54c3e70e2883a004455cc308bb2608c5[.]bin

General

Target

54c3e70e2883a004455cc308bb2608c5.bin
Size

9.7MB
MD5

76c86a809890ae509362071d46403f65
SHA1

2126f2900d7756f30d6285b0f691fbfb75ba2f0f
SHA256

77e30998a32424fb5bdb4d072d18e8bca57c57a93a12212988c01887e9b61636
SHA512

58127aee131147b8c3d57ef9f160f3875e7095cba115d729eb7d54597acef832d7559f047fae689ce2ab20ff1cc55908d4328f0bd4194fed8124ac150fa01bdc
SSDEEP

196608:x8fPB/FXixuEAcknvctdNKwmqm0D5oz+Y/hz184RlFPjKfJEUzZHetc5oNpZS3:kDjVcagHkz+YZz1nKfJEUGXpZS3

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE

Requests dangerous framework permissions 7 IoCs

description	ioc
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to read image files from external storage.	android.permission.READ_MEDIA_IMAGES
Allows an application to read video files from external storage.	android.permission.READ_MEDIA_VIDEO

Files

54c3e70e2883a004455cc308bb2608c5.bin
.zip

Password: infected
c9253184b706cb99cbcf84a6916b5a2b82d75aaf153cf1561caa2ab030eb04be.apk
.apk android arch:arm64 arch:arm arch:x86 arch:x64

Password: infected

com.toney.funnymemsstickercollection

com.flavionet.android.camera.MainActivity

Activities

com.flavionet.android.camera.MainActivity

android.intent.action.MAIN
android.media.action.IMAGE_CAPTURE
android.media.action.STILL_IMAGE_CAMERA
android.media.action.STILL_IMAGE_CAMERA_SECURE
android.media.action.IMAGE_CAPTURE_SECURE
com.sec.android.airview.HOVER

com.flavionet.android.cameralegacy.Main

android.intent.action.MAIN
android.media.action.IMAGE_CAPTURE
android.media.action.STILL_IMAGE_CAMERA
android.media.action.STILL_IMAGE_CAMERA_SECURE
android.media.action.IMAGE_CAPTURE_SECURE
com.sec.android.airview.HOVER

androidx.test.core.app.InstrumentationActivityInvoker$BootstrapActivity

android.intent.action.MAIN

androidx.test.core.app.InstrumentationActivityInvoker$EmptyActivity

android.intent.action.MAIN

androidx.test.core.app.InstrumentationActivityInvoker$EmptyFloatingActivity

android.intent.action.MAIN

Permissions

android.permission.CAMERA
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_EXTERNAL_STORAGE
com.android.vending.CHECK_LICENSE
android.permission.CHANGE_NETWORK_STATE
android.permission.VIBRATE
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.READ_MEDIA_IMAGES
android.permission.READ_MEDIA_VIDEO
android.permission.SET_WALLPAPER
android.permission.FOREGROUND_SERVICE
android.permission.FLASHLIGHT
android.permission.ACCESS_NETWORK_STATE
com.google.android.providers.gsf.permission.READ_GSERVICES
com.google.android.gms.permission.AD_ID
com.google.android.gms.permission.ACTIVITY_RECOGNITION
android.permission.INTERNET
android.permission.WAKE_LOCK
com.google.android.c2dm.permission.RECEIVE
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
android.permission.REORDER_TASKS

Receivers

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

com.google.android.gms.measurement.AppMeasurementInstallReferrerReceiver

com.android.vending.INSTALL_REFERRER

Services

com.toney.funnymemsstickercollection.DisplayFlavor

android.service.notification.NotificationListenerService

Sharing

General

Malware Config

Signatures

Files

Password: infected

Password: infected

com.toney.funnymemsstickercollection

com.flavionet.android.camera.MainActivity

Activities

com.flavionet.android.camera.MainActivity

com.flavionet.android.cameralegacy.Main

androidx.test.core.app.InstrumentationActivityInvoker$BootstrapActivity

androidx.test.core.app.InstrumentationActivityInvoker$EmptyActivity

androidx.test.core.app.InstrumentationActivityInvoker$EmptyFloatingActivity

Permissions

Receivers

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.gms.measurement.AppMeasurementInstallReferrerReceiver

Services

com.toney.funnymemsstickercollection.DisplayFlavor