.nbt.gz
    .gz
  • canonical_block_states_567.nbt.gz
    .gz
  • canonical_block_states_575.nbt.gz
    .gz
  • canonical_block_states_582.nbt.gz
    .gz
  • canonical_block_states_589.nbt.gz
    .gz
  • canonical_block_states_594.nbt.gz
    .gz
  • index.json
  • item_tags.json
  • legacy_block_states.nbt.gz
    .gz
  • music.nbs
  • runtime_item_states_419.json
  • runtime_item_states_440.json
  • runtime_item_states_448.json
  • runtime_item_states_475.json
  • runtime_item_states_486.json
  • runtime_item_states_503.json
  • runtime_item_states_527.json
  • runtime_item_states_534.json
  • runtime_item_states_560.json
  • runtime_item_states_567.json
  • runtime_item_states_575.json
  • runtime_item_states_582.json
  • runtime_item_states_589.json
  • runtime_item_states_594.json

Android Permissions

protohax-1.4.0-1.apk

Permissions

android.permission.INTERNET

android.permission.FOREGROUND_SERVICE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.QUERY_ALL_PACKAGES

android.permission.FOREGROUND_SERVICE_SPECIAL_USE

android.permission.POST_NOTIFICATIONS

android.permission.ACCESS_NETWORK_STATE

android.permission.WAKE_LOCK

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

com.google.android.gms.permission.AD_ID

dev.sora.protohax.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION