General

  • Target

    65b44ac375a97b14ef7f005b5e03a225ddb3118420c61dd8ec07a1f6aeaa953e.bin

  • Size

    4.5MB

  • MD5

    2ffee47618c0f9c517be7456c1228205

  • SHA1

    e205a11e1d2b7ae432fac146cc2b980335f9337a

  • SHA256

    65b44ac375a97b14ef7f005b5e03a225ddb3118420c61dd8ec07a1f6aeaa953e

  • SHA512

    3386e647127e84dff35ff9af15ff631c2ff5a96ca3013749d9f3db19c0721e4437f4ee3fa4cf7fcb4ac820324cc25c4dc7f3f421c2c8b32eb9b0ba3a6d79135e

  • SSDEEP

    98304:W+c5tglWVmM742/EDocKdI4ak3of7XAsLi9Kg/ccqt84YEsrPSO:BQZ78oPdNS7XAse9B/Gt8IO

Score
6/10

Malware Config

Signatures

  • Requests dangerous framework permissions 4 IoCs

Files

  • 65b44ac375a97b14ef7f005b5e03a225ddb3118420c61dd8ec07a1f6aeaa953e.bin
    .apk android

    com.liftosaur.www.twa

    com.liftosaur.www.twa.MainActivity


Android Permissions

65b44ac375a97b14ef7f005b5e03a225ddb3118420c61dd8ec07a1f6aeaa953e.bin

Permissions

android.permission.INTERNET

android.permission.SCHEDULE_EXACT_ALARM

com.android.vending.BILLING

android.permission.FOREGROUND_SERVICE

android.permission.POST_NOTIFICATIONS

com.android.alarm.permission.SET_ALARM

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.VIBRATE

com.liftosaur.www.twa.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE