e11ed6e1c1b7e0353538fa3e3ed809a9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e11ed6e1c1b7e0353538fa3e3ed809a9
Size

1.2MB
MD5

e11ed6e1c1b7e0353538fa3e3ed809a9
SHA1

7833f28be1350f13e3ae932e076c65fe8cfd9e58
SHA256

0cec6286588a16004e62e20c6bc0172b923195f06fa38c152867a77c84a2949a
SHA512

b352982ce192270bc98dba6bd092a54777d8fbcafa7d8666cd5a37233ed2c3d4d6f4b41c44570f0802799a1356115e5d0bec4e7e9be13667aeacc375d1ad9415
SSDEEP

24576:qO1E1+VFwdEsYq5d97P4owoqb5W5p8YNU:q+sPEsYq5X7P4M65W5p8YC

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 1 IoCs

description	ioc
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW

Files

e11ed6e1c1b7e0353538fa3e3ed809a9
.apk android

eu.chainfire.exynosabuse

.MainActivity

Activities

.MainActivity

android.intent.action.MAIN
superuser.png
.apk android

eu.chainfire.supersu

.MainActivity

Activities

.MainActivity

android.intent.action.MAIN

Permissions

android.permission.WAKE_LOCK
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.GET_TASKS
android.permission.SYSTEM_ALERT_WINDOW

Receivers

.InstallReceiver

android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED
android.intent.action.PACKAGE_REPLACED

.NativeAccessReceiver

eu.chainfire.supersu.NativeAccess

.BootCompleteReceiver

android.intent.action.BOOT_COMPLETED

Services

Android Permissions

e11ed6e1c1b7e0353538fa3e3ed809a9