Resubmissions

10/10/2023, 13:34

231010-qvd2zafg62 7

10/10/2023, 13:34

231010-qt62csdg6w 7

General

  • Target

    im.mercury.android_build03_beta2.apk

  • Size

    1.5MB

  • MD5

    cb5fe769678ac8cd75f793847171c1db

  • SHA1

    e0e9c04c2c3e5d63aee60f590fcaf1aa030b0660

  • SHA256

    ea0869ca7681b1bd1f888639eb6c55b0316962fbd71c72afb1f8cb830542394f

  • SHA512

    4078a693220bd2a78a3521a4fa2d698b1433cca5852f737f4fe0e7d081495404513c3284b79c78db72f6303276fcd6ff933bf323d66e32ca6cced8a07ee9a7f1

  • SSDEEP

    49152:3GFzsniDriNTNgoWWC/P0Fu3m6HYCLuBG+k6+ou/:ysGm1HBE8QmGYisGZjF

Score
7/10

Malware Config

Signatures

  • Requests dangerous framework permissions 2 IoCs

Files

  • im.mercury.android_build03_beta2.apk
    .apk android arch:arm arch:mips arch:x86

    im.mercury.android

    im.mercury.android.msn.account.AccountsActivity


  • DefaultSettings.xml
    .xml
  • EmptyDisplayPicture.png
    .png
  • Locations.xml
    .xml
  • MSN7.zip
    .zip
  • icondef.xml
    .xml
  • androiddp.png
    .png
  • ar_KW.xml
    .xml
  • da_DK.xml
    .xml
  • de_DE.xml
    .xml
  • el_GR.xml
    .xml
  • en_GB.xml
    .xml
  • es_CO.xml
    .xml
  • es_ES.xml
    .xml
  • es_MX.xml
    .xml
  • et_EE.xml
    .xml
  • fi_FI.xml
    .xml
  • fr_FR.xml
    .xml
  • hr_HR.xml
    .xml
  • hu_HU.xml
    .xml
  • it_IT.xml
    .xml
  • ja_JP.xml
    .xml
  • lt_LT.xml
    .xml
  • mk_MK.xml
    .xml
  • nl_NL.xml
    .xml
  • no_NO.xml
    .xml
  • pl_PL.xml
    .xml
  • pt_BR.xml
    .xml
  • pt_PT.xml
    .xml
  • ru_RU.xml
    .xml
  • sl_SI.xml
    .xml
  • sr_RS.xml
    .xml
  • sv_SE.xml
    .xml
  • th_TH.xml
    .xml
  • tr_TR.xml
    .xml
  • zh_CN.xml
    .xml
  • zh_TW.xml
    .xml

Android Permissions

im.mercury.android_build03_beta2.apk

Permissions

android.permission.INTERNET

android.permission.VIBRATE

android.permission.RECORD_AUDIO

android.permission.WAKE_LOCK

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.RECEIVE_BOOT_COMPLETED