cwtch-v1[.]13[.]2[.]apk

General

Target

cwtch-v1.13.2.apk
Size

66.1MB
MD5

6f6762843338835641d74b402d2c76c2
SHA1

c3be4d0be2bf2fa9049da08c79a4af5d04a22f89
SHA256

b2cff360e28bbd3084dd066cae71b800eab167c9c767f8a254109fd8d6bad932
SHA512

01914e88e88209fb1007762b0f4a4e166e267ac806ed56984660e2a55a78952d6b3bd4cc7ba9adcc1e11c2afe27f3ac30828f68060abfa29173c90f593870730
SSDEEP

1572864:DOOR/Is1yjX8nC3sH2rcqWuyjUSX8Rn8Su4lJY9yBh2mxOuTBqq7hTIGz6:DOo/jyjy1VsCyJY8uuTz71IG2

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 3 IoCs

description	ioc
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows applications to use exact alarm APIs.	android.permission.SCHEDULE_EXACT_ALARM
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS

Files

cwtch-v1.13.2.apk
.apk android arch:arm64 arch:arm arch:x64

im.cwtch.flwtch

im.cwtch.flwtch.MainActivity

Activities

im.cwtch.flwtch.MainActivity

android.intent.action.MAIN

Permissions

android.permission.INTERNET
android.permission.FOREGROUND_SERVICE
android.permission.GET_TASKS
android.permission.READ_EXTERNAL_STORAGE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.VIBRATE
android.permission.USE_FULL_SCREEN_INTENT
android.permission.SCHEDULE_EXACT_ALARM
android.permission.POST_NOTIFICATIONS
android.permission.ACCESS_NETWORK_STATE
android.permission.WAKE_LOCK

Receivers

com.dexterous.flutterlocalnotifications.ScheduledNotificationBootReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.MY_PACKAGE_REPLACED
android.intent.action.QUICKBOOT_POWERON
com.htc.intent.action.QUICKBOOT_POWERON

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY
android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW
android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.TIME_SET
android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.work.diagnostics.REQUEST_DIAGNOSTICS

Services

Android Permissions

cwtch-v1.13.2.apk

Permissions

android.permission.INTERNET

android.permission.FOREGROUND_SERVICE

android.permission.GET_TASKS

android.permission.READ_EXTERNAL_STORAGE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.VIBRATE

android.permission.USE_FULL_SCREEN_INTENT

android.permission.SCHEDULE_EXACT_ALARM

android.permission.POST_NOTIFICATIONS

android.permission.ACCESS_NETWORK_STATE

android.permission.WAKE_LOCK

Sharing

General

Malware Config

Signatures

Files

im.cwtch.flwtch

im.cwtch.flwtch.MainActivity

Activities

im.cwtch.flwtch.MainActivity

Permissions

Receivers

com.dexterous.flutterlocalnotifications.ScheduledNotificationBootReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.diagnostics.DiagnosticsReceiver

Services

Android Permissions

cwtch-v1.13.2.apk