803d0815f8b757a564cf2367b9c6322de3a69ef5c95ceb9c0c96f44234a3f78f[.]apk[.]zip

General

Target

803d0815f8b757a564cf2367b9c6322de3a69ef5c95ceb9c0c96f44234a3f78f.apk.zip
Size

4.9MB
MD5

8b3ef5a5e0b9524d30e5a97e97403cad
SHA1

82e309383954446101190979472d6ebfce11f897
SHA256

7a7fc65f46d18d5ed793cc07a0945f85c98c616f0149e8a161a745dd08c88176
SHA512

c0cbbcd4a6e47eb955806ba358d9993bcee8bbdafc8f0c423b99e861008d4c69b6509994f5c88da7717e7b75589363e5a4096c60ded83617faf9f59dd308c371
SSDEEP

98304:avTHHaGiSAdR1k9BQmuK/KiD3OV2N05gPco9:avTnT+dRm2mlfe2N0+V9

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 2 IoCs

description	ioc
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE

Files

803d0815f8b757a564cf2367b9c6322de3a69ef5c95ceb9c0c96f44234a3f78f.apk.zip
.zip

Password: infected
803d0815f8b757a564cf2367b9c6322de3a69ef5c95ceb9c0c96f44234a3f78f.apk
.apk android arch:arm64 arch:arm

dev.dworks.apps.anexplorer.pro

dev.dworks.apps.anexplorer.DocumentsActivity

Activities

dev.dworks.apps.anexplorer.DocumentsActivity

android.intent.action.OPEN_DOCUMENT
android.intent.action.CREATE_DOCUMENT
android.intent.action.GET_CONTENT
android.provider.action.MANAGE_ROOT
android.intent.action.OPEN_DOCUMENT_TREE
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.MAIN
android.intent.action.MAIN
android.service.quicksettings.action.QS_TILE_PREFERENCES
android.intent.action.VIEW
android.media.action.MEDIA_PLAY_FROM_SEARCH

dev.dworks.apps.anexplorer.setting.SettingsActivity

android.intent.action.APPLICATION_PREFERENCES

dev.dworks.apps.anexplorer.NoteActivity

android.intent.action.VIEW

dev.dworks.apps.anexplorer.common.WebviewActivity

android.intent.action.VIEW

dev.dworks.apps.anexplorer.ShareDeviceActivity

android.intent.action.SEND
android.intent.action.SEND_MULTIPLE

Permissions

android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.KILL_BACKGROUND_PROCESSES
android.permission.ACCESS_SUPERUSER
android.permission.INTERNET
android.permission.ACCESS_WIFI_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.REQUEST_INSTALL_PACKAGES
android.permission.REQUEST_DELETE_PACKAGES
android.permission.FOREGROUND_SERVICE
android.permission.QUERY_ALL_PACKAGES
com.android.launcher.permission.INSTALL_SHORTCUT
android.permission.MANAGE_EXTERNAL_STORAGE
com.android.vending.BILLING
android.permission.USE_BIOMETRIC
android.permission.USE_FINGERPRINT
android.permission.WAKE_LOCK
android.permission.RECEIVE_BOOT_COMPLETED

Receivers

dev.dworks.apps.anexplorer.receiver.PackageReceiver

android.intent.action.PACKAGE_FULLY_REMOVED
android.intent.action.PACKAGE_DATA_CLEARED

dev.dworks.apps.anexplorer.receiver.MountReceiver

android.intent.action.MEDIA_MOUNTED
android.intent.action.MEDIA_UNMOUNTED
android.os.storage.action.VOLUME_STATE_CHANGED

dev.dworks.apps.anexplorer.receiver.ConnectionsReceiver

dev.dworks.apps.anexplorer.pro.action.START_WEBSERVER
dev.dworks.apps.anexplorer.pro.action.STOP_WEBSERVER
dev.dworks.apps.anexplorer.pro.action.START_LISTENING
dev.dworks.apps.anexplorer.pro.action.STOP_LISTENING

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY
android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW
android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.TIME_SET
android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.work.diagnostics.REQUEST_DIAGNOSTICS

Services

dev.dworks.apps.anexplorer.service.ServerTileService

android.service.quicksettings.action.QS_TILE

dev.dworks.apps.anexplorer.service.TransferTileService

android.service.quicksettings.action.QS_TILE
MIMETypeMap

Sharing

General

Malware Config

Signatures

Files

Password: infected

dev.dworks.apps.anexplorer.pro

dev.dworks.apps.anexplorer.DocumentsActivity

Activities

dev.dworks.apps.anexplorer.DocumentsActivity

dev.dworks.apps.anexplorer.setting.SettingsActivity

dev.dworks.apps.anexplorer.NoteActivity

dev.dworks.apps.anexplorer.common.WebviewActivity

dev.dworks.apps.anexplorer.ShareDeviceActivity

Permissions

Receivers

dev.dworks.apps.anexplorer.receiver.PackageReceiver

dev.dworks.apps.anexplorer.receiver.MountReceiver

dev.dworks.apps.anexplorer.receiver.ConnectionsReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.diagnostics.DiagnosticsReceiver

Services

dev.dworks.apps.anexplorer.service.ServerTileService

dev.dworks.apps.anexplorer.service.TransferTileService