titaniumbackupprofull-1575175240-www[.]androeed[.]ru[.]apk

Sharing

Copy URL

Twitter E-mail

General

Target

titaniumbackupprofull-1575175240-www.androeed.ru.apk
Size

7.6MB
MD5

034f9d5e6e4804ce5ca3f11f91189e51
SHA1

ec1267c09bb433d22f49c3970f32067a221a10a8
SHA256

eedc368efc3f6f9d1e974ae58515e91a0a6745cf1a4f77e93360519dcf84296d
SHA512

baa9883d1317cf3bb728eac7bfc50ab9e043b3fd853dcccebadaa2b008a490ac5da76201e2b7aca2d74c65449ce594e3273428e66d285a3e8f62a11c0f1703b0
SSDEEP

196608:fklOMAjxHTr1z1w6ddZnyM1msNJWBTPUWLXg5eb:M6xH7ndnyMEsNJWBTPUWLXg5c

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 7 IoCs

description	ioc
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows an application to add voicemails into the system.	com.android.voicemail.permission.ADD_VOICEMAIL

Files

titaniumbackupprofull-1575175240-www.androeed.ru.apk
.apk android arch:arm64 arch:arm arch:mips arch:x86 arch:x64

com.keramidas.TitaniumBackup

.MainActivity

Activities

.MainActivity

android.intent.action.MAIN

.MyWidgetConfigure

android.appwidget.action.APPWIDGET_CONFIGURE

.MyDataProfileWidgetConfigure

android.appwidget.action.APPWIDGET_CONFIGURE

.ImportBackupActivity

android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW

.cloud.OAuth2ResponseHandler

android.intent.action.VIEW

com.dropbox.core.android.AuthActivity

android.intent.action.VIEW

Permissions

android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_MEDIA_STORAGE
android.permission.WRITE_MEDIA_STORAGE
android.permission.WAKE_LOCK
android.permission.INTERNET
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.VIBRATE
android.permission.READ_PHONE_STATE
android.permission.GET_ACCOUNTS
android.permission.USE_CREDENTIALS
android.permission.ACCESS_NETWORK_STATE
com.android.browser.permission.READ_HISTORY_BOOKMARKS
com.android.browser.permission.WRITE_HISTORY_BOOKMARKS
android.permission.READ_CONTACTS
android.permission.WRITE_CONTACTS
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.ACCESS_SUPERUSER
android.permission.REQUEST_INSTALL_PACKAGES
android.permission.FOREGROUND_SERVICE
com.keramidas.TitaniumBackupAddon.USE_CP
com.android.voicemail.permission.ADD_VOICEMAIL
com.android.voicemail.permission.READ_WRITE_ALL_VOICEMAIL

Receivers

.MyWidget

android.appwidget.action.APPWIDGET_UPDATE

.MyDataProfileWidget

android.appwidget.action.APPWIDGET_UPDATE

.schedules.BootReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.EXTERNAL_APPLICATIONS_AVAILABLE
android.intent.action.EXTERNAL_APPLICATIONS_UNAVAILABLE
android.intent.action.PACKAGE_REPLACED

.PackageEventsReceiver

android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED
android.intent.action.PACKAGE_CHANGED

o.ds

com.keramidas.intent.action.SCHEDULE_NEXT_WAKE_UP

Services
MarketUpdateHelper.apk
.apk android

com.keramidas.MarketUpdateHelper
Nodda-1.bin
busybox.armeabi
.elf linux arm
busybox.armeabi.pie
.elf linux arm
busybox.mips
.elf linux mipsel
busybox.mips.pie
.elf linux mipsel
busybox.x86
.elf linux x86
busybox.x86.pie
.elf linux x86
dexopt-wrapper.armeabi
.elf linux arm
dexopt-wrapper.armeabi.pie
.elf linux arm
dexopt-wrapper.mips
.elf linux mipsel
dexopt-wrapper.mips.pie
.elf linux mipsel
dexopt-wrapper.x86
.elf linux x86
dexopt-wrapper.x86.pie
.elf linux x86
reboot.armeabi
.elf linux arm
reboot.armeabi.pie
.elf linux arm
reboot.mips
.elf linux mipsel
reboot.mips.pie
.elf linux mipsel
reboot.x86
.elf linux x86
reboot.x86.pie
.elf linux x86
sqlite3.armeabi
.elf linux arm
sqlite3.armeabi.pie
.elf linux arm
sqlite3.mips
.elf linux mipsel
sqlite3.mips.pie
.elf linux mipsel
sqlite3.x86
.elf linux x86
sqlite3.x86.pie
.elf linux x86
update-binary.armeabi
.elf linux arm

Android Permissions

titaniumbackupprofull-1575175240-www.androeed.ru.apk

Permissions

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_MEDIA_STORAGE

android.permission.WRITE_MEDIA_STORAGE

android.permission.WAKE_LOCK

android.permission.INTERNET

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.VIBRATE

android.permission.READ_PHONE_STATE

android.permission.GET_ACCOUNTS

android.permission.USE_CREDENTIALS

android.permission.ACCESS_NETWORK_STATE

com.android.browser.permission.READ_HISTORY_BOOKMARKS

com.android.browser.permission.WRITE_HISTORY_BOOKMARKS

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_SUPERUSER

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.FOREGROUND_SERVICE

com.keramidas.TitaniumBackupAddon.USE_CP

com.android.voicemail.permission.ADD_VOICEMAIL

com.android.voicemail.permission.READ_WRITE_ALL_VOICEMAIL

Sharing

General

Malware Config

Signatures

Files

com.keramidas.TitaniumBackup

.MainActivity

Activities

.MainActivity

.MyWidgetConfigure

.MyDataProfileWidgetConfigure

.ImportBackupActivity

.cloud.OAuth2ResponseHandler

com.dropbox.core.android.AuthActivity

Permissions

Receivers

.MyWidget

.MyDataProfileWidget

.schedules.BootReceiver

.PackageEventsReceiver

o.ds

Services

com.keramidas.MarketUpdateHelper

Android Permissions

titaniumbackupprofull-1575175240-www.androeed.ru.apk