General

  • Target

    1194_playdns565.apk

  • Size

    18.3MB

  • MD5

    be25e8cd7694c13344c0343e4676cac0

  • SHA1

    9015eb13c4db3d41fa7128bade2b5afe158b600b

  • SHA256

    75cc554d80a09897e67d73cdbe094370af9865d77f64b27ee35792fa13ec320e

  • SHA512

    3e1707fdfe79d96cdf17a9fc5c5ed36e7a3c86b65f78f7f2ae9c544be00d111a92eb5aca6d8d14ca3d1e56bf2b4e72d4c02f40a93e6cfbe1d2955216cf4ed75f

  • SSDEEP

    393216:G9QIOUSlDw6WPkgL+5EzT6x5lHHN3BmWUpipmnVvhcCtbXDb7rb4ZMsYTlNjn:GPOTJQPkIPIlHtceCtbXDbrqMsYn

Score
6/10

Malware Config

Signatures

  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 4 IoCs

Files

  • 1194_playdns565.apk
    .apk android arch:arm64 arch:arm arch:x86 arch:x64

    Password: 9816334

    com.play.dns.phx5

    org.sopcast.android.SplashActivity


Android Permissions

1194_playdns565.apk

Permissions

android.permission.INTERNET

android.permission.READ_OWNER_DATA

android.permission.READ_PRIVILEGED_PHONE_STATE

android.permission.WRITE_OWNER_DATA

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WAKE_LOCK

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.FOREGROUND_SERVICE

com.google.android.gms.permission.AD_ID

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS