com.elite.MainActivity
android.intent.action.MAIN
com.elite.UninstallAdminDevice
android.intent.action.SEND
General
-
Target
HXP Ducky.apk
-
Size
565KB
-
MD5
45b5b3f477d6927fc2df765922902a13
-
SHA1
4a30b29d7e156d7038f1861a60303cfb42315b47
-
SHA256
9317d2bd1ac411b450f557c244ab234ba2156f3ef3b563b046434774281c8905
-
SHA512
6e51680f561748c5f9d0b35883e60ba654302dfc1695e075913020669d2c3f897907e4043a5a9f49c15ebc3fb6e4915117a94b4b39c4aa45dbe8bfdf1f3d7775
-
SSDEEP
12288:D8JjRH6+O//n3tKpSsM+1HA+m8KSzteHQGC0quInfI:DwN6+ONjstgdS0wGC0qumfI
Score
10/10
Malware Config
Signatures
-
Wipelock Android payload 1 IoCs
Processes:
resource yara_rule sample family_wipelock -
Wipelock family
-
Declares broadcast receivers with permission to handle system events 1 IoCs
Processes:
description ioc Required by device admin receivers to bind with the system. Allows apps to manage device administration features. android.permission.BIND_DEVICE_ADMIN -
Requests dangerous framework permissions 8 IoCs
Processes:
description ioc Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE Allows an application to receive SMS messages. android.permission.RECEIVE_SMS Allows an application to send SMS messages. android.permission.SEND_SMS Allows an application to read SMS messages. android.permission.READ_SMS Allows an application to read the user's contacts data. android.permission.READ_CONTACTS Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE Allows an application to read or write the system settings. android.permission.WRITE_SETTINGS
Files
-
HXP Ducky.apk.apk android
com.elite
com.elite.MainActivity
Activities
Permissions
android.permission.GET_TASKS
android.permission.READ_PHONE_STATE
android.permission.RECEIVE_SMS
android.permission.SEND_SMS
android.permission.READ_SMS
android.permission.WRITE_SMS
android.permission.READ_CONTACTS
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.WRITE_SETTINGS
android.permission.WAKE_LOCK
Receivers
com.elite.AdminReciever
android.app.action.DEVICE_ADMIN_ENABLED
com.elite.SMSReceiver
android.provider.Telephony.SMS_RECEIVED
com.elite.BootReceiver
android.intent.action.BOOT_COMPLETED
Services
Android Permissions
HXP Ducky.apk
Permissions
android.permission.GET_TASKS
android.permission.READ_PHONE_STATE
android.permission.RECEIVE_SMS
android.permission.SEND_SMS
android.permission.READ_SMS
android.permission.WRITE_SMS
android.permission.READ_CONTACTS
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.WRITE_SETTINGS
android.permission.WAKE_LOCK