Resubmissions

15/04/2024, 08:38

240415-kjwjzsch3x 8

23/02/2024, 10:54

240223-mzjlgafa3z 7

General

  • Target

    Cool Emoji Keyboard_1.5.apk

  • Size

    16.6MB

  • MD5

    86a7f4e68645920ff6dc0246ebe90f82

  • SHA1

    eacdb18200085813bb635174bae0c5845f21211c

  • SHA256

    e7d71efb5a0ed704378966e835efb1de6208a4e48f77b79aadcd69f93680c182

  • SHA512

    0e40b7a884e3d3815500a8fdc258b1d064f9ecca0137bee61daeff439d450cfe0147e25ab80a3bd3449721552da436afce247268af4db90365dc34adf47b39f4

  • SSDEEP

    393216:Zsy9slz3Bmz6UJ/KyUoyJTybZCNjWEOrPFJRR4ehYArC:Zr2rBmzPKyUoyZA2jIv+f

Score
6/10

Malware Config

Signatures

  • Declares services with permission to bind to the system 2 IoCs
  • Requests dangerous framework permissions 3 IoCs

Files

  • Cool Emoji Keyboard_1.5.apk
    .apk android arch:arm64 arch:arm arch:x86 arch:x64

    com.saappdev.IMAGEtoPDF

    com.saappdev.IMAGEtoPDF.activity.SplashActivity


Android Permissions

Cool Emoji Keyboard_1.5.apk

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.VIBRATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.WRITE_USER_DICTIONARY

android.permission.WAKE_LOCK

android.permission.SYSTEM_ALERT_WINDOW

com.google.android.gms.permission.AD_ID

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.ACCESS_ADSERVICES_ATTRIBUTION

android.permission.ACCESS_ADSERVICES_AD_ID

com.saappdev.IMAGEtoPDF.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION