835c14d38926c88ee9a51a0b6d8c7893a76e3bf4e8d1978b650e178c88b1e07e[.]7z

Sharing

Target

835c14d38926c88ee9a51a0b6d8c7893a76e3bf4e8d1978b650e178c88b1e07e.7z
Size

1.0MB
MD5

79c5a544435544e0c7499a7fc6345e7c
SHA1

a60feb236a07171d25669be9dd952f037732ad76
SHA256

6da31945a49261fea8dc8c8602f821a0f77ac92f48f3ee9203d0f7e516a228f4
SHA512

6966373857821f9c1f96ccbf6c44deabf54ae2a6aeddfa3b5f147e8f87d04a73960d5721c5c0f0a4bf27bcf9c3ea74e9b8544e80e1af051152e6b791a38d858d
SSDEEP

24576:yYI6Vh9UyiQ+k5t5CblV2NqDBgUiVUYddKUSz+3xWkCgY9bQUxW:O6NpiQl7CblVPDBgXy+3IkCgYdI

Score

7^/10

Requests dangerous framework permissions 3 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE

835c14d38926c88ee9a51a0b6d8c7893a76e3bf4e8d1978b650e178c88b1e07e.7z
.7z

Password: infected
835c14d38926c88ee9a51a0b6d8c7893a76e3bf4e8d1978b650e178c88b1e07e
.apk android

mobi.upgk1.kcjx

com.ay.jrrp.Dmesy

Activities

.MainMirroredActivity

android.intent.action.SEND

.CameraPreview

rmqakchqdnpgdhipghcrgbdgaodafdohjuc

com.ay.jrrp.Dmesy

android.intent.action.MAIN

Permissions

android.permission.READ_PHONE_STATE
android.permission.SYSTEM_ALERT_WINDOW
android.permission.CAMERA
android.permission.GET_TASKS
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.INTERNET
android.permission.ACCESS_WIFI_STATE
android.permission.ACCESS_NETWORK_STATE

Receivers

cn.mnnmb.b.fsa.Bfuc

android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.USER_PRESENT
android.intent.action.MEDIA_MOUNTED
android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.DOWNLOAD_COMPLETE

cn.mnnmb.b.fsa.Bfuc

android.intent.action.PACKAGE_REMOVED
android.intent.action.PACKAGE_ADDED

Services
ck
data.jpg
pd
pkg