coviFakeCoronaTest.zip
- SHA256 6db76938157cc9ca70e8a8bdb27584901cb1afe4d7984097a28e178fe6b72ab5
Password
infected
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
b11e45e1f7f4dca9327a10a572c18623.apk
Resource
android-x64-arm64-20240506-en
android-11-x64
11 signatures
150 seconds
General
- Target coviFakeCoronaTest.zip
- Size 286KB
- Sample240512-tr3spsgh73
- SHA256 6db76938157cc9ca70e8a8bdb27584901cb1afe4d7984097a28e178fe6b72ab5
- MD5 2ddea7a66479aa4a4bc983974ade3680
- SHA1 e99e9412e4efcf4c44c5874c2395d41d3fc2c051
- SHA512 5ac13a4b2cad2d853d9fb131baa7079e881e1da899c1aced40a54953430be32d653a0b4e01021a72e7ad14d6dcdcf7410e6500545c325525756fdaabec6b354d
- SSDEEP 6144:N4J1/CkDWtlmt4GRMPS8P+JF2Tws8UjK6fsLKS+Ek35Ia/+h:NC17jRCS8+z28s8UMRBq+h
- MD5 SHA1 SHA512 SSDEEP
Score
6/10
Malware Config
Signatures
- Declares services with permission to bind to the system 1 IoCs
description ioc Required by accessibility services to bind with the system. Allows apps to access accessibility features. android.permission.BIND_ACCESSIBILITY_SERVICE - Requests dangerous framework permissions 13 IoCs
description ioc Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE Allows an application to collect component usage statistics. android.permission.PACKAGE_USAGE_STATS Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps. android.permission.SYSTEM_ALERT_WINDOW Allows an app to access approximate location. android.permission.ACCESS_COARSE_LOCATION Allows an app to access precise location. android.permission.ACCESS_FINE_LOCATION Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call. android.permission.CALL_PHONE Allows an application to send SMS messages. android.permission.SEND_SMS Allows an application to record audio. android.permission.RECORD_AUDIO Allows an application to read the user's contacts data. android.permission.READ_CONTACTS Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE Allows an application to receive SMS messages. android.permission.RECEIVE_SMS Allows an application to read SMS messages. android.permission.READ_SMS
File Explorer
-
coviFakeCoronaTest.zip.zip 286KB
-
b11e45e1f7f4dca9327a10a572c18623.apk 359KB
b11e45e1f7f4dca9327a10a572c18623
- SHA256 b8d245b62fdb7370aaef0133b62c25c3eb60d2d0f15d8170b2255c26d489a589
- MD5 b11e45e1f7f4dca9327a10a572c18623
- SHA1 6303eaacb5e1a36947968421e42aa797e6498ce7
- SHA512 cacc830cc849cabea7bb4011315b7bd3f9448e2a3b950fdbad69292c3f3b79f3d044a5676c23161c78465e39c4b96190473f53c65844caed98e05c61e9a239b9
- SSDEEP 6144:MupToo0rsm1zX72D8T/vBY5C7w+U4PQbLiNG3HxFDh0M65IsSQDt/:JpTo5smB7/y34PEiShj65IsSQJ/
- MD5 SHA1 SHA512 SSDEEP
wteu.cjvow.ldkanccrhcxhrj
wteu.cjvow.ldkanccrhcxhrj.Activity.MainActivity
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_EXTERNAL_STORAGE
android.permission.WAKE_LOCK
android.permission.GET_TASKS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS
android.permission.PACKAGE_USAGE_STATS
android.permission.SYSTEM_ALERT_WINDOW
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.FOREGROUND_SERVICE
android.permission.CALL_PHONE
android.permission.SEND_SMS
android.permission.RECORD_AUDIO
android.permission.READ_CONTACTS
android.permission.READ_PHONE_STATE
android.permission.RECEIVE_SMS
android.permission.READ_SMS
android.permission.WRITE_SMS
android.permission.KILL_BACKGROUND_PROCESSES
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.MODIFY_PHONE_STATE
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.CHANGE_NETWORK_STATE
com.google.android.gms.common.api.GoogleApiActivity
wteu.cjvow.ldkanccrhcxhrj.Activity.MainActivity
android.intent.action.MAIN
wteu.cjvow.ldkanccrhcxhrj.SendSms
android.intent.action.SEND
android.intent.action.SENDTO
wteu.cjvow.ldkanccrhcxhrj.Activity.ActivityPermissions
wteu.cjvow.ldkanccrhcxhrj.API.Screenshot.ActivityScreenshot
wteu.cjvow.ldkanccrhcxhrj.Activity.ActivityInjection
wteu.cjvow.ldkanccrhcxhrj.Activity.ActivityGetNumber
wteu.cjvow.ldkanccrhcxhrj.Activity.ActivityAlert1
wteu.cjvow.ldkanccrhcxhrj.Activity.ActivityGetSMS
wteu.cjvow.ldkanccrhcxhrj.Activity.ActivityAlert2
wteu.cjvow.ldkanccrhcxhrj.Activity.ActivityStartUSSD
wteu.cjvow.ldkanccrhcxhrj.Activity.ActivityPushInjection
wteu.cjvow.ldkanccrhcxhrj.Activity.ActivityOpenURL
wteu.cjvow.ldkanccrhcxhrj.Activity.ActivityScreenLocker
wteu.cjvow.ldkanccrhcxhrj.Activity.ActivityAccessibility
wteu.cjvow.ldkanccrhcxhrj.Activity.ActivityPlayProtect
wteu.cjvow.ldkanccrhcxhrj.Activity.firstInstall
wteu.cjvow.ldkanccrhcxhrj.Activity.LookScreen
wteu.cjvow.ldkanccrhcxhrj.ServiceHeadlessSmsSend
android.intent.action.RESPOND_VIA_MESSAGE
wteu.cjvow.ldkanccrhcxhrj.ServiceInjections
wteu.cjvow.ldkanccrhcxhrj.ServiceGeolocationNetwork
wteu.cjvow.ldkanccrhcxhrj.ServiceCommands
wteu.cjvow.ldkanccrhcxhrj.StartWhileGlobal
wteu.cjvow.ldkanccrhcxhrj.ServiceGeolocationGPS
wteu.cjvow.ldkanccrhcxhrj.ServiceDeleteSMS
wteu.cjvow.ldkanccrhcxhrj.ServiceModuleNotification
wteu.cjvow.ldkanccrhcxhrj.ServiceToast
wteu.cjvow.ldkanccrhcxhrj.ServiceAccessibility
android.accessibilityservice.AccessibilityService
wteu.cjvow.ldkanccrhcxhrj.StartWhileRequest
wteu.cjvow.ldkanccrhcxhrj.API.Screenshot.ServiceScreenshot
wteu.cjvow.ldkanccrhcxhrj.API.Screenshot.ServiceSendRequestImageVNC
wteu.cjvow.ldkanccrhcxhrj.ServiceRAT
wteu.cjvow.ldkanccrhcxhrj.ServiceFindFiles
wteu.cjvow.ldkanccrhcxhrj.accessibilityImage
wteu.cjvow.ldkanccrhcxhrj.socks.ServiceForwardingTunel
wteu.cjvow.ldkanccrhcxhrj.ServiceLookScreen
wteu.cjvow.ldkanccrhcxhrj.ServicePedometer
wteu.cjvow.ldkanccrhcxhrj.Receiver.ReceiverMms
android.provider.Telephony.SMS_DELIVER
wteu.cjvow.ldkanccrhcxhrj.Receiver.RecieverPushService
android.provider.Telephony.WAP_PUSH_DELIVER
wteu.cjvow.ldkanccrhcxhrj.Receiver.ReceiverBoot
android.intent.action.BOOT_COMPLETED
android.intent.action.QUICKBOOT_POWERON
com.htc.intent.action.QUICKBOOT_POWERON
android.intent.action.USER_PRESENT
android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED
android.provider.Telephony.SMS_RECEIVED
android.intent.action.SCREEN_ON
android.intent.action.EXTERNAL_APPLICATIONS_AVAILABLE
android.net.conn.CONNECTIVITY_CHANGE
android.net.conn.CONNECTIVITY_CHANGE
android.net.wifi.WIFI_STATE_CHANGED
android.intent.action.DREAMING_STOPPED