Overview

overview

7

Static

static

7

0631ae85fb...fe.apk

android-9-x86

7

0631ae85fb...fe.apk

android-10-x64

7

0631ae85fb...fe.apk

android-11-x64

7

mraid.js

windows7-x64

1

mraid.js

windows10-2004-x64

1

omsdk-v1.js

windows7-x64

1

omsdk-v1.js

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0631ae85fb6a1583603c820a275be8fe.bin

  • Size

    6.8MB

  • MD5

    0631ae85fb6a1583603c820a275be8fe

  • SHA1

    175ffa9a301b80a3f09a2a7c46884760fc53b13c

  • SHA256

    43aafaa4c94642993ddd240e3353e33b6b3d8f8ccc6b82a04ba426bb2501a863

  • SHA512

    e1d3cf91ee3fd95733ed8b24928c0c4693a7dd3c73a396b3b2a21a6afdad1c736de7a45f8f8544979891b8b54ed6d69b42cc597f861a91a81dd41eb3857cb77d

  • SSDEEP

    196608:bG+zrr815Sdq1MvcTgnI9pMcj4KKMWmD2XZoU5:qn0o/gyt4jMcas

Score
7/10

Malware Config

Signatures

  • Requests dangerous framework permissions 1 IoCs

Files

  • 0631ae85fb6a1583603c820a275be8fe.bin
    .apk android

    Password: infected

    com.its.fikfap

    com.its.fikfap.Splash


  • baseline.prof
  • baseline.profm
  • mraid.js
    .js
  • omsdk-v1.js
    .js

Android Permissions

0631ae85fb6a1583603c820a275be8fe.bin

Permissions

android.permission.INTERNET

android.permission.ACCESS_WIFI_STATE

android.permission.Ad_ID

android.permission.ACCESS_NETWORK_STATE

android.permission.RECEIVE_BOOT_COMPLETED

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

com.google.android.gms.permission.AD_ID

android.permission.VIBRATE

android.permission.POST_NOTIFICATIONS

android.permission.WAKE_LOCK

com.google.android.c2dm.permission.RECEIVE

android.permission.FOREGROUND_SERVICE

com.its.fikfap.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION