General

  • Target

    a8a31b725206db1e5cb65bd843847948f00997696fc7cb53d8bd03a058abfb69

  • Size

    17.0MB

  • MD5

    eb9cae88a3a9e278b0fd546525f14c5d

  • SHA1

    30dc65bd7adefddffec51e204adb4a31e2f876de

  • SHA256

    a8a31b725206db1e5cb65bd843847948f00997696fc7cb53d8bd03a058abfb69

  • SHA512

    e50fcff6c9b1c95e62717e76abe646cf1f3a50520b43154c8cae0370c3e52f818a5d4faf1f162e0fa228c4799a4ac93e7028b35ea544696d26c123c3c6952756

  • SSDEEP

    393216:ICB7GrkOTLcvUB+T/Lh+dlU/AS87DiSNBUJaAY4l1w42CpoUjhjPeJo:ICWkOb8T/sds8qnYZ42MjhCJo

Score
6/10

Malware Config

Signatures

  • Requests dangerous framework permissions 3 IoCs

Files

  • a8a31b725206db1e5cb65bd843847948f00997696fc7cb53d8bd03a058abfb69
    .apk .ps1 android arch:arm polyglot

    com.masscreation.rlhValentine

    .RLHAndroidActivity


Android Permissions

a8a31b725206db1e5cb65bd843847948f00997696fc7cb53d8bd03a058abfb69

Permissions

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.GET_ACCOUNTS

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.RECEIVE_BOOT_COMPLETED

com.android.vending.BILLING