Overview

overview

7

Static

static

7

_iplogger_...27.apk

android-9-x86

7

aps-mraid.js

windows7-x64

1

aps-mraid.js

windows10-2004-x64

1

dtb-m.js

windows7-x64

1

dtb-m.js

windows10-2004-x64

1

omsdk-v1.js

windows7-x64

1

omsdk-v1.js

windows10-2004-x64

1

tt_nd

ubuntu-18.04-amd64

user_custom_script.js

windows7-x64

1

user_custom_script.js

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    _iplogger_17602527.apk

  • Size

    22.4MB

  • MD5

    a42391c3d598884b295df22b94f4220c

  • SHA1

    e9cc6cb6e840bd0184e0d84102bbf3345b1f8238

  • SHA256

    ea0dd621ef5589de46fbc219c2f07b50428f984d4e4805c27b83e721fa88281a

  • SHA512

    28f2e5d0c4447ed5fdb9c5d5fa4868bdad868a1d5ad45944439cd56a445e168cc4b44e3a1ebd9ba4d3cf7b982f57cb23fde3796c0290e5ef9a920b574e9868fa

  • SSDEEP

    393216:ZApMA21NdpaTDnK/VzdqUjA8pYCV1GZwwoWa7P1MJEzvA/ErnyHJnruWYckizzC:ZAp61RsrK/VzdqSpT+E7P1MJEDlrnypm

Score
7/10

Malware Config

Signatures

  • Requests dangerous framework permissions 5 IoCs

Files

  • _iplogger_17602527.apk
    .apk android arch:arm64 arch:arm

    com.wiplogger_17602527

    com.appsgeyser.multiTabApp.MainNavigationActivity


  • a4g.apdnetwork
  • adcolony.apdnetwork
  • adcolony.bmnetwork
  • admob.apdnetwork
  • amazon.bmnetwork
  • applovin.apdnetwork
  • aps-mraid.js
    .js
  • aps_mobile_client_config.json
  • audience_network.dex
    .dex
  • bidmachine.apdnetwork
  • criteo.bmnetwork
  • dtb-m.js
    .js
  • dynamic_default.json
  • facebook.apdnetwork
  • ironsource.apdnetwork
  • meta_audience.bmnetwork
  • mraid.apdnetwork
  • nast.apdnetwork
  • notsy.apdnetwork
  • notsy.bmnetwork
  • omsdk-v1.js
    .js
  • pangle.bmnetwork
  • splash_screen.png
    .png
  • tt_mime_type.pro
  • tt_na.czl
  • tt_nd
    .elf linux x86
  • user_custom_script.js
    .js
  • vast.apdnetwork

Android Permissions

_iplogger_17602527.apk

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

com.android.launcher.permission.INSTALL_SHORTCUT

android.webkit.permission.PLUGIN

android.permission.SYSTEM_ALERT_WINDOW

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.WAKE_LOCK

android.permission.ACCESS_WIFI_STATE

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.CAMERA

android.permission.CHANGE_WIFI_STATE

android.permission.QUICKBOOT_POWERON

android.permission.NFC

android.permission.VIBRATE

android.permission.READ_EXTERNAL_STORAGE

com.android.alarm.permission.SET_ALARM

android.permission.FOREGROUND_SERVICE

com.google.android.gms.permission.AD_ID

com.android.vending.BILLING

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

com.wiplogger_17602527.permission.C2D_MESSAGE

android.permission.POST_NOTIFICATIONS

com.google.android.c2dm.permission.RECEIVE

com.sec.android.provider.badge.permission.READ

com.sec.android.provider.badge.permission.WRITE

com.htc.launcher.permission.READ_SETTINGS

com.htc.launcher.permission.UPDATE_SHORTCUT

com.sonyericsson.home.permission.BROADCAST_BADGE

com.sonymobile.home.permission.PROVIDER_INSERT_BADGE

com.anddoes.launcher.permission.UPDATE_COUNT

com.majeur.launcher.permission.UPDATE_BADGE

com.huawei.android.launcher.permission.CHANGE_BADGE

com.huawei.android.launcher.permission.READ_SETTINGS

com.huawei.android.launcher.permission.WRITE_SETTINGS

android.permission.READ_APP_BADGE

com.oppo.launcher.permission.READ_SETTINGS

com.oppo.launcher.permission.WRITE_SETTINGS

me.everything.badger.permission.BADGE_COUNT_READ

me.everything.badger.permission.BADGE_COUNT_WRITE

com.applovin.array.apphub.permission.BIND_APPHUB_SERVICE

android.permission.WRITE_EXTERNAL_STORAGE