9ff4feabd58e98ccc6749a061429d563147076c89dfa3f60ebd09980425eeed3[.]apk[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

9ff4feabd58e98ccc6749a061429d563147076c89dfa3f60ebd09980425eeed3.apk.zip
Size

61.0MB
MD5

0847b803f838f39999fdd11f3949cc1d
SHA1

6f0b3a97a2eab3fe90fe2b40ea4863cb2d020d2a
SHA256

96f148e128567490a2b2822d46163eed4c7b83d6b30a3de7b30e91f4fcefe452
SHA512

293241680e6bd6dcddcbcf3b92ed3654bfc8baf8110f546e254376382265813c2c6b34bdf51ac3dc1b48085a136bf65bd9fa14f87afb8d12e442862980337d35
SSDEEP

1572864:xYwOSbthtBjAmDKCIPKMBrgI7PU+CobpkPeg9tXKgSeD0BXp5CR:xYtSbthtBhKlPKMBr57sFPegnXX0Rp5u

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 10 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to read the user's calendar data.	android.permission.READ_CALENDAR
Allows an application to write the user's calendar data.	android.permission.WRITE_CALENDAR
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE

Files

9ff4feabd58e98ccc6749a061429d563147076c89dfa3f60ebd09980425eeed3.apk.zip
.zip

Password: infected
9ff4feabd58e98ccc6749a061429d563147076c89dfa3f60ebd09980425eeed3.apk
.apk android arch:arm64 arch:arm arch:x86 arch:x64

com.ieeeiuc.iuccampus

host.exp.exponent.MainActivity

Activities

host.exp.exponent.MainActivity

android.intent.action.MAIN

host.exp.exponent.experience.TvActivity

android.intent.action.MAIN

net.openid.appauth.RedirectUriReceiverActivity

android.intent.action.VIEW

expo.modules.payments.stripe.RedirectUriReceiver

android.intent.action.VIEW

abi40_0_0.expo.modules.payments.stripe.RedirectUriReceiver

android.intent.action.VIEW

abi39_0_0.expo.modules.payments.stripe.RedirectUriReceiver

android.intent.action.VIEW

abi38_0_0.expo.modules.payments.stripe.RedirectUriReceiver

android.intent.action.VIEW

abi37_0_0.expo.modules.payments.stripe.RedirectUriReceiver

android.intent.action.VIEW

com.facebook.CustomTabActivity

android.intent.action.VIEW

Permissions

com.ieeeiuc.iuccampus.permission.C2D_MESSAGE
com.google.android.c2dm.permission.RECEIVE
android.permission.ACCESS_NETWORK_STATE
android.permission.INTERNET
android.permission.SYSTEM_ALERT_WINDOW
android.permission.WAKE_LOCK
android.permission.MANAGE_DOCUMENTS
android.permission.READ_INTERNAL_STORAGE
android.permission.READ_PHONE_STATE
android.permission.USE_FINGERPRINT
android.permission.VIBRATE
com.android.launcher.permission.INSTALL_SHORTCUT
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.CAMERA
android.permission.READ_CONTACTS
android.permission.READ_CALENDAR
android.permission.WRITE_CALENDAR
android.permission.READ_EXTERNAL_STORAGE
android.permission.RECORD_AUDIO
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.WRITE_SETTINGS
host.exp.exponent.permission.C2D_MESSAGE
android.permission.ACCESS_WIFI_STATE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.USE_BIOMETRIC
android.permission.FOREGROUND_SERVICE
com.sec.android.provider.badge.permission.READ
com.sec.android.provider.badge.permission.WRITE
com.htc.launcher.permission.READ_SETTINGS
com.htc.launcher.permission.UPDATE_SHORTCUT
com.sonyericsson.home.permission.BROADCAST_BADGE
com.sonymobile.home.permission.PROVIDER_INSERT_BADGE
com.anddoes.launcher.permission.UPDATE_COUNT
com.majeur.launcher.permission.UPDATE_BADGE
com.huawei.android.launcher.permission.CHANGE_BADGE
com.huawei.android.launcher.permission.READ_SETTINGS
com.huawei.android.launcher.permission.WRITE_SETTINGS
android.permission.READ_APP_BADGE
com.oppo.launcher.permission.READ_SETTINGS
com.oppo.launcher.permission.WRITE_SETTINGS
me.everything.badger.permission.BADGE_COUNT_READ
me.everything.badger.permission.BADGE_COUNT_WRITE
com.google.android.providers.gsf.permission.READ_GSERVICES
com.google.android.gms.permission.ACTIVITY_RECOGNITION
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

Receivers

host.exp.exponent.referrer.InstallReferrerReceiver

com.android.vending.INSTALL_REFERRER

com.google.android.gms.analytics.AnalyticsReceiver

com.google.android.gms.analytics.ANALYTICS_DISPATCH

host.exp.exponent.notifications.receivers.SchedulingTriggerReceiver

android.intent.action.REBOOT
android.intent.action.BOOT_COMPLETED
android.intent.action.TIMEZONE_CHANGED
android.intent.action.TIME_CHANGED
android.intent.action.QUICKBOOT_POWERON

host.exp.exponent.notifications.ExpoNotificationsService

expo.modules.notifications.NOTIFICATION_EVENT
android.intent.action.BOOT_COMPLETED
android.intent.action.REBOOT
android.intent.action.QUICKBOOT_POWERON
com.htc.intent.action.QUICKBOOT_POWERON
android.intent.action.MY_PACKAGE_REPLACED

expo.modules.notifications.service.NotificationsService

expo.modules.notifications.NOTIFICATION_EVENT
android.intent.action.BOOT_COMPLETED
android.intent.action.REBOOT
android.intent.action.QUICKBOOT_POWERON
com.htc.intent.action.QUICKBOOT_POWERON
android.intent.action.MY_PACKAGE_REPLACED

expo.modules.taskManager.TaskBroadcastReceiver

expo.modules.taskManager.TaskBroadcastReceiver.INTENT_ACTION
android.intent.action.BOOT_COMPLETED
android.intent.action.MY_PACKAGE_REPLACED

com.facebook.CurrentAccessTokenExpirationBroadcastReceiver

com.facebook.sdk.ACTION_CURRENT_ACCESS_TOKEN_CHANGED

com.facebook.CampaignTrackingReceiver

com.android.vending.INSTALL_REFERRER

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

com.google.android.gms.measurement.AppMeasurementInstallReferrerReceiver

com.android.vending.INSTALL_REFERRER

Services

host.exp.exponent.fcm.ExpoFcmMessagingService

com.google.firebase.MESSAGING_EVENT

expo.modules.notifications.service.ExpoFirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT
BCLjoy_200.emd
BCLlefteyeclosed_200.emd
BCLrighteyeclosed_200.emd
LMprec_600.emd
MFT_fssd_accgray.pb
MFT_fssd_fastgray.pb
app.bundle
.js
app.manifest
asset_004c2bbb035d8d06bb830efc4673c886.png
.png
asset_00d51e28cf975519da6ae74468f7b65a.json
asset_01c4560c9c15069b6700ce7ad2e49a9c.ttf
asset_02bc1fa7c0313217bde2d65ccbff40c9.png
.png
asset_0ea69b5077e7c4696db85dbcba75b0e1.png
.png
asset_0ed2c12501bab218ad3760862fbe4f53.json
asset_1170df5548b7e238df5fa14b6f1a753e.ttf
asset_117a3ba929f78a449693df685237123e.ttf
asset_129176f32dcab2a846d04dc8b145b128.png
.png
asset_13685372945d816a2b474fc082fd9aaa.ttf
asset_140c53a7643ea949007aa9a282153849.ttf
asset_145d6890c4587987978795116aa2d3af.ttf
asset_19ba7aa52a78c3896558ac1c0a5fb4c7.ttf
asset_1a5f51c6741e52bf0c50680952a8f30c.ttf
asset_1ab236ed440ee51810c56bd16628aef0.ttf
asset_1b38414956c666bd1df78fe5b9c84756.ttf
asset_1b8a4c8bd05eb5593fb2ad5ffc61ab87.ttf
asset_1d26c96ab400ad901fad7409505326f8.ttf
asset_223f571c21e50d356d634e10287f2dc4.ttf
asset_2327736b3ea09c41abfb69be1221f430.png
.png
asset_24851dd2b60eb271e45637148ab0bed3.jpg
.jpg
asset_256e8ce3aaf42f4cfc02b556e57bef96.json
asset_276ee4e65ded9a91cfe0be813e95e42d.json
asset_27e3649bab7c62fa21b8837c4842e40e.ttf
asset_282a8a49b760474c98a5198885ba74d5.jpg
.jpg
asset_28c5bd3aa0ddaf8a6aba05cd9d7e8735.ttf
asset_2e2a06ee5f4ca517dd987b4e8d1a580d.jpg
.jpg
asset_349fee09f4584a3b3f83acb0d3486500.png
.png
asset_34fef0f8265dcdf8f3193b24ca1352af.ttf
asset_35ba0eaec5a4f5ed12ca16fabeae451d.png
.png
asset_376d6a4c7f622917c39feb23671ef71d.png
.png
asset_37dc083fe35e37d0cb245084c0145c8b.png
.png
asset_39843e5d52a6c5c42d5abdb0b34bcaa6.json
asset_3a2ba31570920eeb9b1d217cabe58315.ttf
asset_3a4b49028f8ddd3cb0280d60a8d3714b.ttf
asset_3c2b290f95cd5b33c3ead2911064a2ab.ttf
asset_409c7f79a42e56c785f50ed37535f0be.ttf
asset_40a74702035bf9ef19053c84ce9a58b9.ttf
asset_421207e87b096ba1c26c8f5b64d10db9.ttf
asset_43dd5b7a3d277362d5e801e5353e3a01.ttf
asset_45cdef670f6c5c091ecc5991e36d27d2.png
.png
asset_461d9bba8b6a3c91675039df12cfe6ca.json
asset_47ce6e77f039020ee2e76a10c1e988e9.png
.png
asset_4b9cf0cc747e3c1abc541befa05b1e37.png
.png
asset_4bdd6aad790c6c8370a06876ec7d31e1.png
.png
asset_51671417ef20e0bbc32f0a2bc6edfa95.png
.png
asset_5223c8d9b0d08b82a5670fb5f71faf78.png
.png
asset_52a50ca037f2f96fa567404dc3c5bdfb.ttf
asset_534012dbb713104a7cb75415c79204c7.jpg
asset_535c3a7913020ce8a77c63513371c475.ttf
asset_55a7f2e9510da6ac14a4129f4db15c3c.ttf
asset_570a244cacd3d78b8c75ac5dd622f537.ttf
asset_57eec1ed57cdbf3d9b1a561da4339c61.jpg
.jpg
asset_5b025a51d20fec85948f10d955078897.ttf
asset_5c17ceef3f435797500c866f9a4cc8ed.ttf
asset_5cdf883b18a5651a29a4d1ef276d2457.ttf
asset_5e1854f6ddbacedc698130f8023acd6b.png
.png
asset_5f7154376437747ec5bb0265ac124f7d.ttf
asset_60668d999bbaf663420340f7bdd580d7.json
asset_63284fc3a1c1a6326f34ed10cc1172ea.jpg
.jpg
asset_647543ebfccf6e5495434383598453d1.json
asset_654449e291aeca104593a0c2ad4b99a8.ttf
asset_665d9d6a3227c85fcb50f3f86ccad80c.png
.png
asset_6964c289434027204e730b74d3f1e153.jpg
.jpg
asset_6a2ddad1092a0a1c326b6d0e738e682b.ttf
asset_6f916ce8ada5d5facf5ad4e1266a486d.ttf
asset_744ce60078c17d86006dd0edabcd59a7.ttf
asset_74d124a3caeac2bea111f3ca2f2dd34a.json
asset_778ffc9fe8773a878e9c30a6304784de.png
.png
asset_781e379934073643ef297455a3ebb1bd.ttf
asset_7b44a7ce9231b2a3cff27b60263449e1.jpg
.jpg
asset_7b97e2b92360ce69bdbaca6b9a914028.ttf
asset_7c519c6f00d65602c16b98bdffddc6f4.png
.png
asset_7d40544b395c5949f4646f5e150fe020.png
.png
asset_7e1296725dca2944dc3f8a0e7e33c229.ttf
asset_7fcbca188e1cb154009192b3c72d54c5.ttf
asset_7ff9ae50fc510b83eb282b8b0da917a4.ttf
asset_83c1ec1f1db9a6416791f7d9d29536f2.ttf
asset_83d0d0700e24da7297be10ae931dd38f.json
asset_8520633523e54ecbaf8c114311aedff0.jpg
asset_88a0fab0f8e60341fbfddd2170a2cb4e.json
asset_8a63007c50160a32142a595bda7cafe3.jpg
.jpg
asset_8b12b3e16d591abc926165fa8f760e3b.json
asset_8d09f2281ac9c99f438fb1c0b5c66d20.json
asset_8d6820f9f2b7f227c1e8568730c33984.json
asset_8e7f807ef943bff1f6d3c2c6e0f3769e.ttf
asset_8ef52a15e44481b41e7db3c7eaf9bb83.ttf
asset_92342ace2ac52e29a7fce51b89c2cbd0.png
.png
asset_94c4ffdcbffeb0570c635d7f8edd8a25.json
asset_9537de256aed99629b279592a828a9de.ttf
asset_970ee79205f7a8dc5b0e371ac355974c.ttf
asset_99a485c3e38ac3d191c652af3d2b549f.ttf
asset_9f918c815b7da237e7c87de5fd5bbd44.jpg
asset_a132ecc4ba5c1517ff83c0fb321bc7fc.png
.png
asset_a4e0725c66112486cc6f4ab4e0025528.png
.png
asset_a5e0abbdbd82bc804c2eb86eff046d52.png
.png
asset_a7063e0c0f0cb546ad45e9e24b27bd3b.ttf
asset_a74fc72d4a4e26d73fa3316137d3676b.ttf
asset_a7b9dc9de5f8f1fb1afbef917619a5ac.png
.png
asset_abd4409b4bf9fdbb2dd62e00fa8f90d5.ttf
asset_ade91f473255991f410f61857696434b.ttf
asset_ae74bb20586a731af545e6b00fe14a09.png
.png
asset_b06871f281fee6b241d60582ae9369b9.ttf
asset_b1ee9db8f2a902b373d189f2c279d81d.png
.png
asset_b3263095df30cb7db78c613e73f9499a.ttf
asset_b49ae8ab2dbccb02c4d11caaacf09eab.ttf
asset_b5a82f6747b7ff4758c7e5aa5c4ae5ec.ttf
asset_b5f984d1c21970b20048461157228e26.ttf
asset_b866f88cb4ed96f3ab44c1d9cf617f9f.ttf
asset_bb0e1479c256e29e7ee92433a5e4b43e.json
asset_bcf79d62aabd731b11a9e56e0bc6eb41.ttf
asset_c2bf0367379f3bd32a9d688825ca10c2.ttf
asset_c30bdd2899caa38dd7263e61342a44f3.ttf
asset_c4046d3271acf576be0b9e9d59f623ce.png
.png
asset_c641dbee1d75892e4d88bdc31560c91b.ttf
asset_c657dd31507ccc5aa4386b2b438cc364.ttf
asset_c79c3606a1cf168006ad3979763c7e0c.png
.png
asset_c8b6e083af3f94009801989c3739425e.ttf
asset_ccb993f31c04afbcca02178df04f4170.png
.png
asset_cdd04e13d4ec83ff0cd13ec8dabdc341.png
.png
asset_d11040e282c4ef58cbc26147a2724a21.ttf
asset_d2285965fe34b05465047401b8595dd0.ttf
asset_d76f726cd8a60b10c0797951e64f0601.ttf
asset_d916e34c419b7246d59efe2dc965ff75.png
.png
asset_d9b6ba595b059fc5d48e8f52c30f73b3.ttf
asset_db78b9359171f24936b16d84f63af378.ttf
asset_ddf6610eb512edae2ba722a7212c3ecc.png
.png
asset_de9cb4dbbccbdd19a01729481c0e9937.png
.png
asset_dfcfde8de7986170aa312244d70b3480.ttf
asset_e20945d7c929279ef7a6f1db184a4470.ttf
asset_e27e11d39520dbfbb6f6aaad335cd010.jpg
asset_e766963327e0a89f9ec2ba88646b6177.ttf
asset_ee6539921d713482b8ccd4d0d23961bb.ttf
asset_efce302bd265ca89fdb318c6698bd1e1.ttf
asset_f1b464ed67998bfcf705c217ccad8bd9.ttf
asset_f1f91feb805137c9283fb766620ec5eb.json
asset_f2add96fdf83aa64a9792252dc34c589.ttf
asset_f2b92e749168e97231fc2bdef61b7bd3.ttf
asset_f337aab857fd04843f0a882ec5726fb3.json
asset_f39b4d4f351495ad948f880253d58943.png
.png
asset_f5b790e2ac193b3d41015edb3551f9b8.png
.png
asset_f607dceec7e5cd1d44c56d5add82d402.ttf
asset_f7ffac600a7a4edb6db9b21c606a6884.ttf
asset_f938e3f4f9585e07c2a2318a99f3669e.ttf
asset_fd0192cf977ddf7b60b4e21e332f6b76.json
asset_fdbedb7e67aa7c0ecad83d9c2fa4dfba.json
asset_fdc01171a7a7ea76b187afcd162dee7d.json
asset_fefe4dcf5ae8935e8f8ba6e5c0c40832.ttf
audience_network.dex
.dex
blazeface.tfl
contours.tfl
fssd_100_8bit_gray_v1.tflite
fssd_100_8bit_v1.tflite
fssd_25_8bit_gray_v1.tflite
fssd_25_8bit_v1.tflite
kernel-manifest.json

Sharing

General

Malware Config

Signatures

Files

Password: infected

com.ieeeiuc.iuccampus

host.exp.exponent.MainActivity

Activities

host.exp.exponent.MainActivity

host.exp.exponent.experience.TvActivity

net.openid.appauth.RedirectUriReceiverActivity

expo.modules.payments.stripe.RedirectUriReceiver

abi40_0_0.expo.modules.payments.stripe.RedirectUriReceiver

abi39_0_0.expo.modules.payments.stripe.RedirectUriReceiver

abi38_0_0.expo.modules.payments.stripe.RedirectUriReceiver

abi37_0_0.expo.modules.payments.stripe.RedirectUriReceiver

com.facebook.CustomTabActivity

Permissions

Receivers

host.exp.exponent.referrer.InstallReferrerReceiver

com.google.android.gms.analytics.AnalyticsReceiver

host.exp.exponent.notifications.receivers.SchedulingTriggerReceiver

host.exp.exponent.notifications.ExpoNotificationsService

expo.modules.notifications.service.NotificationsService

expo.modules.taskManager.TaskBroadcastReceiver

com.facebook.CurrentAccessTokenExpirationBroadcastReceiver

com.facebook.CampaignTrackingReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.gms.measurement.AppMeasurementInstallReferrerReceiver

Services

host.exp.exponent.fcm.ExpoFcmMessagingService

expo.modules.notifications.service.ExpoFirebaseMessagingService

com.google.firebase.messaging.FirebaseMessagingService