redfox[.]apk | Triage

Sharing

General

Target

redfox.apk
Size

2.6MB
MD5

45a873234eda00bd971b140ca54b2a6f
SHA1

1dae0ea8e4a614fa4abec29752ad9d26f9ceab33
SHA256

55b9aa2a41f6fd46aa285d8a24f9dab0bdea729797199aa28648d89f036cff6b
SHA512

21b3f098f34e645b9f4401b6aaef141f460e6cca84f4eb22f4e81b11de8859af8aaf50c3f255f6578f82f9b097a030bab16e1bf32d3210ec8dd9617d69072da7
SSDEEP

49152:h74rj51pzGEzUnhAvwOHTacTADdw7NF2ytGkDsTxD:h7Gj9GEzUnhxM0m7P0

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 3 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to read SMS messages.	android.permission.READ_SMS

Files

redfox.apk
.apk android

com.kofe.lake

com.kofe.lake.MainActivity

Activities

com.kofe.lake.MainActivity

android.intent.action.MAIN

Permissions

android.permission.INTERNET
android.permission.READ_PHONE_STATE
android.permission.READ_CONTACTS
android.permission.READ_SMS
com.kofe.lake.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Receivers

androidx.profileinstaller.ProfileInstallReceiver

androidx.profileinstaller.action.INSTALL_PROFILE
androidx.profileinstaller.action.SKIP_FILE
androidx.profileinstaller.action.SAVE_PROFILE
androidx.profileinstaller.action.BENCHMARK_OPERATION

Android Permissions

redfox.apk

Permissions

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.READ_CONTACTS

android.permission.READ_SMS

com.kofe.lake.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION