General

  • Target

    Shell_ril_2024-02-16.apk

  • Size

    13.2MB

  • MD5

    3528c06571d2467f1bab63bbade5a1d1

  • SHA1

    622f307105720e9714b6775cf64398d057f39b35

  • SHA256

    22644c63a908254a5a3f63f1f845ec236046fe4abb05af91aecbb60b2c53d928

  • SHA512

    13f6babc1a2b5b270e56c99b5da08dc43c6e5e95c26840a5fad12bcd000a8d0bf1ca0bc53c70dea39f7d08eb32cfcc8ac2bb8168478f7ea87981a61134e01550

  • SSDEEP

    196608:JZQqroQ0xgERtf+J2EXZ3Xx9lwYsrT6N21ZCgdA2bkDtb3lp7hoArPY:J1rXwvf+EEpaYU6N21YV9lp7hHY

Score
6/10

Malware Config

Signatures

  • Requests dangerous framework permissions 7 IoCs

Files

  • Shell_ril_2024-02-16.apk
    .apk android arch:arm arch:arm64

    com.itek.itekshell

    com.itek.itekshell.activity.LandingActivity


Android Permissions

Shell_ril_2024-02-16.apk

Permissions

android.permission.READ_PHONE_STATE

android.permission.READ_PRIVILEGED_PHONE_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.VIBRATE

android.permission.INTERNET

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.LOCAL_MAC_ADDRESS

android.permission.STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.BLUETOOTH_ADMIN

android.permission.CAMERA

android.permission.CHANGE_WIFI_STATE