2a4cf22220b95ad1f802efd1ae8abea56e83dc598d66eb073d75882d20858e39

Resubmissions

16/03/2025, 03:52

06/10/2023, 08:12

09/09/2021, 12:48

max time kernel
68003s
max time network
156s
platform
android_x64
resource
android-x64-20230831-en
resource tags

androidarch:x64arch:x86image:android-x64-20230831-enlocale:en-usos:android-10-x64system
submitted
06/10/2023, 08:12

Target

up4net-Xwakurk-1-0-4.apk
Size

15.3MB
MD5

ae866cd8ff9ad51b09bc2799fbdef3d2
SHA1

43f36c86bbd370884e77dfd496fd918a2d9e023d
SHA256

2a4cf22220b95ad1f802efd1ae8abea56e83dc598d66eb073d75882d20858e39
SHA512

3d70132d84524a0fc4f98079471c0ab9c59dadabb14a353b22e678d8b96fe38a6115a3acd6a0ce00e17eb55a26be34b54f74af4eb57ad7ae9caa67036d317fc7
SSDEEP

393216:zV8ZRS/ppA21NdpalnK/VndDjJK29KGOeuAhKXaJ6M71k2zmz48:JWRQpR1RmK/VndDjJQGOjAQXa0Mppzml

Score

8^/10

stealth trojan

Removes its main activity from the application launcher 1 IoCs

pid	Process
5046	com.example.dat.a8andoserverx

Acquires the wake lock. 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.example.dat.a8andoserverx

Requests dangerous framework permissions 9 IoCs

description	ioc
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION

com.example.dat.a8andoserverx
1⤵
- Removes its main activity from the application launcher
- Acquires the wake lock.
PID:5046

/storage/emulated/0/.app.apk

Filesize
13.6MB

MD5
f2fa5102cf3613b7e140f08176c5d556

SHA1
9d78604430531939cbe0c12bead4483aabfbd3bb

SHA256
58532c98beac043ad5b839f47a98befd833505c4727bbf5e584955fc41580912

SHA512
dbea90d660ab60044e3a1ca03ae57154ff8819eb54bdd9c7d2dfbf4ffde4b748d0040839e6501cb528d224155efa820ece27e97796a9be645cc74e38891013b3

Download Submit