aimayixuclonghreq.mfuotcppgmjaewpfh.hxodgpdcddggbmaayumhd.trksvz
android.intent.action.SEND
android.intent.action.SENDTO
aimayixuclonghreq.mfuotcppgmjaewpfh.hxodgpdcddggbmaayumhd.qbd
android.intent.action.MAIN
General
-
Target
base.apk
-
Size
2.6MB
-
MD5
0baf6e89df2f0f5d6c320c5df8eca842
-
SHA1
f4c1ffb898bd3cf9ef8200c44c4903921916096b
-
SHA256
fe329c93c8a90149e50f48acaa77702e071290aa58203fc886fead002ff46094
-
SHA512
57b7b06105c4ff18e5c722f6744f83924095449fc0212d805f4a05123af2c4fbf0581dcfddf38554ba9de60d8a2644897e4c945f21c497f3851403e2da5738c5
-
SSDEEP
49152:oYfIeRMV2PUsWamyygA0TksmHaCXje8HFmErX+Eq9:o0WW40TkfHad8NS
Score
7/10
Malware Config
Signatures
-
Requests dangerous framework permissions 10 IoCs
Files
-
base.apk
esoskilaxwlipldf.zxexxdgcajlmfpewlufaqqxb.xif
aimayixuclonghreq.mfuotcppgmjaewpfh.hxodgpdcddggbmaayumhd.qbd
-
00_arrow.png
-
01_page_point_off.png
-
01_page_point_on.png
-
02_img_sd-card.png
-
03_img_phone.png
-
14110301_TEST01_1.html
-
MaterialIcons-Regular.ttf
-
USQ.json
-
activity_01.png.jpg
-
activity_02.png.jpg
-
activity_03.png.jpg
-
activity_04.png.jpg
-
activity_05.png.jpg
-
activity_06.png.jpg
-
activity_07.png.jpg
-
activity_08.png.jpg
-
activity_base.png.jpg
-
activity_outside.png.jpg
-
au_terms_meta.json
-
checked.png
-
crashlytics-build.properties
-
db_crt.dat
-
db_dex.nmp
-
db_elfa.map
-
db_elfa.nmp
-
db_evoapk.dat
-
demo_affirmation_state_workflow.json
-
demo_check_credit_card_order.json
-
demo_credit_card_kladr_workflow.json
-
demo_credit_card_segment_get.json
-
demo_credit_card_segment_get_new_params.json
-
demo_exit_workflow_state.json
-
demo_long_form_detailed_info_state_workflow.json
-
demo_long_form_family_info_state_workflow.json
-
demo_long_form_work_duration_state_workflow.json
-
demo_long_form_work_experience_state_workflow.json
-
demo_long_form_workflow.json
-
demo_pdf_card_info.json
-
demo_person_info_workflow.json
-
demo_short_form_card_parameters_state_workflow.json
-
demo_short_form_contacts_and_income_state_workflow.json
-
demo_short_form_workflow.json
-
demo_status_change_limit_state_workflow.json
-
demo_status_change_pers_data_state_workflow.json
-
demo_status_need_more_info_state_workflow.json
-
demo_status_success_state_workflow.json
-
demo_status_success_with_cvv_info.json
-
demo_techbreak_workflow.json
-
demo_workflow_error_message.json
-
eula.html
-
feed-ams-appwall.json
-
feed-ams-avscan-progress.json
-
feed-ams-avscan-storage.json
-
feed-ams-boost-progress.json
-
feed-ams-cleanup-progress.json
-
feed-ams-dashboard-pro.json
-
feed-ams-dashboard.json
-
feed-ams-data-usage-activity.json
-
feed-ams-dialog.json
-
feed-ams-feature-results.json
-
feed-ams-main-pro.json
-
feed-ams-subscription-settings.json
-
feed-ams-vpn-activity.json
-
feed-ams-wifiscan-progress.json
-
feed-ams-wifispeed-progress.json
-
gemcbp.properties
-
init_moneyboxes.xml
-
new-joe-kuo-6.1000
-
nopie_openvpn.arm64-v8a
-
nopie_openvpn.armeabi-v7a
-
nopie_openvpn.x86
-
nopie_openvpn.x86_64
-
offer.html
-
pie_openvpn.arm64-v8a
-
pie_openvpn.armeabi-v7a
-
pie_openvpn.x86
-
pie_openvpn.x86_64
-
pp.html
-
privacy_policy.html
-
rages.properties
-
sign.axml
-
sign.crt
-
sign.mf
-
supplierconfig.json
-
vpn.conf
-
vps.prop
Android Permissions
base.apk
Permissions
android.permission.RECORD_AUDIO
android.permission.FOREGROUND_SERVICE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.SEND_SMS
android.permission.READ_PHONE_STATE
android.permission.GET_ACCOUNTS
android.permission.RECEIVE_SMS
android.permission.USE_FULL_SCREEN_INTENT
android.permission.FOREGROUND_SERVICE
android.permission.READ_EXTERNAL_STORAGE
android.permission.READ_SMS
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_CONTACTS
android.permission.CALL_PHONE
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS
android.permission.ACCESS_NETWORK_STATE
android.permission.WAKE_LOCK
android.permission.REQUEST_DELETE_PACKAGES
android.permission.DISABLE_KEYGUARD
android.permission.INTERNET