2e9e2299ac958ab2dae7fff78400993a8029bd6ff0e58b3079053ee30742eb95[.]apk[.]zip

General

Target

2e9e2299ac958ab2dae7fff78400993a8029bd6ff0e58b3079053ee30742eb95.apk.zip
Size

6.3MB
MD5

89e31b19f8978a1c017e44ce536df398
SHA1

5c617d59f8bd42cc83b38a5f1e5dad8c1e5f5c01
SHA256

e287a18a1b5a1d04efc5c185853de850bcba77e33cffcfc69a483b29de6f34fd
SHA512

2f0942aa2655febdb64012432043794a74d24333413790301c3ac493a6a0c3377faafa3f5a6495721f23aee37ef3cdd20db8b3cf1294297cda29707cf28a5e62
SSDEEP

196608:QQTerD8IQKBNs6+LVT5U/kDQ/20+ml2vCckID8:ZTerT+95UjuHkO8

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 4 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION

Files

2e9e2299ac958ab2dae7fff78400993a8029bd6ff0e58b3079053ee30742eb95.apk.zip
.zip

Password: infected
2e9e2299ac958ab2dae7fff78400993a8029bd6ff0e58b3079053ee30742eb95.apk
.apk android

com.app.strix

com.app.strix.activitys.Loading

Activities

com.app.strix.activitys.Loading

android.intent.action.MAIN

com.app.strix.cast.ExpandedControlsActivity

android.intent.action.MAIN

Permissions

android.permission.INTERNET
android.permission.WAKE_LOCK
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_EXTERNAL_STORAGE
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.REQUEST_INSTALL_PACKAGES
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.BLUETOOTH
android.permission.FOREGROUND_SERVICE
android.permission.BIND_ACCESSIBILITY_SERVICE
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
com.google.android.c2dm.permission.RECEIVE

Receivers

brdat.sdk.bcast_recv

android.intent.action.MEDIA_EJECT
android.intent.action.MEDIA_MOUNTED
android.intent.action.MEDIA_UNMOUNTED
android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED
android.intent.action.BOOT_COMPLETED
android.intent.action.ACTION_BATTERY_OK
android.intent.action.PACKAGE_REPLACED
android.intent.action.MY_PACKAGE_REPLACED
android.intent.action.PACKAGE_REMOVED
android.intent.action.PACKAGE_FULLY_REMOVED

io.ninjamon.support.NetworkStateReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.startapp.sdk.adsbase.remoteconfig.BootCompleteListener

android.intent.action.BOOT_COMPLETED

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

Services

com.app.strix.inetrfaces.FCMService

com.google.firebase.MESSAGING_EVENT

top.wuhaojie.installerlibrary.InstallAccessibilityService

android.accessibilityservice.AccessibilityService

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT
changelog.txt
dmca.txt

Sharing

General

Malware Config

Signatures

Files

Password: infected

com.app.strix

com.app.strix.activitys.Loading

Activities

com.app.strix.activitys.Loading

com.app.strix.cast.ExpandedControlsActivity

Permissions

Receivers

brdat.sdk.bcast_recv

io.ninjamon.support.NetworkStateReceiver

com.startapp.sdk.adsbase.remoteconfig.BootCompleteListener

com.google.firebase.iid.FirebaseInstanceIdReceiver

Services

com.app.strix.inetrfaces.FCMService

top.wuhaojie.installerlibrary.InstallAccessibilityService

com.google.firebase.messaging.FirebaseMessagingService