Overview

overview

10

Static

static

7

update.apk

android-9-x86

10

update.apk

android-10-x64

10

demo.html

windows7-x64

1

demo.html

windows10-2004-x64

1

floating-s...ed.xml

windows7-x64

1

floating-s...ed.xml

windows10-2004-x64

3

floating-s...te.xml

windows7-x64

1

floating-s...te.xml

windows10-2004-x64

3

free-text-...ed.xml

windows7-x64

1

free-text-...ed.xml

windows10-2004-x64

3

free-text-comment.xml

windows7-x64

1

free-text-comment.xml

windows10-2004-x64

3

fyb_iframe...l.html

windows7-x64

1

fyb_iframe...l.html

windows10-2004-x64

1

fyb_static...l.html

windows7-x64

1

fyb_static...l.html

windows10-2004-x64

1

maction.js

windows7-x64

1

maction.js

windows10-2004-x64

1

menclose.js

windows7-x64

1

menclose.js

windows10-2004-x64

1

mglyph.js

windows7-x64

1

mglyph.js

windows10-2004-x64

1

mmultiscripts.js

windows7-x64

1

mmultiscripts.js

windows10-2004-x64

1

ms.js

windows7-x64

1

ms.js

windows10-2004-x64

1

mtable.js

windows7-x64

1

mtable.js

windows10-2004-x64

1

multiline.js

windows7-x64

1

multiline.js

windows10-2004-x64

1

no_sleep.js

windows7-x64

1

no_sleep.js

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    update.apk

  • Size

    1.5MB

  • MD5

    b19d2a01cdf45550d6ebcdf3b3be55d3

  • SHA1

    10a3b5f0f6d4e5d36d77ba239ea62f5e9d5b4315

  • SHA256

    6dda51e294cc343b50106676ad5708face3cfc7f16d99f69a34e4b3b85c632cc

  • SHA512

    bd3a617f8fbd132d0b596bc56589696d36646fb5c2395ef24bd93f2cf5108d2a3fea007c8afa2267f6cd5e0fb05b9cf7e831aa6c2e5e9cf857fc6dbfc74956ea

  • SSDEEP

    24576:aYum58rdGWVQQn0pEMUgTlIEfM3ArYNOb5Z9ZHqGgzmzKjU+La5CCaEAh74zZ:wm5aGWuQn0pugTS6MwcWZHqfU0a5CCa2

Score
7/10

Malware Config

Signatures

  • Requests dangerous framework permissions 7 IoCs

Files

  • update.apk
    .apk android arch:arm64 arch:arm arch:x86 arch:x64

    com.fullnamef

    com.fullnamef.p083e


  • CstWH.json
  • GreyToast.svg
  • Transformers.ttf
  • demo.html
    .html
  • filedownloader.properties
  • floating-sticky-note-selected.svg
    .xml
  • floating-sticky-note.svg
    .xml
  • free-text-comment-selected.svg
    .xml
  • free-text-comment.svg
    .xml
  • fyb_iframe_endcard_tmpl.html
    .html
  • fyb_static_endcard_tmpl.html
    .js
  • google-services-desktop.json
  • ia_js_load_monitor.txt
    .html .js
  • ia_mraid_bridge.txt
    .html .js
  • ic_graphic_nophoto.webp
  • insert-text.svg
  • maction.js
    .js
  • manifest.min.css
  • menclose.js
    .js
  • menu.svg
  • menu_collapsed.svg
  • menu_expanded.svg
  • mglyph.js
    .js
  • mmultiscripts.js
    .js
  • ms.js
    .js
  • mtable.js
    .js
  • multiline.js
    .js
  • no_sleep.js
    .js
  • pull-ring.png
  • rv_binddatas.xml
    .xml
  • s_thumbdown_22.svg
  • s_thumbdownoutline_22.svg
  • s_thumbup_22.svg
  • s_thumbupoutline_22.svg
  • sdk.js
    .js
  • share-feedback-icon.svg
  • slardar_bridge.js
    .js
  • slardar_sdk.js
    .js
  • slow.html
    .html
  • sort-asc.svg
  • sort-desc.svg
  • spinner.png
  • stacked-annotation-marker.svg
    .xml
  • stamp-comment-selected.svg
    .xml
  • stamp-comment.svg
    .xml
  • sticky-note.svg
    .xml
  • style_3_18_1624864847.data
    .gz
  • style_3_18_1624864847.data
  • style_4_18_1630315891.data
    .gz
  • style_5_18_1630315937.data
    .gz
  • style_6_18_1624866734.data
    .gz
  • style_6_18_1624866734.data
  • tosversion
  • vpaid_html_template.html
    .html .js
  • webview_error.html
    .html
  • xenoss.sdkdevkit.mraid.js
    .js

Android Permissions

update.apk

Permissions

android.permission.USES_POLICY_FORCE_LOCK

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.MANAGE_EXTERNAL_STORAGE

com.sonyericsson.home.permission.BROADCAST_BADGE

android.permission.CALL_PHONE

android.permission.REORDER_TASKS

android.permission.EXPAND_STATUS_BAR

android.permission.REQUEST_COMPANION_USE_DATA_IN_BACKGROUND

android.permission.RECEIVE_SMS

android.permission.INTERNET

android.permission.FOREGROUND_SERVICE

android.permission.CLEAR_APP_CACHE

android.permission.ACCESS_BACKGROUND_LOCATION

com.sonymobile.home.permission.PROVIDER_INSERT_BADGE

android.permission.ACCESS_NETWORK_STATE

android.permission.SEND_SMS

android.permission.READ_SMS

android.permission.VIBRATE

android.Manifest.permission.READ_PHONE_STATE

android.permission.WRITE_SETTINGS

android.permission.INSTALL_SHORTCUT

android.permission.RECORD_AUDIO

android.permission.BATTERY_STATS

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.READ_PHONE_STATE

android.permission.MODIFY_AUDIO_SETTINGS

com.anddoes.launcher.permission.UPDATE_COUNT

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.ACCESS_WIFI_STATE

android.permission.REQUEST_COMPANION_RUN_IN_BACKGROUND

android.permission.WAKE_LOCK

android.permission.REQUEST_DELETE_PACKAGES

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE