Overview

overview

7

Static

static

7

a95a1539c9...28.apk

android-9-x86

1

a95a1539c9...28.apk

android-10-x64

1

a95a1539c9...28.apk

android-11-x64

1

File6.js

windows7-x64

1

File6.js

windows10-2004-x64

1

File7.js

windows7-x64

1

File7.js

windows10-2004-x64

1

File8.js

windows7-x64

1

File8.js

windows10-2004-x64

1

WebviewJav...dge.js

windows7-x64

1

WebviewJav...dge.js

windows10-2004-x64

1

error_page.html

windows7-x64

1

error_page.html

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    a95a1539c9610b2d0b4abede7db9aa28.bin

  • Size

    32.5MB

  • MD5

    a95a1539c9610b2d0b4abede7db9aa28

  • SHA1

    51c1ee16ae6ad2b9251c824e26e828feeece710b

  • SHA256

    c84e06d4831f9e468cf64e4f2318811f1350f800803e6cd2f8275afad6897fd1

  • SHA512

    ea5557eaaa6045240e14ce07f2bc3060bb0cb28fa4ab991a54b16940dc4b832014adb0b3a3d26012f4cc9cb41ff50887a09a25a1408070a4596eccce096191ba

  • SSDEEP

    786432:cF8c02ojk4of9sWmXIfXnMZcONeyoClZOzVmk9AWubvrZJc/LzMuL:stZ4olsPX8nMZBUClIzVmk6dI

Score
7/10

Malware Config

Signatures

  • Requests dangerous framework permissions 9 IoCs

Files

  • a95a1539c9610b2d0b4abede7db9aa28.bin
    .apk android

    Password: infected

    com.snapchat.android

    com.snap.mushroom.MainActivity


  • 43571621158.lns
  • 43675310939.lns
  • 43694370882.lns
  • 43861650946.lns
  • 44132580984.lns
  • Effect01.f.glsl
  • Effect02.f.glsl
  • Effect03.f.glsl
  • Effect04.f.glsl
  • Effect05.f.glsl
  • Effect06.f.glsl
  • Effect07.f.glsl
  • Effect08.f.glsl
  • Effect09.f.glsl
  • Effect10.f.glsl
  • Effect11.f.glsl
  • Effect12.f.glsl
  • Effect13.f.glsl
  • Effect14.f.glsl
  • Effect15.f.glsl
  • Effect16.f.glsl
  • Effect17.f.glsl
  • Effect18.f.glsl
  • Effect19.f.glsl
  • Effect20.f.glsl
  • Effect21.f.glsl
  • Effect22.f.glsl
  • Effect23.f.glsl
  • Effect24.f.glsl
  • Effect25.f.glsl
  • Effect26.f.glsl
  • EffectLooksery.f.glsl
  • EffectSC.f.glsl
  • File5.mesh
  • File6.js
    .js
  • File7.js
    .js
  • File8.js
    .js
  • JPEG_Candide_AsmPointsMap
  • LiteTrackingData_ert.lns
  • Overlay.lns
  • SphereForPanoramicSampling.mesh
  • WebviewJavascriptBridge.js
    .js
  • ad_format.composermodule
  • ad_prompt.composermodule
  • add_friends.composermodule
  • advect.glsl
  • advect1f.glsl
  • advect2f.glsl
  • advectcoord.glsl
  • appearance.glsl
  • application.composermodule
  • apps_from_snap.composermodule
  • ar_shopping.composermodule
  • attachments.composermodule
  • attribution.composermodule
  • aura.composermodule
  • avatar.composermodule
  • barycentric.glsl
  • birthday_reply_lens.json
  • bitmoji.composermodule
  • blizzard.composermodule
  • blizzard_default_config_v2.json
  • blizzard_default_config_v2_tte.json
  • blizzard_extra_config_v2.json
  • blur.glsl
  • border.glsl
  • borderTriangulation.txt
  • bridge_observables.composermodule
  • brightness.glsl
  • bundled.json
  • bundled_filters.json
  • buoyancy.glsl
  • cameos.composermodule
  • cameos_blur_2d.glsl
  • cameos_texture.glsl
  • camera.composermodule
  • camera.frag.glsl
  • camera.vert.glsl
  • camera_timeline_mode.composermodule
  • candide3reduce
  • candide3reduce14AU
  • chat_reply.composermodule
  • cof.composermodule
  • color.glsl
  • colorConverter.glsl
  • colorbalance.glsl
  • com.mapbox.android.core
  • com.mapbox.android.telemetry
  • commerce_checkout.composermodule
  • commerce_payment.composermodule
  • common.composermodule
  • common_profile.composermodule
  • composer_core.composermodule
  • composer_protobuf.composermodule
  • composite.glsl
  • context_cards.composermodule
  • contrast.glsl
  • contrastMask.glsl
  • copyGeometryDraw.glsl
  • core_action_sheet.composermodule
  • core_alert.composermodule
  • coreui.composermodule
  • coreui_experimental.composermodule
  • coreutils.composermodule
  • crookedFace.glsl
  • curves.glsl
  • debug.glsl
  • definedBlendMode.glsl
  • depth_transform.glsl
  • desaturation.glsl
  • dimTexture.glsl
  • disparity_conversion.glsl
  • divergence.glsl
  • dog.glsl
  • dpa.composermodule
  • drawBlendColor.glsl
  • drawBlendTexture.glsl
  • drawCandide.glsl
  • drawCompare.glsl
  • drawFace.glsl
  • drawImage.glsl
  • drawImageOnTexShader.glsl
  • drawLines.glsl
  • drawLines3d.glsl
  • drawMask.glsl
  • drawMixTexture.glsl
  • drawTexture.glsl
  • drawTexture2.glsl
  • drawTextureBlurAverage5x5.glsl
  • drawTextureBlurAverageTwoPasses5x5.glsl
  • drawTextureFXAA.glsl
  • drawTextureNoTransform.glsl
  • drawTextureNoTransparency.glsl
  • drawTextureNotPremult.glsl
  • drawTextureRGBA.glsl
  • drawTextureRGBY.glsl
  • drawTextureWithBlend.glsl
  • drawTextureWithBlend2.glsl
  • dynamicBuildConfig.json
  • dynamic_pass.glsl
  • encodeProjectionTex.glsl
  • envProviderUtils.glsl
  • equalization.glsl
  • error_page.html
    .html
  • event_profile.composermodule
  • events.composermodule
  • experiments.composermodule
  • eyeColor.f.glsl
  • eyeColor.glsl
  • eyeColor.v.glsl
  • faceProjection.glsl
  • faceTexture.glsl
  • faceless.glsl
  • facestretch.glsl
  • facestretchLiquify.glsl
  • fade.glsl
  • fallback.glsl
  • fill.glsl
  • filterEnvmap.glsl
  • finalExtractor.glsl
  • firstExtractor.glsl
  • float_packing.glsl
  • font.glsl
  • foundation.composermodule
  • fresh.glsl
  • friending_cell.composermodule
  • friending_section.composermodule
  • friends_feed.composermodule
  • games.composermodule
  • gas.glsl
  • gauss.glsl
  • gaussBlur.glsl
  • gaussian.glsl
  • gaussian_blur_2d.glsl
  • gaussian_blur_sampler_1D.glsl
  • generateBorder.glsl
  • generateBorderHighest.glsl
  • generateHelperBlur.glsl
  • glline.glsl
  • glline3d.glsl
  • gllinegrid.glsl
  • gradientMap.glsl
  • graphene.composermodule
  • grayMixer.glsl
  • grayScale.glsl
  • greyscale.lns
  • haarcascade_frontalface_alt2.xml
    .xml
  • histogram.glsl
  • hotspot.glsl
  • identity_takeover.composermodule
  • impala.composermodule
  • impulse.glsl
  • inpainting_gpu.glsl
  • instasnap.lns
  • invite_client_api.composermodule
  • jacobi.glsl
  • lab2rgb.glsl
  • lab2rgb_lib.glsl
  • lagunaTransform.glsl
  • lenses.composermodule
  • lenses_list.json
  • levelsControl.glsl
  • light_models.glsl
  • line.glsl
  • line3d.glsl
  • linegrid.glsl
  • liquify.glsl
  • liquifyv2.glsl
  • location.composermodule
  • location_rx.composermodule
  • lookup_miss_etikate.webp
  • magic_moment.json
  • malibuTransform.glsl
  • map.composermodule
  • map_foundation.composermodule
  • map_layer_api.composermodule
  • map_layer_ui.composermodule
  • map_layers.composermodule
  • map_me_tray.composermodule
  • markRgbProbabilities.glsl
  • marker_profile.composermodule
  • mask.glsl
  • math.glsl
  • media.composermodule
  • memories.composermodule
  • mention_bar.composermodule
  • mesh.glsl
  • metainfo.json
  • minis_tray.composermodule
  • miss_etikate.lns
  • mixer.glsl
  • mouthErase.glsl
  • music.composermodule
  • natural.glsl
  • navigation.composermodule
  • networking.composermodule
  • networking_rx.composermodule
  • newportDistortion.crypt.glsl
  • newportDistortion.glsl
  • newportUndistortion.glsl
  • noise.glsl
  • nv21ToRGB.glsl
  • nv21toRGB.glsl
  • obstacle.glsl
  • oit_background.glsl
  • oit_depthmax.glsl
  • pack.glsl
  • packUnpack.glsl
  • packUnpackCGTest.glsl
  • particle.glsl
  • particles.glsl
  • pass.glsl
  • payouts.composermodule
  • people.composermodule
  • persistence.composermodule
  • persistence_rx.composermodule
  • photoshopBlendModes.glsl
  • place_discovery.composermodule
  • place_discovery_api.composermodule
  • place_picker.composermodule
  • place_search_api.composermodule
  • poisson.glsl
  • post.glsl
  • postFXAA.glsl
  • postFilter.v.glsl
  • preview_sound_tool_alien.json
  • preview_sound_tool_autotune.json
  • preview_sound_tool_high_pitch.json
  • preview_sound_tool_low_pitch.json
  • preview_sound_tool_no_effect.json
  • preview_sound_tool_robot.json
  • preview_sound_tool_robot2.json
  • profile.composermodule
  • public_profile.composermodule
  • quad.glsl
  • quadBack.glsl
  • quantization.glsl
  • rainbow.glsl
  • recent_friend_operation.composermodule
  • rectangleTo2D.glsl
  • recursiveExtractor.glsl
  • required.glsl
  • required2.glsl
  • required2_gl.glsl
  • resample_depth_rgb.glsl
  • resample_rgb.glsl
  • result.glsl
  • retouch.glsl
  • rgb2lab.glsl
  • rgbToNV21.glsl
  • rgbToNv21Tex.glsl
  • rgbToYuv.glsl
  • rgbhsl.glsl
  • round.glsl
  • rxjs.composermodule
  • rxjs_extensions.composermodule
  • scene.scn
  • screenShake.glsl
  • screen_texture_depth.glsl
  • screen_texture_mrt.glsl
  • screen_texture_warp.glsl
  • screentexture.glsl
  • search_api.composermodule
  • search_v2.composermodule
  • send_to_lists.composermodule
  • setdepth.glsl
  • settings.composermodule
  • shader.glsl
  • shapes.glsl
  • share_links.composermodule
  • share_sheet.composermodule
  • simple3d.glsl
  • skinBlend.glsl
  • skinMirror.glsl
  • skinSample.glsl
  • skinSprite.glsl
  • smaaAreaLookup.png
    .png
  • smaaSearchLookup.png
    .png
  • smaa_blend_weights.glsl
  • smaa_edge_detection.glsl
  • smaa_neighborhood_blending.glsl
  • smoothCompress.glsl
  • smoothImage.glsl
  • smoothImageHorizontal.glsl
  • smoothImageOnTexShader.glsl
  • smoothImageVertical.glsl
  • smoothImageWithChar.glsl
  • smoothing.lns
  • snap_insights.composermodule
  • snap_stars.composermodule
  • snapchatter_selection.composermodule
  • snapcode.composermodule
  • snappro_api.composermodule
  • snapshots.composermodule
  • spectrum_default_config.json
  • sprite.glsl
  • statistics_mipmaps.glsl
  • std.glsl
  • std2.glsl
  • std2_fs.glsl
  • std2_shadows.glsl
  • std2_texture.glsl
  • std2_vs.glsl
  • std_flat.glsl
  • std_fs.glsl
  • std_shadows.glsl
  • std_stereo_view_index.glsl
  • std_texture.glsl
  • std_vs.glsl
  • stereoRotation.glsl
  • stereoToMono.glsl
  • stories.composermodule
  • stories_rx.composermodule
  • story_invite.composermodule
  • storyplayer.composermodule
  • studioUtils.glsl
  • subgradient.glsl
  • subscriptions.composermodule
  • sunlit.glsl
  • surfaceProjection.glsl
  • tag_to_cluster_map.json
  • talk.composermodule
  • testForStatement.glsl
  • text2.glsl
  • textassemble.glsl
  • topics.composermodule
  • tree-ORB-sharp-b-20-d-2-r-10-numSig-195777265.bin
  • tree-b-20-d-2-r-10-numSig-168673445.bin
  • triangulation.txt
  • triangulation_with_mouth.txt
  • uber.glsl
  • venue_api.composermodule
  • venue_editor.composermodule
  • venue_profile.composermodule
  • venue_profile_api.composermodule
  • vertexTextureFetch.glsl
  • visualfloat.glsl
  • visualize.glsl
  • water_distortion.glsl
  • whiteEyes.glsl
  • yuvToRgb.glsl

Android Permissions

a95a1539c9610b2d0b4abede7db9aa28.bin

Permissions

android.permission.CAMERA

android.permission.RECORD_AUDIO

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.FLASHLIGHT

android.permission.ACCESS_FINE_LOCATION

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.WAKE_LOCK

android.permission.VIBRATE

android.permission.READ_PHONE_STATE

android.permission.READ_CALL_LOG

android.permission.READ_CONTACTS

android.permission.FOREGROUND_SERVICE

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.GET_ACCOUNTS

android.permission.READ_PROFILE

android.permission.RECEIVE_BOOT_COMPLETED

com.snapchat.android.permission.UPDATE_STICKER_INDEX

android.permission.USE_FULL_SCREEN_INTENT

android.permission.INTERNET

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_NETWORK_STATE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

com.google.android.c2dm.permission.RECEIVE

com.android.vending.BILLING

com.sec.android.provider.badge.permission.READ

com.sec.android.provider.badge.permission.WRITE

com.htc.launcher.permission.READ_SETTINGS

com.htc.launcher.permission.UPDATE_SHORTCUT

com.sonyericsson.home.permission.BROADCAST_BADGE

com.sonymobile.home.permission.PROVIDER_INSERT_BADGE

com.anddoes.launcher.permission.UPDATE_COUNT

com.majeur.launcher.permission.UPDATE_BADGE

com.huawei.android.launcher.permission.CHANGE_BADGE

com.huawei.android.launcher.permission.READ_SETTINGS

com.huawei.android.launcher.permission.WRITE_SETTINGS

android.permission.READ_APP_BADGE

com.oppo.launcher.permission.READ_SETTINGS

com.oppo.launcher.permission.WRITE_SETTINGS

me.everything.badger.permission.BADGE_COUNT_READ

me.everything.badger.permission.BADGE_COUNT_WRITE