General

  • Target

    3561ec0caf90d35871b81b8fb92ada8b214b717c089f8d1c82b5f8c665d9285a

  • Size

    4.3MB

  • MD5

    c104f1cf7fb24e0afff10040a3df25c4

  • SHA1

    3e541508ba0cf7c121da4bb574048216ef24a107

  • SHA256

    3561ec0caf90d35871b81b8fb92ada8b214b717c089f8d1c82b5f8c665d9285a

  • SHA512

    24dcdf3aa7a136ccb565629722182abfe4d16d298bf843be547d64931fbeeda91f2e3265d9e8e5d2ae79a8a00f758157770c6e7b9cac34cf8305958bb3f95014

  • SSDEEP

    98304:G0Q+Qmx4z1FyBSMyV9AjxZeemaCvyAemaCvkaGemaCv9UrmyQtA:0HKL/mZYmZk2mZa5

Score
6/10

Malware Config

Signatures

  • Declares services with permission to bind to the system 1 IoCs

Files

  • 3561ec0caf90d35871b81b8fb92ada8b214b717c089f8d1c82b5f8c665d9285a
    .apk android arch:arm64 arch:arm

    app.greyshirts.firewall

    app.greyshirts.firewall.ui.ActivityPager


Android Permissions

3561ec0caf90d35871b81b8fb92ada8b214b717c089f8d1c82b5f8c665d9285a

Permissions

android.permission.INTERNET

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.ACCESS_NETWORK_STATE

android.permission.FOREGROUND_SERVICE