811870062b48f0cf4b06c0557af6f19ce6f95d677e3e9b55a154e7ed7b075027[.]apk[.]zip

General

Target

811870062b48f0cf4b06c0557af6f19ce6f95d677e3e9b55a154e7ed7b075027.apk.zip
Size

5.3MB
MD5

8013a4f8f671437246124d28a28df1f0
SHA1

db78ac5514186863915d2740cbd8468a67034780
SHA256

c501ed49f40b6ca84151121c64d7e8f4f86cada9a1a8e7578a25c42d33169372
SHA512

75ed06c7334a3f33b0d18e5270fcd31cdc418b000d04b163f6cedc28e54c734e7402413df2d7bb0ef2883a99e98cb8de794ccc6ca274c1c9e04df47e2e7876e5
SSDEEP

98304:xZBn857MxBNKccRJK1TduDiwKyOhgjWfM1hLC7IHGd7QYiXPTD:d85oE4Td1wKyhjWE1oUIcfTD

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 4 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION

Files

811870062b48f0cf4b06c0557af6f19ce6f95d677e3e9b55a154e7ed7b075027.apk.zip
.zip

Password: infected
811870062b48f0cf4b06c0557af6f19ce6f95d677e3e9b55a154e7ed7b075027.apk
.apk android arch:arm64 arch:arm arch:x86 arch:x64

com.app.strix

com.app.strix.activitys.Loading

Activities

com.app.strix.activitys.Loading

android.intent.action.MAIN

com.app.strix.cast.ExpandedControlsActivity

android.intent.action.MAIN

Permissions

android.permission.INTERNET
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_EXTERNAL_STORAGE
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.REQUEST_INSTALL_PACKAGES
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.BLUETOOTH
android.permission.FOREGROUND_SERVICE
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
android.permission.WAKE_LOCK
com.google.android.c2dm.permission.RECEIVE

Receivers

com.startapp.sdk.adsbase.remoteconfig.BootCompleteListener

android.intent.action.BOOT_COMPLETED

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

io.moneytise.support.NetworkStateReceiver

android.net.conn.CONNECTIVITY_CHANGE

Services

com.app.strix.inetrfaces.FCMService

com.google.firebase.MESSAGING_EVENT

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

io.moneytise.service.MoneytiserService

android.net.VpnService
changelog.txt
dmca.txt

Sharing

General

Malware Config

Signatures

Files

Password: infected

com.app.strix

com.app.strix.activitys.Loading

Activities

com.app.strix.activitys.Loading

com.app.strix.cast.ExpandedControlsActivity

Permissions

Receivers

com.startapp.sdk.adsbase.remoteconfig.BootCompleteListener

com.google.firebase.iid.FirebaseInstanceIdReceiver

io.moneytise.support.NetworkStateReceiver

Services

com.app.strix.inetrfaces.FCMService

com.google.firebase.messaging.FirebaseMessagingService

io.moneytise.service.MoneytiserService