ethiopia-prod-146[.]apk

General

Target

ethiopia-prod-146.apk
Size

15.8MB
MD5

b53190fbd3a12a2580eb9cd9b09944d3
SHA1

4dc28b5419943298d8f519f1ed50493b092c26a2
SHA256

8a6265c1c1cad584508282a353fa6209334d0c7f5e46b930df034e32cbe53de7
SHA512

e66ff740d384737b89b0ff7f603704499dbbf7421bf382fb3373dd038c37eaefa12f82f08f1f75c3a3f73daac556066bbccc529910c43f6723f6a917657d8817
SSDEEP

196608:fd01kCe4+qwuhBYVsz5gKRNBNuTV78Zq1l/bhZcTWl06q2M4ASRMot63bgMgWLNx:FYtwABKWSKT3uT9240W9ASRxacUoE

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 9 IoCs

description	ioc
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows applications to use exact alarm APIs.	android.permission.SCHEDULE_EXACT_ALARM
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application a broad access to external storage in scoped storage.	android.permission.MANAGE_EXTERNAL_STORAGE

Files

ethiopia-prod-146.apk
.apk android

com.friel.ethiopia.tracking

com.friel.ethiopia.tracking.activities.splash.SplashActivity

Activities

com.friel.ethiopia.tracking.activities.times.TimesActivity

android.nfc.action.TECH_DISCOVERED
android.nfc.action.TAG_DISCOVERED

com.friel.ethiopia.tracking.activities.workers.WorkersActivity

android.nfc.action.TECH_DISCOVERED
android.nfc.action.TAG_DISCOVERED

com.friel.ethiopia.tracking.activities.splash.SplashActivity

android.intent.action.MAIN

Permissions

android.permission.ACCESS_WIFI_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.INTERNET
android.permission.CHANGE_NETWORK_STATE
android.permission.NFC
android.permission.CAMERA
android.permission.READ_EXTERNAL_STORAGE
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.WAKE_LOCK
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.READ_PHONE_STATE
android.permission.VIBRATE
android.permission.DISABLE_KEYGUARD
android.permission.SYSTEM_ALERT_WINDOW
android.permission.SCHEDULE_EXACT_ALARM
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.MANAGE_EXTERNAL_STORAGE
com.friel.ethiopia.tracking.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
android.permission.BLUETOOTH
android.permission.BLUETOOTH_ADMIN

Receivers

com.friel.ethiopia.tracking.services.AlarmReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.QUICKBOOT_POWERON

com.evernote.android.job.v14.PlatformAlarmReceiver

com.evernote.android.job.v14.RUN_JOB
net.vrallev.android.job.v14.RUN_JOB

com.evernote.android.job.JobBootReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.QUICKBOOT_POWERON
com.htc.intent.action.QUICKBOOT_POWERON
android.intent.action.MY_PACKAGE_REPLACED

com.birjuvachhani.locus.LocationBroadcastReceiver

com.birjuvachhani.locus.LocationProvider.LocationBroadcastReceiver.action.PROCESS_UPDATES

androidx.profileinstaller.ProfileInstallReceiver

androidx.profileinstaller.action.INSTALL_PROFILE
androidx.profileinstaller.action.SKIP_FILE
androidx.profileinstaller.action.SAVE_PROFILE
androidx.profileinstaller.action.BENCHMARK_OPERATION

Services

com.evernote.android.job.gcm.PlatformGcmService

com.google.android.gms.gcm.ACTION_TASK_READY

Android Permissions

ethiopia-prod-146.apk

Permissions

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.CHANGE_NETWORK_STATE

android.permission.NFC

android.permission.CAMERA

android.permission.READ_EXTERNAL_STORAGE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.WAKE_LOCK

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.READ_PHONE_STATE

android.permission.VIBRATE

android.permission.DISABLE_KEYGUARD

android.permission.SYSTEM_ALERT_WINDOW

android.permission.SCHEDULE_EXACT_ALARM

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MANAGE_EXTERNAL_STORAGE

com.friel.ethiopia.tracking.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

Sharing

General

Malware Config

Signatures

Files

com.friel.ethiopia.tracking

com.friel.ethiopia.tracking.activities.splash.SplashActivity

Activities

com.friel.ethiopia.tracking.activities.times.TimesActivity

com.friel.ethiopia.tracking.activities.workers.WorkersActivity

com.friel.ethiopia.tracking.activities.splash.SplashActivity

Permissions

Receivers

com.friel.ethiopia.tracking.services.AlarmReceiver

com.evernote.android.job.v14.PlatformAlarmReceiver

com.evernote.android.job.JobBootReceiver

com.birjuvachhani.locus.LocationBroadcastReceiver

androidx.profileinstaller.ProfileInstallReceiver

Services

com.evernote.android.job.gcm.PlatformGcmService

Android Permissions

ethiopia-prod-146.apk