General

  • Target

    263de2cad70d9b27507a2fc77066d169

  • Size

    4.2MB

  • MD5

    263de2cad70d9b27507a2fc77066d169

  • SHA1

    fe86751514b2dc41f0a8dab255b004252ec48092

  • SHA256

    f7739dd6a44b6ad1c9517a40da0d6fb8ab7e4d1215c99753e37873b4315af186

  • SHA512

    be232e9cfb692a58d18e5e5d67ef51711d3bcde48e21bd3f89a0a36ac5e8cda50533ca08455b1f3a236db7559988093f85de82a21020ef798f29668d635f24ca

  • SSDEEP

    98304:9f8zwgMcEAsP4HCS35BCZPzhXkHEG19wuCd+NjOAi9o5RIu:9OMcpbpgZ7UEG1WuCMZnhB

Score
6/10

Malware Config

Signatures

  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 4 IoCs

Files

  • 263de2cad70d9b27507a2fc77066d169
    .apk android arch:arm64 arch:arm arch:x86 arch:x64

    xzr.La.systemtoolbox

    xzr.La.systemtoolbox.ui.activities.StartActivity


  • Thermal_remover.jar
    .apk android

Android Permissions

263de2cad70d9b27507a2fc77066d169

Permissions

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.SYSTEM_ALERT_WINDOW

android.permission.WAKE_LOCK

android.permission.SYSTEM_OVERLAY_WINDOW

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.WRITE_SETTINGS