General

  • Target

    gms_flags_1.1.0.apk

  • Size

    14.0MB

  • MD5

    9f17cf4b15cef17845abe7238a0f1e61

  • SHA1

    9f3d4c90f0e421a2c65e46c2eb5590789b9b391f

  • SHA256

    0f55f3b26b4b390f904b242d1fc4d176c35fb1dbc875f6506b5c9455ad40041e

  • SHA512

    4cb9dc45c05d1e11a71bb7149c8a7be7e5bb9aa7b9151535d94fb42be3e32bd4870630c2c301fb7b2e424b617f450599b890d09df3c0a8d9b705b82319a7532d

  • SSDEEP

    98304:vQnA8ijmDq7entBKtBPVUY6Myw55aek0qgxz/evcos5KtHq4dAaOxP6wqzYQAFEr:InA8i6+iv+Z/5akq9c74ZwBB27N

Score
6/10

Malware Config

Signatures

  • Requests dangerous framework permissions 2 IoCs

Files

  • gms_flags_1.1.0.apk
    .apk android arch:arm64 arch:arm arch:x86 arch:x64

    ua.polodarb.gmsflags

    ua.polodarb.gmsflags.ui.MainActivity


  • main.jar
    .apk android

Android Permissions

gms_flags_1.1.0.apk

Permissions

android.permission.POST_NOTIFICATIONS

android.permission.INTERNET

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.QUERY_ALL_PACKAGES

android.permission.ACCESS_NETWORK_STATE

android.permission.WAKE_LOCK

com.google.android.c2dm.permission.RECEIVE

com.google.android.gms.permission.AD_ID

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

ua.polodarb.gmsflags.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION