Resubmissions

29/02/2024, 09:29

240229-lf94mscf3t 7

29/02/2024, 08:59

240229-kxxn7sca8z 6

General

  • Target

    e1bce0732b586592818ca6e3cefd830097a95f01bef32d74b322a976465fbf79

  • Size

    3.4MB

  • MD5

    1bbd170fd2b540dec6478cb95b2496cf

  • SHA1

    c7f76cd9a09339661321d7810404a311b88d7238

  • SHA256

    e1bce0732b586592818ca6e3cefd830097a95f01bef32d74b322a976465fbf79

  • SHA512

    cfb0e80043c189e408efa78f73593e882fac9bf126ac188d2fe811bbd1ab1ce61cbfb425cd45058d92f2c59c86975e4060aa5bffea5d6ffa8ed234eff1de7024

  • SSDEEP

    49152:oEd2+kaqMvh9fry68z08sdouJLA2LQm1OEdy/bpjgmVY2yocPKl6MI:hd2+PvH2/e8m1tdy/b7Pcc6MI

Score
6/10

Malware Config

Signatures

  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 13 IoCs

Files

  • e1bce0732b586592818ca6e3cefd830097a95f01bef32d74b322a976465fbf79
    .apk android

    cybershieldx.rainbow

    cybershieldx.rainbow.RainbowMainActivity


Android Permissions

e1bce0732b586592818ca6e3cefd830097a95f01bef32d74b322a976465fbf79

Permissions

android.permission.INTERNET

android.permission.READ_CONTACTS

android.permission.READ_EXTERNAL_STORAGE

android.permission.VIBRATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_SMS

android.permission.READ_CALL_LOG

android.permission.QUERY_ALL_PACKAGES

android.permission.CAMERA

android.permission.SEND_SMS

android.permission.RECORD_AUDIO

android.permission.READ_PHONE_STATE

android.permission.POST_NOTIFICATIONS

android.permission.READ_MEDIA_IMAGES

android.permission.READ_MEDIA_VIDEO

android.permission.READ_MEDIA_AUDIO

cybershieldx.rainbow.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION