General

  • Target

    WAMR Undelete messages!_0.15.3_Apkpure.apk

  • Size

    35.7MB

  • MD5

    b5a5c8e3f3cc17328a2314c69d1c62a2

  • SHA1

    110859a7674edc2c08f93f83be7932d5500594b2

  • SHA256

    f2775e66c8e97e09c85b488a31995311046cd226da9240c707468e9b01c38531

  • SHA512

    ad7a11b0a5a876ed63977c2ae2b8535d2cb21bb87403eb92e20e161272f01fba183b44987c839691f42d3f84c796e3afcce2dea8e6bb34d1154a7f761470eaab

  • SSDEEP

    786432:x5IbkIIwjd1ZbCFHrExIhR5fKjcstc3PKTqWJX+V8OxkToC0p5vCA3CE115Q:XIbgU9krE+hfKjcstqCTq0m8k5bP5Q

Score
6/10

Malware Config

Signatures

  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 3 IoCs

Files

  • WAMR Undelete messages!_0.15.3_Apkpure.apk
    .apk android arch:arm64 arch:arm arch:x86 arch:x64

    com.drilens.wamr

    com.drilens.wamr.MainActivity


Android Permissions

WAMR Undelete messages!_0.15.3_Apkpure.apk

Permissions

android.permission.FOREGROUND_SERVICE

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

com.android.vending.BILLING

android.permission.VIBRATE

com.drilens.wamr.BROADCAST_PERMISSION

com.google.android.gms.permission.AD_ID

android.permission.POST_NOTIFICATIONS

android.permission.WAKE_LOCK

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

com.applovin.array.apphub.permission.BIND_APPHUB_SERVICE

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_ADSERVICES_ATTRIBUTION

android.permission.ACCESS_ADSERVICES_AD_ID

android.permission.ACCESS_ADSERVICES_TOPICS

com.drilens.wamr.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION