General

  • Target

    app1348972.apk

  • Size

    9.6MB

  • MD5

    ab82e8ded42352a5c2c2d5b735dde0b6

  • SHA1

    19b5ca44208e04aad2c2e1720b8f6041b9873bd6

  • SHA256

    29f5d4170119074bc3f183ffb3fdd3df58fcc8d1699224479b707446def3587d

  • SHA512

    8e234bce02a717f0a249d56c8bcfa965ce646369a1ac013d273da87a4d54b30690333f95107f0c6c9a973a6777d58b2c55a065471f0aa8142d5af9f3dedc0273

  • SSDEEP

    196608:hmO4rYye2J4LHARjsz+JCPfvBdae7KVtUBmG8+ZAwzQ6ZLOEmsHzn2:hm1YyT4LgtsaEvBdaeKV1f

Score
6/10

Malware Config

Signatures

  • Declares services with permission to bind to the system 1 IoCs

Files

  • app1348972.apk
    .apk android arch:arm64 arch:arm arch:mips arch:mips64 arch:x86 arch:x64

    regio.play01

    regio.play01.preinicio


Android Permissions

app1348972.apk

Permissions

android.permission.FOREGROUND_SERVICE

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.WAKE_LOCK

com.google.android.c2dm.permission.RECEIVE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.ACCESS_WIFI_STATE

android.permission.RECEIVE_BOOT_COMPLETED