test[.]apk | Triage

General

Target

test.apk
Size

9.4MB
MD5

c4511ce4ce7a91664c9f7e9b474b5d59
SHA1

be530fe583425a1ec1e023f0cbafe4104012342f
SHA256

ccfeadac6747ee64ba820203d0eaad8b6119564556e89f36a7af9a3a679bb1a5
SHA512

dcbe96b9a48cfeeec668b8535ce1faec2b504acc89a8d7f75800b3b0a8a18abc4c8cb0a892a51970b534ae5c3b4e2d8ad0165f083d5748dfb6aee341bbb69cf6
SSDEEP

196608:lBRH2NCfcBwU0ZuVCRxCksfC/IJ3mRyBfimHphp+1Gz1cBBYg35:lB8NCkBwbx0fJA0imJTaGp6B

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 12 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to access location in the background.	android.permission.ACCESS_BACKGROUND_LOCATION
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application a broad access to external storage in scoped storage.	android.permission.MANAGE_EXTERNAL_STORAGE
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS

Files

test.apk
.apk android arch:arm64 arch:arm arch:mips arch:mips64 arch:x86 arch:x64

com.nth.taxicornisa

com.nth.taxicornisa.MainActivity

Activities

com.nth.taxicornisa.MainActivity

android.intent.action.MAIN

com.nth.taxicornisa.sms.ComposeSmsActivity

android.intent.action.SEND
android.intent.action.SENDTO

Permissions

android.permission.WAKE_LOCK
android.permission.INTERNET
android.permission.BLUETOOTH
android.permission.VIBRATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_COARSE_LOCATION
android.permission.CHANGE_NETWORK_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.READ_PHONE_STATE
android.permission.ACCESS_LOCATION_EXTRA_COMMANDS
android.permission.ACCESS_BACKGROUND_LOCATION
android.permission.READ_EXTERNAL_STORAGE
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS
android.permission.MANAGE_EXTERNAL_STORAGE
android.permission.GET_ACCOUNTS
android.permission.READ_CONTACTS
android.permission.REQUEST_INSTALL_PACKAGES
android.permission.WRITE_SETTINGS
android.permission.POST_NOTIFICATIONS
com.google.android.c2dm.permission.RECEIVE
android.permission.RECEIVE_BOOT_COMPLETED

Receivers

com.nth.taxicornisa.sms.SmsReceiver

android.provider.Telephony.SMS_DELIVER

com.nth.taxicornisa.sms.MmsReceiver

android.provider.Telephony.WAP_PUSH_DELIVER

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

com.instacart.library.truetime.BootCompletedBroadcastReceiver

android.intent.action.BOOT_COMPLETED

Services

com.nth.taxicornisa.services.SmsSendService

android.intent.action.RESPOND_VIA_MESSAGE

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT
carmen.apk
.apk android arch:arm

com.ivona.tts.voicebeta.ron.rou.carmen

.IvonaVoice

Activities

.IvonaVoice

android.intent.action.MAIN

CheckVoiceInstalled

com.ivona.tts.CHECK_VOICE_INSTALLED

Permissions

android.permission.WRITE_EXTERNAL_STORAGE
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.READ_PHONE_STATE
com.android.vending.CHECK_LICENSE
android.permission.WAKE_LOCK

Receivers

com.ivona.tts.voicelib.ActivityReceiver

android.intent.action.USER_PRESENT

com.ivona.tts.voicelib.ActivityReceiver

android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_CHANGED
android.intent.action.PACKAGE_REMOVED
android.intent.action.PACKAGE_RESTARTED
android.intent.action.PACKAGE_FULLY_REMOVED
android.intent.action.PACKAGE_REPLACED

.UpdateReceiver

android.intent.action.PACKAGE_REPLACED

Services
ivona.apk
.apk android arch:arm

com.ivona.tts

com.ivona.tts.WelcomeActivity

Activities

com.ivona.ttslib.DownloadVoiceData

android.speech.tts.engine.INSTALL_TTS_DATA

com.ivona.ttslib.CheckVoiceData

android.speech.tts.engine.CHECK_TTS_DATA

com.ivona.ttslib.GetSampleText

android.speech.tts.engine.GET_SAMPLE_TEXT

.Ivona

android.intent.action.START_TTS_ENGINE

com.ivona.tts.WelcomeActivity

android.intent.action.MAIN

.EngineSettings

android.speech.tts.engine.CONFIGURE_ENGINE

com.ivona.ttslib.CustomSettings

com.ivona.tts.intent.ACTION_CUSTOM_SETTINGS

Permissions

android.permission.WRITE_EXTERNAL_STORAGE
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.READ_PHONE_STATE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.GET_ACCOUNTS
com.android.vending.BILLING

Receivers

com.ivona.ttslib.ActivityReceiver

android.intent.action.USER_PRESENT
android.intent.action.BOOT_COMPLETED

com.ivona.ttslib.PackageMonitorReceiver

android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_CHANGED
android.intent.action.PACKAGE_REMOVED
android.intent.action.PACKAGE_RESTARTED
android.intent.action.PACKAGE_FULLY_REMOVED
android.intent.action.PACKAGE_REPLACED

Services

com.ivona.ttslib.ics.IVONATextToSpeechService

android.intent.action.TTS_SERVICE

Android Permissions

test.apk

Permissions

android.permission.WAKE_LOCK

android.permission.INTERNET

android.permission.BLUETOOTH

android.permission.VIBRATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.CHANGE_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.ACCESS_BACKGROUND_LOCATION

android.permission.READ_EXTERNAL_STORAGE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.MANAGE_EXTERNAL_STORAGE

android.permission.GET_ACCOUNTS

android.permission.READ_CONTACTS

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.WRITE_SETTINGS

android.permission.POST_NOTIFICATIONS

com.google.android.c2dm.permission.RECEIVE

android.permission.RECEIVE_BOOT_COMPLETED

Sharing

General

Malware Config

Signatures

Files

com.nth.taxicornisa

com.nth.taxicornisa.MainActivity

Activities

com.nth.taxicornisa.MainActivity

com.nth.taxicornisa.sms.ComposeSmsActivity

Permissions

Receivers

com.nth.taxicornisa.sms.SmsReceiver

com.nth.taxicornisa.sms.MmsReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.instacart.library.truetime.BootCompletedBroadcastReceiver

Services

com.nth.taxicornisa.services.SmsSendService

com.google.firebase.messaging.FirebaseMessagingService

com.ivona.tts.voicebeta.ron.rou.carmen

.IvonaVoice

Activities

.IvonaVoice

CheckVoiceInstalled

Permissions

Receivers

com.ivona.tts.voicelib.ActivityReceiver

com.ivona.tts.voicelib.ActivityReceiver

.UpdateReceiver

Services

com.ivona.tts

com.ivona.tts.WelcomeActivity

Activities

com.ivona.ttslib.DownloadVoiceData

com.ivona.ttslib.CheckVoiceData

com.ivona.ttslib.GetSampleText

.Ivona

com.ivona.tts.WelcomeActivity

.EngineSettings

com.ivona.ttslib.CustomSettings

Permissions

Receivers

com.ivona.ttslib.ActivityReceiver

com.ivona.ttslib.PackageMonitorReceiver

Services

com.ivona.ttslib.ics.IVONATextToSpeechService

Android Permissions

test.apk