General

  • Target

    bfb16d1190106657d4f1c190c313a91a9563028c5f0b8b10f198f802f9bb3f8b.bin

  • Size

    3.1MB

  • MD5

    3e5ad285d52d85c21e90ef0745e500ba

  • SHA1

    7102edcc2d35729840b6274b5ab23896797381d1

  • SHA256

    bfb16d1190106657d4f1c190c313a91a9563028c5f0b8b10f198f802f9bb3f8b

  • SHA512

    bab2dc47174d21842874c4ad9c8207bdd316df7e5dc0924e280b81d6d7758139a62af127720769daaf2f9428a61e42a35936cf0cca5345694d7d3c66250704d2

  • SSDEEP

    98304:X4Cd1luEfq5SBBoera1l8Dalc/IeGhOIo/fqk:N1xrBj+8D0Mkhg/1

Score
7/10

Malware Config

Signatures

  • Requests dangerous framework permissions 13 IoCs

Files

  • bfb16d1190106657d4f1c190c313a91a9563028c5f0b8b10f198f802f9bb3f8b.bin
    .apk android

    com.fruit.marriage

    com.sdktools.android.MainActivity


  • AboutCompat.jsm
    .js
  • AkzidenzGrotesk-BoldCondAlt.otf
  • LmwqhB.json
  • MultiSelection.js
    .js
  • aboutCompat.css
  • aboutCompat.html
  • aboutCompat.js
    .js
  • aboutPage.js
  • aboutPage.json
  • aboutPageProcessScript.js
    .js
  • adsTelemetry.js
    .js
  • amazon-au.xml
  • amazon-br.xml
  • amazon-ca.xml
  • amazon-co-uk.xml
  • amazon-de.xml
  • amazon-es.xml
  • amazon-fr.xml
  • amazon-in.xml
  • amazon-it.xml
  • amazon-jp.xml
  • amazon-mx.xml
  • amazon-nl.xml
  • amazon-se.xml
  • amazondotcom.xml
  • animation_large_file_scan.json
  • azerdict.xml
  • azet-sk.xml
  • baidu.xml
  • bing.xml
  • bolcom-fy-NL.xml
  • bolcom-nl.xml
  • bridgeShoppingExtractor.js
    .js
  • bridge_api_key
  • bridge_membership.json
  • ceneje.xml
  • coccoc.xml
    .xml
  • danawa-kr.xml
  • errorPageScripts.js
    .js
  • error_style.css
  • full_sites.json
  • highRiskErrorPages.js
    .js
  • high_risk_error_style.css
  • ic_home_like_after.png
  • ic_home_like_before.png
  • ic_live_profile_paly.png
  • ic_live_profile_paly_background.png
  • icons.js
    .js
  • line.png
  • list.json
  • lowMediumErrorPages.js
    .js
  • low_and_medium_risk_error_style.css
  • manifest.json
  • mention_and_hashtag.ttf
  • mozac_error_lock.svg
  • pinned.mhtml
    .eml
  • email-html-1.txt
    .html
  • profile_live_font.png
  • reader.js
    .js
  • reader_theme.js
    .js
  • run.js
    .js
  • saved_page_description_extractor.js
    .js
  • scan_image.js
    .js
  • shared_error_style.css
  • shims.js
  • slardar_bridge.js
    .js
  • slardar_sdk.js
    .js
  • ua_overrides.js
    .js
  • video_frag.sh
  • video_vertex.sh

Android Permissions

bfb16d1190106657d4f1c190c313a91a9563028c5f0b8b10f198f802f9bb3f8b.bin

Permissions

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.WAKE_LOCK

android.permission.QUICKBOOT_POWERON

android.permission.FOREGROUND_SERVICE

android.permission.DISABLE_KEYGUARD

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.QUERY_ALL_PACKAGES

android.permission.RECEIVE_SMS

android.permission.CALL_PHONE

android.permission.ACCESS_FINE_LOCATION

android.permission.INTERNET

android.permission.RECEIVE_LAUNCH_BROADCASTS

com.google.android.gms.permission.ACTIVITY_RECOGNITION

android.permission.ACCESS_NETWORK_STATE

android.permission.BLUETOOTH

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_SETTINGS

android.permission.READ_CONTACTS

android.permission.WRITE_SMS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.CAPTURE_VIDEO_OUTPUT

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.VIBRATE

android.permission.USE_FINGERPRINT

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.RECORD_AUDIO

android.permission.READ_PHONE_NUMBERS

android.permission.ACCESS_BACKGROUND_LOCATION

android.permission.REORDER_TASKS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.ACTION_MANAGE_OVERLAY_PERMISSION

android.permission.GET_TASKS

android.permission.REQUEST_DELETE_PACKAGES