05e8c20e8e891c62558b0269b6c5b88851f08365acdd7fc1af8a681a8b8ec192[.]apk[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

05e8c20e8e891c62558b0269b6c5b88851f08365acdd7fc1af8a681a8b8ec192.apk.zip
Size

13.8MB
MD5

5bfd42f0321e43e2f354a735de8cdb39
SHA1

7fb57b9b04e8547604169f48ca1524a8f6dc6820
SHA256

7018157af0d89484659bece19588150d8dff1ca1fec33b0b291e14e25e6e4fee
SHA512

293b7d892f11b7cf643e5996f628d0fc8c0dfcbc77e15d2f5505055d30547344a617b2688e1982e6082f869c68dff11aa018b82c054a030e02a3b47aef25bfc0
SSDEEP

393216:+J2mvSG+rSEw92AVJmdNaPFNq3HBcuMPL1zmL25B:+JTSHh7IPq3GN1iL25B

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 6 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE

Files

05e8c20e8e891c62558b0269b6c5b88851f08365acdd7fc1af8a681a8b8ec192.apk.zip
.zip

Password: infected
05e8c20e8e891c62558b0269b6c5b88851f08365acdd7fc1af8a681a8b8ec192.apk
.apk android arch:arm

com.pas.webcam

com.pas.webcam.Configuration

Activities

com.pas.ipwebcamftp.TaskerAction

com.twofortyfouram.locale.intent.action.EDIT_SETTING

com.pas.webcam.Configuration

android.intent.action.MAIN

com.pas.webcam.Rolling

android.intent.action.RUN
android.intent.action.MAIN
android.hardware.usb.action.USB_DEVICE_ATTACHED

com.pas.webcam.QRCheatActivity

android.intent.action.VIEW

com.dropbox.core.android.AuthActivity

android.intent.action.VIEW

com.pas.ipwebcamftp.activities.DropboxFileworksAuth

com.pas.fileworks.FILE_SERVICE_AUTH

com.pas.ipwebcamftp.activities.EmailFileworksAuth

com.pas.fileworks.FILE_SERVICE_AUTH

com.pas.ipwebcamftp.activities.FtpFileworksAuth

com.pas.fileworks.FILE_SERVICE_AUTH

com.pas.ipwebcamftp.activities.SftpFileworksAuth

com.pas.fileworks.FILE_SERVICE_AUTH

com.pas.ipwebcamftp.activities.SdCardFileworksAuth

com.pas.fileworks.FILE_SERVICE_AUTH

com.ipaulpro.afilechooser.FileChooserActivity

android.intent.action.GET_CONTENT

Permissions

android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.WAKE_LOCK
android.permission.ACCESS_WIFI_STATE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.FOREGROUND_SERVICE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.CAMERA
android.permission.RECORD_AUDIO
android.permission.SYSTEM_ALERT_WINDOW
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.CHANGE_WIFI_MULTICAST_STATE
android.permission.READ_EXTERNAL_STORAGE
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
com.google.android.gms.permission.AD_ID

Receivers

com.pas.webcam.TaskerReceiver

com.twofortyfouram.locale.intent.action.FIRE_SETTING

com.pas.webcam.BootUpReceiver

android.intent.action.BOOT_COMPLETED

com.pas.ipwebcamftp.FileReceiver

com.pas.webcam.RECORDED_FILE

Services

com.pas.webcam.WebServer

android.intent.webcam.MAIN
USB_VID.txt
cacert.pem
ipwebcam.js
.js
plugin_builtins.js
.js
zepto.min.js
.js

Sharing

General

Malware Config

Signatures

Files

Password: infected

com.pas.webcam

com.pas.webcam.Configuration

Activities

com.pas.ipwebcamftp.TaskerAction

com.pas.webcam.Configuration

com.pas.webcam.Rolling

com.pas.webcam.QRCheatActivity

com.dropbox.core.android.AuthActivity

com.pas.ipwebcamftp.activities.DropboxFileworksAuth

com.pas.ipwebcamftp.activities.EmailFileworksAuth

com.pas.ipwebcamftp.activities.FtpFileworksAuth

com.pas.ipwebcamftp.activities.SftpFileworksAuth

com.pas.ipwebcamftp.activities.SdCardFileworksAuth

com.ipaulpro.afilechooser.FileChooserActivity

Permissions

Receivers

com.pas.webcam.TaskerReceiver

com.pas.webcam.BootUpReceiver

com.pas.ipwebcamftp.FileReceiver

Services

com.pas.webcam.WebServer