SSH_SFTP[.]xapk

Sharing

Copy URL Twitter E-mail

General

Target

SSH_SFTP.xapk
Size

12.3MB
MD5

f54f7e5a648c9196cd1bc7cecf51d54f
SHA1

840f8c35d01e2ac5f0f9f24bbbd93757c6536270
SHA256

b0419fd0a9e884cba65cc5291b086b94917d14f78e80b6dc6f4c4102ca657438
SHA512

a02fa7a7e28ebef3742f4c036482ad0bfba2986ee864a1d85c9ab3d15f530cce80395a19de043154385aea1833dfd710e0bb79eecab6e64310e4ca2d6956b2d5
SSDEEP

393216:d/gRHDbK7xsxUH+lWAtaon4EXAAUcrurBQK4CDUN6T4TcUy2F:tgRjYdeDmECcrqBqCDUN3y2F

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 4 IoCs

description	ioc
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION

Files

SSH_SFTP.xapk
.zip
config.armeabi_v7a.apk
.apk android arch:arm

net.xnano.android.sshserver
config.en.apk
.apk android

net.xnano.android.sshserver
config.in.apk
.apk android

net.xnano.android.sshserver
config.mdpi.apk
.apk android

net.xnano.android.sshserver
config.ms.apk
.apk android

net.xnano.android.sshserver
icon.png
.png
manifest.json
net.xnano.android.sshserver.apk
.apk android

net.xnano.android.sshserver

net.xnano.android.sshserver.MainActivity

Activities

net.xnano.android.sshserver.MainActivity

android.intent.action.VIEW
android.intent.action.MAIN

Permissions

android.permission.MANAGE_EXTERNAL_STORAGE
android.permission.POST_NOTIFICATIONS
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.FOREGROUND_SERVICE
android.permission.FOREGROUND_SERVICE_CONNECTED_DEVICE
android.permission.FOREGROUND_SERVICE_DATA_SYNC
android.permission.INTERNET
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.WAKE_LOCK
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS
oppo.permission.OPPO_COMPONENT_SAFE
com.huawei.permission.external_app_settings.USE_COMPONENT
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
com.android.vending.BILLING
com.google.android.gms.permission.AD_ID
com.google.android.c2dm.permission.RECEIVE
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
net.xnano.android.sshserver.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
com.android.vending.CHECK_LICENSE

Receivers

net.xnano.android.sshserver.receivers.CustomBroadcastReceiver

android.intent.action.LOCKED_BOOT_COMPLETED
android.intent.action.BOOT_COMPLETED
android.net.wifi.STATE_CHANGE
android.net.wifi.WIFI_AP_STATE_CHANGED
net.xnano.android.sshserver.START_SERVER
net.xnano.android.sshserver.STOP_SERVER

net.xnano.android.sshserver.widgets.ControllerWidget

android.appwidget.action.APPWIDGET_UPDATE

net.xnano.android.sshserver.widgets.ControllerWidget3x1

android.appwidget.action.APPWIDGET_UPDATE

net.xnano.android.sshserver.widgets.ControllerWidget3x1Dark

android.appwidget.action.APPWIDGET_UPDATE

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY
android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW
android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.TIME_SET
android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.work.diagnostics.REQUEST_DIAGNOSTICS

androidx.profileinstaller.ProfileInstallReceiver

androidx.profileinstaller.action.INSTALL_PROFILE
androidx.profileinstaller.action.SKIP_FILE
androidx.profileinstaller.action.SAVE_PROFILE
androidx.profileinstaller.action.BENCHMARK_OPERATION

Services

net.xnano.android.sshserver.service.QuickTileService

android.service.quicksettings.action.QS_TILE

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

com.yandex.metrica.MetricaService

com.yandex.metrica.IMetricaService

com.yandex.metrica.ConfigurationService

com.yandex.metrica.configuration.ACTION_INIT
baseline.prof
baseline.profm
disconnect.html
icon_circle.png
.png
icon_rectangle.png
.png
style.css
upnp.html
.html

Sharing

General

Malware Config

Signatures

Files

net.xnano.android.sshserver

net.xnano.android.sshserver

net.xnano.android.sshserver

net.xnano.android.sshserver

net.xnano.android.sshserver

net.xnano.android.sshserver

net.xnano.android.sshserver.MainActivity

Activities

net.xnano.android.sshserver.MainActivity

Permissions

Receivers

net.xnano.android.sshserver.receivers.CustomBroadcastReceiver

net.xnano.android.sshserver.widgets.ControllerWidget

net.xnano.android.sshserver.widgets.ControllerWidget3x1

net.xnano.android.sshserver.widgets.ControllerWidget3x1Dark

com.google.firebase.iid.FirebaseInstanceIdReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.profileinstaller.ProfileInstallReceiver

Services

net.xnano.android.sshserver.service.QuickTileService

com.google.firebase.messaging.FirebaseMessagingService

com.yandex.metrica.MetricaService

com.yandex.metrica.ConfigurationService