0c1a9d85c3dccdc043c61a1f51beabbb380338eaae58d6dfc96e832350af33d5[.]apk[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

0c1a9d85c3dccdc043c61a1f51beabbb380338eaae58d6dfc96e832350af33d5.apk.zip
Size

20.5MB
MD5

c28e91f6cf64f1de9f6698a5e1e2b250
SHA1

7ca8ee440e0a1fdc286fc36185f597ada7c2c04a
SHA256

e55ed219e69f7010c64c98455c13f27fca07b9ae93b301ca3ba5ab4c0d8e1ea0
SHA512

c47ac5ecd3c3415fa6d15ec8bf3f2d36c7d3eaa5499a7cbd41f940303e8f91b096f6b82f1fcf5f789cce4528904f989633232db750bc2319a5a940d657502d17
SSDEEP

393216:BySoIGijjDmugVubzXXfogas2ajXVlawCmSiO9jt8QkuQl2F3KN3A/b+II0Ig7bt:BJo6jq8XXfys2a7Da3vZ87zl8qAa0I+

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 1 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE

Files

0c1a9d85c3dccdc043c61a1f51beabbb380338eaae58d6dfc96e832350af33d5.apk.zip
.zip

Password: infected
0c1a9d85c3dccdc043c61a1f51beabbb380338eaae58d6dfc96e832350af33d5.apk
.apk android arch:x86

com.bubblesoft.android.bubbleupnp

com.bubblesoft.android.bubbleupnp.MainActivity

Activities

com.dropbox.core.android.AuthActivity

android.intent.action.VIEW

com.bubblesoft.android.bubbleupnp.MainActivity

android.intent.action.MAIN
android.intent.action.SEARCH
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.SEND
android.intent.action.SEND_MULTIPLE

com.bubblesoft.android.bubbleupnp.TraktPrefsActivity

android.intent.action.VIEW

com.bubblesoft.android.bubbleupnp.AppWidgetPrefsActivity41

android.appwidget.action.APPWIDGET_CONFIGURE

com.bubblesoft.android.bubbleupnp.AppWidgetPrefsActivity42

android.appwidget.action.APPWIDGET_CONFIGURE

com.bubblesoft.android.bubbleupnp.AppWidgetPrefsActivity44

android.appwidget.action.APPWIDGET_CONFIGURE

Permissions

android.permission.WRITE_EXTERNAL_STORAGE
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.WAKE_LOCK
android.permission.CHANGE_WIFI_MULTICAST_STATE
android.permission.BROADCAST_STICKY
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.REORDER_TASKS
android.permission.FOREGROUND_SERVICE
android.permission.SYSTEM_ALERT_WINDOW
android.permission.USE_CREDENTIALS
com.sony.mobile.permission.SYSTEM_UI_VISIBILITY_EXTENSION

Receivers

com.bubblesoft.android.bubbleupnp.StartupIntentReceiver

android.intent.action.BOOT_COMPLETED

com.bubblesoft.android.bubbleupnp.RemotePlaybackControlReceiver

android.intent.action.MEDIA_BUTTON

com.bubblesoft.android.bubbleupnp.MainAppWidgetProvider41

android.appwidget.action.APPWIDGET_UPDATE

com.bubblesoft.android.bubbleupnp.MainAppWidgetProvider42

android.appwidget.action.APPWIDGET_UPDATE

com.bubblesoft.android.bubbleupnp.MainAppWidgetProvider44

android.appwidget.action.APPWIDGET_UPDATE
android.appwidget.action.ACTION_APPWIDGET_DELETED

com.bubblesoft.android.bubbleupnp.StartServiceReceiver

com.bubblesoft.android.bubbleupnp.START_SERVICE
com.bubblesoft.android.bubbleupnp.STOP_SERVICE
com.bubblesoft.android.bubbleupnp.SET_RENDERER
com.bubblesoft.android.bubbleupnp.TOGGLE_AUDIO_CAST
com.bubblesoft.android.bubbleupnp.VOLUME_INC
com.bubblesoft.android.bubbleupnp.VOLUME_DEC

com.amazon.device.iap.ResponseReceiver

com.amazon.inapp.purchasing.NOTIFY

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY
android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW
android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.TIME_SET
android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

Services

com.bubblesoft.android.bubbleupnp.ChooserTargetService

android.service.chooser.ChooserTargetService

com.bubblesoft.android.bubbleupnp.xmod.RemoteService

BIND_SERVICE
AndroidClockMono-Thin.ttf
ChromecastPrefsActivity.html
.html
HideDevicesActivity.html
.html
LocalRendererPrefsActivity.html
.html
MaterialIcons-Regular.ttf
RendererDevicePrefsActivity.html
.html
Roboto-Bold.ttf
Roboto-Light.ttf
Roboto-Medium.ttf
Roboto-Regular.ttf
RobotoCondensed-Regular.ttf
android-iconify-fontawesome.ttf
android-iconify-ionicons.ttf
changelog.html
consentform.html
.html .js
help.css
privacy_policy.html
.html

Sharing

General

Malware Config

Signatures

Files

Password: infected

com.bubblesoft.android.bubbleupnp

com.bubblesoft.android.bubbleupnp.MainActivity

Activities

com.dropbox.core.android.AuthActivity

com.bubblesoft.android.bubbleupnp.MainActivity

com.bubblesoft.android.bubbleupnp.TraktPrefsActivity

com.bubblesoft.android.bubbleupnp.AppWidgetPrefsActivity41

com.bubblesoft.android.bubbleupnp.AppWidgetPrefsActivity42

com.bubblesoft.android.bubbleupnp.AppWidgetPrefsActivity44

Permissions

Receivers

com.bubblesoft.android.bubbleupnp.StartupIntentReceiver

com.bubblesoft.android.bubbleupnp.RemotePlaybackControlReceiver

com.bubblesoft.android.bubbleupnp.MainAppWidgetProvider41

com.bubblesoft.android.bubbleupnp.MainAppWidgetProvider42

com.bubblesoft.android.bubbleupnp.MainAppWidgetProvider44

com.bubblesoft.android.bubbleupnp.StartServiceReceiver

com.amazon.device.iap.ResponseReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

Services

com.bubblesoft.android.bubbleupnp.ChooserTargetService

com.bubblesoft.android.bubbleupnp.xmod.RemoteService