reptilicusRelease-6[.]3[.]6-337[.]apk

General

Target

reptilicusRelease-6.3.6-337.apk
Size

2.5MB
MD5

aa596d0a398f92760fdcb69b864af230
SHA1

988ba36b052f3361cfa22e924426d918518b531f
SHA256

33a8b2a5325b7ddbf6e1bef68779df7b68abe406f47bb27253a69cd857c43f99
SHA512

5cdb689887bdc12428bbd7471cd645453f82962e92132b8bf4129450c9203b668645895e0ab4a346cb05208340157604b46d43f9303ea947cf646b5a3f85730b
SSDEEP

49152:YqKkFAWSqxM8hEiJvYCFgwB30ORdPv5KSOfXDjfulPR0npPYcE:YjkFA1D6EiiWV30MX5KSOPDjWlPRr

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE

Requests dangerous framework permissions 13 IoCs

description	ioc
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Required to be able to access the camera device.	android.permission.CAMERA
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether.	android.permission.PROCESS_OUTGOING_CALLS
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access location in the background.	android.permission.ACCESS_BACKGROUND_LOCATION
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to collect component usage statistics.	android.permission.PACKAGE_USAGE_STATS
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES

Files

reptilicusRelease-6.3.6-337.apk
.apk android arch:arm

com.brot.storage.work

net.delphiboardlayer.androidcoreapp.FakeActivity

Activities

net.delphiboardlayer.androidcoreapp.FakeActivity

android.intent.action.MAIN

Permissions

android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS
android.permission.CAMERA
android.permission.INTERNET
android.permission.WAKE_LOCK
android.permission.READ_PHONE_STATE
android.permission.PROCESS_OUTGOING_CALLS
com.android.browser.permission.READ_HISTORY_BOOKMARKS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_BACKGROUND_LOCATION
android.permission.ACCESS_NETWORK_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.READ_CONTACTS
android.permission.CHANGE_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.RECORD_AUDIO
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.READ_EXTERNAL_STORAGE
android.permission.ACCESS_SUPERUSER
android.permission.WRITE_INTERNAL_STORAGE
android.permission.DISABLE_KEYGUARD
android.permission.FOREGROUND_SERVICE
android.permission.PACKAGE_USAGE_STATS
android.permission.REQUEST_INSTALL_PACKAGES
com.google.android.c2dm.permission.RECEIVE

Receivers

net.delphiboardlayer.androidcoreapp.UserPresent

android.intent.action.USER_PRESENT

net.delphiboardlayer.androidcoreapp.RDeviceAdminReceiver

android.app.action.DEVICE_ADMIN_ENABLED

net.delphiboardlayer.androidcoreapp.CallReceiver

android.intent.action.NEW_OUTGOING_CALL

net.delphiboardlayer.androidcoreapp.WatchDogReceiver

android.intent.action.NEW_OUTGOING_CALL
android.intent.action.PHONE_STATE
android.intent.action.BATTERY_LOW
android.intent.action.BATTERY_OKAY
android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED
android.intent.action.USER_PRESENT
android.net.ConnectivityManager.CONNECTIVITY_ACTION
android.net.wifi.STATE_CHANGE
android.net.wifi.supplicant.CONNECTION_CHANGE
android.net.conn.CONNECTIVITY_CHANGE

net.delphiboardlayer.androidcoreapp.BootReceiver

android.intent.action.QUICKBOOT_POWERON
com.htc.intent.action.QUICKBOOT_POWERON
android.intent.action.BOOT_COMPLETED

net.delphiboardlayer.androidcoreapp.AddRemovePackageReceiver

android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED

net.delphiboardlayer.androidcoreapp.ItemReceiver

net.delphiboardlayer.androidcoreapp.ADD_ITEM
net.delphiboardlayer.androidcoreapp.COMMAND
net.delphiboardlayer.androidcoreapp.START_SERVICE
net.delphiboardlayer.androidcoreapp.UPDATE
net.delphiboardlayer.androidcoreapp.SERVICE_WORKING
net.delphiboardlayer.androidcoreapp.SETTINGS

net.delphiboardlayer.androidcoreapp.MediaMountReceiver

android.intent.action.MEDIA_MOUNTED

net.delphiboardlayer.androidcoreapp.RefererReceiver

com.android.vending.INSTALL_REFERRER

net.delphiboardlayer.androidcoreapp.B2BReceiver

com.catalinagroup.callrecorder_b2b.action_call_saved
com.catalinagroup.callrecorder_b2b.action_phone_state

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

Services

net.delphiboardlayer.androidcoreapp.MainAccessibilityService

android.accessibilityservice.AccessibilityService

net.delphiboardlayer.androidcoreapp.FCMReceiver

com.google.firebase.MESSAGING_EVENT

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

Android Permissions

reptilicusRelease-6.3.6-337.apk

Permissions

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.CAMERA

android.permission.INTERNET

android.permission.WAKE_LOCK

android.permission.READ_PHONE_STATE

android.permission.PROCESS_OUTGOING_CALLS

com.android.browser.permission.READ_HISTORY_BOOKMARKS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_BACKGROUND_LOCATION

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.READ_CONTACTS

android.permission.CHANGE_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.RECORD_AUDIO

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.READ_EXTERNAL_STORAGE

android.permission.ACCESS_SUPERUSER

android.permission.WRITE_INTERNAL_STORAGE

android.permission.DISABLE_KEYGUARD

android.permission.FOREGROUND_SERVICE

android.permission.PACKAGE_USAGE_STATS

android.permission.REQUEST_INSTALL_PACKAGES

com.google.android.c2dm.permission.RECEIVE

Sharing

General

Malware Config

Signatures

Files

com.brot.storage.work

net.delphiboardlayer.androidcoreapp.FakeActivity

Activities

net.delphiboardlayer.androidcoreapp.FakeActivity

Permissions

Receivers

net.delphiboardlayer.androidcoreapp.UserPresent

net.delphiboardlayer.androidcoreapp.RDeviceAdminReceiver

net.delphiboardlayer.androidcoreapp.CallReceiver

net.delphiboardlayer.androidcoreapp.WatchDogReceiver

net.delphiboardlayer.androidcoreapp.BootReceiver

net.delphiboardlayer.androidcoreapp.AddRemovePackageReceiver

net.delphiboardlayer.androidcoreapp.ItemReceiver

net.delphiboardlayer.androidcoreapp.MediaMountReceiver

net.delphiboardlayer.androidcoreapp.RefererReceiver

net.delphiboardlayer.androidcoreapp.B2BReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

Services

net.delphiboardlayer.androidcoreapp.MainAccessibilityService

net.delphiboardlayer.androidcoreapp.FCMReceiver

com.google.firebase.messaging.FirebaseMessagingService

Android Permissions

reptilicusRelease-6.3.6-337.apk