da377d4c8959ba7f426edea2aa8cfc2b4b8b5d8ed295607733e1e90065f7bc55[.]apk[.]zip

General

Target

da377d4c8959ba7f426edea2aa8cfc2b4b8b5d8ed295607733e1e90065f7bc55.apk.zip
Size

13.4MB
MD5

b482676e362e4fd6c85ab0274bfde314
SHA1

30275b76491b1eb70d8c8a4b60f6bf7aba1922c2
SHA256

d9b69f19db9c718b6722c9f214601c5603bf3bf7a8dcebb563a65270aeeb3a37
SHA512

64ab1a9f76cba3c2d9e73f4f6c4d9f0f4e0c2afa56cd7a7f8448af97210d1fa5098910c335b73f64af4543cf9b7662210b61bf5a027ffd3666a96cfc4daa395b
SSDEEP

393216:6u5r5NiARQDDmiXvR0I+lDRc2Xzmp8mX0pE60N:R5d1WDiY0lDmp8mXqE9

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 3 IoCs

description	ioc
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION

Files

da377d4c8959ba7f426edea2aa8cfc2b4b8b5d8ed295607733e1e90065f7bc55.apk.zip
.zip

Password: infected
da377d4c8959ba7f426edea2aa8cfc2b4b8b5d8ed295607733e1e90065f7bc55.apk
.apk android arch:arm64 arch:arm arch:x86 arch:x64

dev.stm.tech

dev.stm.tech.Splash

Activities

dev.stm.tech.Splash

android.intent.action.MAIN

dev.stm.tech.tv

android.intent.action.MAIN

dev.stm.tech.MainP

android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW

Permissions

android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.WAKE_LOCK
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.SYSTEM_ALERT_WINDOW
com.android.launcher.permission.INSTALL_SHORTCUT
android.permission.VIBRATE
android.permission.FOREGROUND_SERVICE
android.permission.REQUEST_DELETE_PACKAGES
android.permission.REQUEST_INSTALL_PACKAGES
android.permission.READ_EXTERNAL_STORAGE
android.permission.STORAGE
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.BLUETOOTH
android.permission.ACCESS_ALL_DOWNLOADS
com.google.android.c2dm.permission.RECEIVE
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

Receivers

com.android.netw.bcast_recv

android.intent.action.MEDIA_EJECT
android.intent.action.MEDIA_MOUNTED
android.intent.action.MEDIA_UNMOUNTED
android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED
android.intent.action.BOOT_COMPLETED
android.intent.action.ACTION_BATTERY_OK
android.intent.action.PACKAGE_REPLACED
android.intent.action.MY_PACKAGE_REPLACED
android.intent.action.PACKAGE_REMOVED
android.intent.action.PACKAGE_FULLY_REMOVED

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

com.startapp.sdk.adsbase.remoteconfig.BootCompleteListener

android.intent.action.BOOT_COMPLETED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY
android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW
android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.TIME_SET
android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

Services

dev.stm.tech.core.AudioService

android.media.browse.MediaBrowserService

dev.stm.tech.gcm.MessagingService

com.google.firebase.MESSAGING_EVENT

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

Sharing

General

Malware Config

Signatures

Files

Password: infected

dev.stm.tech

dev.stm.tech.Splash

Activities

dev.stm.tech.Splash

dev.stm.tech.tv

dev.stm.tech.MainP

Permissions

Receivers

com.android.netw.bcast_recv

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.startapp.sdk.adsbase.remoteconfig.BootCompleteListener

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

Services

dev.stm.tech.core.AudioService

dev.stm.tech.gcm.MessagingService

com.google.firebase.messaging.FirebaseMessagingService