Resubmissions

08-09-2023 03:26

230908-dzpm2sgc54 10

01-08-2023 11:42

230801-nvdp4agf6v 10

01-08-2023 11:24

230801-nhn1asge81 10

General

  • Target

    Lol.apk

  • Size

    3.7MB

  • MD5

    10f5a518febd8b0b08b7f69982bc0a7d

  • SHA1

    77137ca4881b82a9baf3dea99e03ce92c89cc742

  • SHA256

    238cdfbab88cbcb6b1a2379b2a18c993640c1f498c4cb0e9faef408331f41c0b

  • SHA512

    52c557425b2eff4f244c2c34280118e913574c0b3a51bff966c4fb4538afdc1220ad6f94956098aeb53cee4984aeff30142f148f6e19c1a978af6d0e7801f918

  • SSDEEP

    98304:z/Se3GAtk9/CYItyoKmFTwgzOOH2qWS9Rr:+e33tcPItTvFcg5W6b

Score
7/10

Malware Config

Signatures

  • Requests dangerous framework permissions 15 IoCs

Files

  • Lol.apk
    .apk android

    Password: infected

    com.dogilowopuna.zico

    com.dogilowopuna.zico.gija


  • AZURE.png
  • BLUE.png
  • CYAN.png
  • GREEN.png
  • GreatVibes-Regular.ttf
  • MAGENTA.png
  • ORANGE.png
  • RED.png
  • ROSE.png
  • VIOLET.png
  • YELLOW.png
  • amap_resource1_0_0.png
  • amap_sdk_lineDashTexture_circle.png
  • amap_sdk_lineDashTexture_square.png
  • amap_sdk_lineTexture.png
  • card_logo_bmac.png
  • card_logo_cdtft.png
  • card_logo_changsha.png
  • card_logo_cityu.png
  • card_logo_cqtk.png
  • card_logo_default.png
  • card_logo_gongshang.png
  • card_logo_guangda.png
  • card_logo_guangfa.png
  • card_logo_gzyct.png
  • card_logo_haerbin.png
  • card_logo_huaxia.png
  • card_logo_hzt.png
  • card_logo_jianshe.png
  • card_logo_jiaotong.png
  • card_logo_kunming.png
  • card_logo_lanzhou.png
  • card_logo_lingnan.png
  • card_logo_mastercard.png
  • card_logo_minsheng.png
  • card_logo_nanchang.png
  • card_logo_ningbo.png
  • card_logo_nongye.png
  • card_logo_octopus.png
  • card_logo_pingan.png
  • card_logo_pufa.png
  • card_logo_qingdao.png
  • card_logo_sptc.png
  • card_logo_suzhoutong.png
  • card_logo_szt.png
  • card_logo_visa.png
  • card_logo_wht.png
  • card_logo_xian.png
  • card_logo_xingye.png
  • card_logo_youzheng.png
  • card_logo_zhaoshang.png
  • card_logo_zhengzhou.png
  • card_logo_zhongguo.png
  • card_logo_zhongxin.png
  • card_logo_zhoushan.png
  • consentform.html
    .html .js
  • cover.jpg
    .jpg
  • de.json
  • en.json
  • es.json
  • fr.json
  • hud.png
  • id.json
  • infowindow_bg.9.png
  • it.json
  • ja.json
  • ko.json
  • libByteAINN.so
    .elf linux arm
  • libbuffer.so
    .elf linux arm
  • libfile_lock.so
    .elf linux arm
  • libgifimage.so
    .elf linux arm
  • libheif.so
    .elf linux arm
  • libnative-filters.so
    .elf linux arm
  • libnpth_dl.so
    .elf linux arm
  • libttmverify.so
    .elf linux arm
  • libttmverifylite.so
    .elf linux arm
  • libvcnverify.so
    .elf linux arm
  • libvcnverifylite.so
    .elf linux arm
  • location_map_gps_3d.png
  • location_map_gps_locked.png
  • location_pressed.png
  • location_selected.png
  • location_unselected.png
  • map_indoor_select.png
  • maps_dav_compass_needle_large.png
  • marker_default.png
  • marker_gps_no_sharing.png
  • nl_nl.json
  • offlinemapv4.png
  • pl.json
  • pskPXGY.json
  • pt_br.json
  • ru.json
  • style.css
  • th.json
  • tr_tr.json
  • tracelinetexture.png
  • vi.json
  • webvideo.html
    .js
  • youtube_sans_light.xml
    .xml
  • youtube_sans_medium.xml
    .xml
  • youtube_sans_semibold.xml
    .xml
  • zepto.min.js
    .js
  • zh_cn.json
  • zh_hk.json
  • zh_tw.json
  • zoomin_pressed.png
  • zoomin_selected.png
  • zoomin_unselected.png
  • zoomout_pressed.png
  • zoomout_selected.png
  • zoomout_unselected.png

Android Permissions

Lol.apk

Permissions

android.permission.READ_EXTERNAL_STORAGE

android.permission.GET_ACCOUNTS

android.permission.INTERNET

android.permission.GET_TASKS

android.permission.RECEIVE_SMS

android.permission.READ_PHONE_NUMBERS

android.permission.ACCESS_BACKGROUND_LOCATION

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.FOREGROUND_SERVICE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_CONTACTS

android.permission.READ_CALL_LOG

android.permission.READ_PHONE_STATE

android.permission.QUICKBOOT_POWERON

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_WIFI_STATE

android.permission.WRITE_CLIPS

android.permission.CAMERA

android.permission.ACCESS_NETWORK_STATE

com.sonyericsson.home.permission.BROADCAST_BADGE

android.permission.SEND_SMS

android.permission.WAKE_LOCK

android.permission.WRITE_CONTACTS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.CALL_PHONE

android.permission.GET_CLIPS

com.sonymobile.home.permission.PROVIDER_INSERT_BADGE

com.anddoes.launcher.permission.UPDATE_COUNT

android.permission.REQUEST_DELETE_PACKAGES

android.permission.DISABLE_KEYGUARD

android.permission.READ_CLIPS

android.permission.READ_SMS

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.QUERY_ALL_PACKAGES

android.permission.RECEIVE_LAUNCH_BROADCASTS

android.permission.ACTION_MANAGE_OVERLAY_PERMISSION