General

  • Target

    FDE.AI-v24.01.1.apk

  • Size

    4.1MB

  • MD5

    28b8afdb4f6bb454f2877a24fe07e93a

  • SHA1

    12cf00401cc094f31f1c286f93e2ee5c3c4d6b12

  • SHA256

    d39d76e6e915271b973f4e7a01d6f30bdeb7279accca9827ff6c675edd603c96

  • SHA512

    8c57a43f30cc264d340d05301941bcf63a9e78e42c9b3a06ba04b4bae3d92554dd0a7b55db2c9dd2fc39ac5c27873d320b058688d47816c40ed3dbc6a21fbd2c

  • SSDEEP

    98304:fYNMzAejgxZGHC5qfBsue/05dRUwnbI8I9WCqoCed/0Oten3qPL:fYN42ZoZBy/CRUofI9HUFn3gL

Score
6/10

Malware Config

Signatures

  • Declares services with permission to bind to the system 3 IoCs
  • Requests dangerous framework permissions 5 IoCs

Files

  • FDE.AI-v24.01.1.apk
    .apk android arch:arm64 arch:arm

    com.ayljzuwumq.xhvqifaxmb

    com.feravolt.fdeai.ui.MainActivity


Android Permissions

FDE.AI-v24.01.1.apk

Permissions

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.QUICKBOOT_POWERON

android.permission.FOREGROUND_SERVICE

android.permission.FOREGROUND_SERVICE_DATA_SYNC

android.permission.SYSTEM_ALERT_WINDOW

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_DOWNLOAD_MANAGER

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.READ_EXTERNAL_STORAGE

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.POST_NOTIFICATIONS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.QUERY_ALL_PACKAGES

com.ayljzuwumq.xhvqifaxmb.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION