app-leader[.]apk | Triage

Sharing

Copy URL Twitter E-mail

General

Target

app-leader.apk
Size

2.5MB
MD5

55fd7711ca900ba1ba443e16868714d7
SHA1

943e076259113e4bcfd7683cd1ba9abc7abfedf7
SHA256

4cb5319d1a62573c0db78ddba24cda9102dfd841f3f8919c9a30fc5fbc0f890d
SHA512

63c550a1c930baf11455defa83edbde42d7d01abc1505e30a264ac552fc3b98c52b7c02f334f24f4f13a1043df524e84f90c937698ebb2dffa03e0a476db2040
SSDEEP

49152:sYtZlCHsHasC3+2eAx6e+OnZQbUmrpEkA0+TTngp0gW9fBmZos7:ssZlx26HOnZQb3pEkh+XUWq6i

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 3 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE

Files

app-leader.apk
.apk android

com.krxy.leaderquery

com.krxy.leaderquery.GetAndSendQueryActivity

Activities

com.krxy.leaderquery.GetAndSendQueryActivity

android.intent.action.MAIN

Permissions

android.permission.INTERNET
android.permission.READ_PHONE_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_EXTERNAL_STORAGE

Android Permissions

app-leader.apk

Permissions

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE