General

  • Target

    recover-deleted-messages-warm-2-4-7.apk

  • Size

    22.9MB

  • MD5

    90b49f41c85987bed6053267b1ce27c1

  • SHA1

    6f0ce6eb2e3aa2125ca155d32e286b2f2fe46676

  • SHA256

    23ab178db7bccf513d89040ab70599be3bbf7da0207d79c9bd32a31f18097805

  • SHA512

    636b5e7e85419272d078a3862ae6370bedc60dfdbea53b7964c0c2e523da9ef24ae493ab672e3ead23fb2d2bd7d0f48d2b2382d9e37fcef653080c677e43d35e

  • SSDEEP

    393216:Vzg2/kDDY5xfWcLAomcIiLg6HJfaRMHeHdh4:22/kY5x+ZomcIiLjtau/

Score
6/10

Malware Config

Signatures

  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 5 IoCs

Files

  • recover-deleted-messages-warm-2-4-7.apk
    .apk android arch:arm64 arch:arm

    whatsapprecovery.deletedphotos.recover.deleted.message

    whatsapprecovery.deletedphotos.recover.deleted.message.ui.activity.SplashActivity


Android Permissions

recover-deleted-messages-warm-2-4-7.apk

Permissions

android.permission.INTERNET

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

oppo.permission.OPPO_COMPONENT_SAFE

android.permission.WAKE_LOCK

android.permission.FOREGROUND_SERVICE

android.permission.READ_CONTACTS

android.permission.POST_NOTIFICATIONS

android.permission.ACCESS_WIFI_STATE

com.google.android.gms.permission.AD_ID

android.permission.READ_PHONE_STATE

android.permission.ACCESS_ADSERVICES_AD_ID

android.permission.ACCESS_ADSERVICES_ATTRIBUTION

android.permission.ACCESS_ADSERVICES_TOPICS

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

com.applovin.array.apphub.permission.BIND_APPHUB_SERVICE

whatsapprecovery.deletedphotos.recover.deleted.message.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION