Resubmissions

22/02/2024, 06:10

240222-gxg2zadb5z 6

General

  • Target

    1.1.1.1_6.32.apk

  • Size

    20.7MB

  • MD5

    bdcd025aad617bca3553d6fbbaf4ce93

  • SHA1

    3776e35075f82b5a9ebc6f80a908bc0e4b83ade2

  • SHA256

    c5b86ea2f47320dac8f52e2e466f57e44307ac5f5203b52367431f65da116925

  • SHA512

    6c821ad41f2c119bee083dcfe8caeb1e26f1ff071a739eb614c642ddf3ad870af422e12e80c1520528c14d3985d76928686a79169b82dea015a7d55a9b1597f2

  • SSDEEP

    393216:z2J+joRoT5dggPdxvzSQU0Ou3ewKGFTfObc1CvXLCgFBzn:z2JGoRoT5Ogl8kOupPFrObcYvXLBx

Score
6/10

Malware Config

Signatures

  • Declares services with permission to bind to the system 2 IoCs
  • Requests dangerous framework permissions 4 IoCs

Files

  • 1.1.1.1_6.32.apk
    .apk android arch:arm64 arch:arm

    com.cloudflare.onedotonedotonedotone

    com.cloudflare.app.presentation.main.SplashActivity


Android Permissions

1.1.1.1_6.32.apk

Permissions

com.cloudflare.onedotonedotonedotone.permission.ACCESS_EXPORTED_ACTIVITY

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

android.permission.ACCESS_WIFI_STATE

android.permission.POST_NOTIFICATIONS

android.permission.ACCESS_COARSE_LOCATION

android.permission.READ_EXTERNAL_STORAGE

com.android.vending.BILLING

android.permission.WAKE_LOCK

com.google.android.c2dm.permission.RECEIVE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE