Fluxus_Coral_586[.]apk

General

Target

Fluxus_Coral_586.apk
Size

126.5MB
MD5

984ff3c64a62f62b0dd9d9c1ef693dc8
SHA1

36a66cc6a60d44389c6c17d4cb24896b255f3bb9
SHA256

35d1aae01f0b076cdb962dd03785291607ab1e5da91e6e62618106f0519ee115
SHA512

eb1b14f0673813a9f0789b3bffce4f6c766e3796c1697b161b87f6fccb74ff5b6885b3e59763e32ec2bdd3bec08e02f28acd9272cd6bf3ad1fd8eb2d2672663d
SSDEEP

3145728:QDGjK29CuG6L8dQE+nxwS3E8DWJ3EFlII6/Se+Qs:C29xR8eE+yS3E86J3EFlIL1+5

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 12 IoCs

description	ioc
Allows an application to read audio files from external storage.	android.permission.READ_MEDIA_AUDIO
Allows an application to read video files from external storage.	android.permission.READ_MEDIA_VIDEO
Allows an application to read image files from external storage.	android.permission.READ_MEDIA_IMAGES
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application a broad access to external storage in scoped storage.	android.permission.MANAGE_EXTERNAL_STORAGE
Allows an application to modify and delete media files on this device or any connected storage device without user confirmation.	android.permission.MANAGE_MEDIA
Allows an application to access any geographic locations persisted in the user's shared collection.	android.permission.ACCESS_MEDIA_LOCATION
Required to be able to connect to paired Bluetooth devices.	android.permission.BLUETOOTH_CONNECT
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE

Files

Fluxus_Coral_586.apk
.apk android arch:arm

com.roblox.client

com.roblox.client.startup.ActivitySplash

Activities

com.roblox.client.ActivityProtocolLaunch

android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW

com.roblox.client.startup.ActivitySplash

android.intent.action.MAIN

Permissions

android.permission.READ_MEDIA_AUDIO
android.permission.READ_MEDIA_VIDEO
android.permission.READ_MEDIA_IMAGES
android.permission.REQUEST_INSTALL_PACKAGES
android.permission.REQUEST_DELETE_PACKAGES
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.MANAGE_EXTERNAL_STORAGE
android.permission.MANAGE_MEDIA
android.permission.ACCESS_MEDIA_LOCATION
android.permission.QUERY_ALL_PACKAGES
android.permission.BLUETOOTH
android.permission.BLUETOOTH_CONNECT
android.permission.POST_NOTIFICATIONS
android.permission.VIBRATE
com.roblox.client.permission.RECEIVE_ADM_MESSAGE
com.amazon.device.messaging.permission.RECEIVE
android.permission.WAKE_LOCK
com.android.vending.BILLING
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.READ_CONTACTS
android.permission.FOREGROUND_SERVICE
com.google.android.gms.permission.AD_ID
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
android.permission.READ_EXTERNAL_STORAGE
com.google.android.c2dm.permission.RECEIVE

Receivers

com.roblox.client.amazondevicemessaging.ADMMessageHandler$MessageAlertReceiver

com.amazon.device.messaging.intent.REGISTRATION
com.amazon.device.messaging.intent.RECEIVE

com.amazon.device.iap.ResponseReceiver

com.amazon.inapp.purchasing.NOTIFY

com.roblox.client.XAPKUpdateReceiver

android.intent.action.MY_PACKAGE_REPLACED

com.appsflyer.SingleInstallBroadcastReceiver

com.android.vending.INSTALL_REFERRER

com.roblox.client.startup.BootCompletedBroadcastReceiver

android.intent.action.BOOT_COMPLETED

com.google.android.gms.measurement.AppMeasurementInstallReferrerReceiver

com.android.vending.INSTALL_REFERRER

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

Services

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

com.google.firebase.iid.FirebaseInstanceIdService

com.google.firebase.INSTANCE_ID_EVENT

Android Permissions

Fluxus_Coral_586.apk

Permissions

android.permission.READ_MEDIA_AUDIO

android.permission.READ_MEDIA_VIDEO

android.permission.READ_MEDIA_IMAGES

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.REQUEST_DELETE_PACKAGES

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MANAGE_EXTERNAL_STORAGE

android.permission.MANAGE_MEDIA

android.permission.ACCESS_MEDIA_LOCATION

android.permission.QUERY_ALL_PACKAGES

android.permission.BLUETOOTH

android.permission.BLUETOOTH_CONNECT

android.permission.POST_NOTIFICATIONS

android.permission.VIBRATE

com.roblox.client.permission.RECEIVE_ADM_MESSAGE

com.amazon.device.messaging.permission.RECEIVE

android.permission.WAKE_LOCK

com.android.vending.BILLING

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.READ_CONTACTS

android.permission.FOREGROUND_SERVICE

com.google.android.gms.permission.AD_ID

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.READ_EXTERNAL_STORAGE

com.google.android.c2dm.permission.RECEIVE

Sharing

General

Malware Config

Signatures

Files

com.roblox.client

com.roblox.client.startup.ActivitySplash

Activities

com.roblox.client.ActivityProtocolLaunch

com.roblox.client.startup.ActivitySplash

Permissions

Receivers

com.roblox.client.amazondevicemessaging.ADMMessageHandler$MessageAlertReceiver

com.amazon.device.iap.ResponseReceiver

com.roblox.client.XAPKUpdateReceiver

com.appsflyer.SingleInstallBroadcastReceiver

com.roblox.client.startup.BootCompletedBroadcastReceiver

com.google.android.gms.measurement.AppMeasurementInstallReferrerReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

Services

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.iid.FirebaseInstanceIdService

Android Permissions

Fluxus_Coral_586.apk