insidiousMalware[.]zip

General

Target

insidiousMalware.zip
Size

3.5MB
MD5

638b048743dc0a7ca9415d3905e75dd0
SHA1

79460e497c058e085766e2c91f185956f615e7ad
SHA256

e28571233a454b2d75fceec25a4568d1c2569e9991752feddbf4d23fa495abf1
SHA512

dd136b3ed371752c972babb8730a2a5e102323ed895812e754b756c38cc1a2b4e1997ea416b755b25fc5a98cfbab3adb302f5631887874eb484934bae03b5064
SSDEEP

98304:vHz5RjFJ5mTkXugdl/HLWWWyJqb9Gesj6L4SUPj/zzVWu7T:/z5OcueNLWOJqZGem6s/ou7T

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE

Requests dangerous framework permissions 2 IoCs

description	ioc
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS

Files

insidiousMalware.zip
.zip

Password: infected
ea069a5c96dc1db0715923eb68192fd325f3d3ce
.apk android

com.brazil.android.free

com.brazil.android.free.MainActivity

Activities

com.brazil.android.free.MainActivity

android.intent.action.MAIN

Permissions

android.permission.SYSTEM_ALERT_WINDOW
android.permission.WAKE_LOCK
android.permission.FOREGROUND_SERVICE
android.permission.WRITE_SETTINGS
android.permission.BIND_ACCESSIBILITY_SERVICE
android.permission.REQUEST_DELETE_PACKAGES
android.permission.SYSTEM_OVERLAY_WINDOW
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
com.google.android.c2dm.permission.RECEIVE
com.brazil.android.free.permission.C2D_MESSAGE

Receivers

com.google.android.gms.measurement.AppMeasurementInstallReferrerReceiver

com.android.vending.INSTALL_REFERRER

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

Services

com.brazil.android.free.CommandService

android.accessibilityservice.AccessibilityService

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

com.google.firebase.iid.FirebaseInstanceIdService

com.google.firebase.INSTANCE_ID_EVENT
f17aebc741957aa21cfe7c7d7baec0900e863f61
.apk android

com.secure.protect.world

com.brazil.android.free.MainActivity

Activities

com.brazil.android.free.MainActivity

android.intent.action.MAIN

Permissions

android.permission.SYSTEM_ALERT_WINDOW
android.permission.WAKE_LOCK
android.permission.FOREGROUND_SERVICE
android.permission.WRITE_SETTINGS
android.permission.BIND_ACCESSIBILITY_SERVICE
android.permission.REQUEST_DELETE_PACKAGES
android.permission.SYSTEM_OVERLAY_WINDOW
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
com.google.android.c2dm.permission.RECEIVE
com.secure.protect.world.permission.C2D_MESSAGE

Receivers

com.google.android.gms.measurement.AppMeasurementInstallReferrerReceiver

com.android.vending.INSTALL_REFERRER

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

Services

com.brazil.android.free.CommandService

android.accessibilityservice.AccessibilityService

com.brazil.android.free.MyFirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

com.google.firebase.iid.FirebaseInstanceIdService

com.google.firebase.INSTANCE_ID_EVENT

Sharing

General

Malware Config

Signatures

Files

Password: infected

com.brazil.android.free

com.brazil.android.free.MainActivity

Activities

com.brazil.android.free.MainActivity

Permissions

Receivers

com.google.android.gms.measurement.AppMeasurementInstallReferrerReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

Services

com.brazil.android.free.CommandService

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.iid.FirebaseInstanceIdService

com.secure.protect.world

com.brazil.android.free.MainActivity

Activities

com.brazil.android.free.MainActivity

Permissions

Receivers

com.google.android.gms.measurement.AppMeasurementInstallReferrerReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

Services

com.brazil.android.free.CommandService

com.brazil.android.free.MyFirebaseMessagingService

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.iid.FirebaseInstanceIdService