Resubmissions

11/02/2024, 13:28

240211-qqw2zsge8w 6

11/02/2024, 13:26

240211-qpk84aae77 6

General

  • Target

    Cx File Explorer 2.1.5.apk

  • Size

    7.9MB

  • MD5

    2a17eee19ea1678ac3e5d9f0bee7e7f5

  • SHA1

    a0ef0b3416ae1262aaa423eedbde6ad9134860d1

  • SHA256

    c583770af239306a86969d514e8a0c15c33c96f8fe5fd333060180afd12c1d92

  • SHA512

    e7e85338bdd2f001a3e13db2bca9a76c96d4e34261a747a526851298ef93a44e1bd065bfbcf7179e5013e254173b6604a0eb6a739b96227f1c38eba0de2afe0b

  • SSDEEP

    196608:Uk6gy4td+2j9MJ/hhsI3bqlBr3XZ8jaMJpGjc53CeagekNx6AaX:z6StgdqN8mIYjc53GgekyAaX

Score
6/10

Malware Config

Signatures

  • Requests dangerous framework permissions 4 IoCs

Files

  • Cx File Explorer 2.1.5.apk
    .apk android

    Password: infected#

    com.cxinventor.file.explorer

    com.alphainventor.filemanager.activity.MainActivity


Android Permissions

Cx File Explorer 2.1.5.apk

Permissions

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.WAKE_LOCK

android.permission.RECEIVE_BOOT_COMPLETED

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.GET_ACCOUNTS

android.permission.VIBRATE

android.permission.FOREGROUND_SERVICE

com.google.android.gms.permission.AD_ID

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE