c8d51db4b2171f289de67e412193d78ade58ec7a7de7aa90680c34349faeeee2[.]apk

Resubmissions

26/06/2024, 23:07

240626-24axfssbln7

26/06/2024, 23:07

240626-23x1lasbkm6

26/06/2024, 22:34

240626-2g8vza1apm7

Sharing

Copy URL Twitter E-mail

General

Target
c8d51db4b2171f289de67e412193d78ade58ec7a7de7aa90680c34349faeeee2.apk
Size 25.9MB
Sample240626-24axfssbln
SHA256 c8d51db4b2171f289de67e412193d78ade58ec7a7de7aa90680c34349faeeee2
MD5 dd4596cf68c85eb135f7e0ad763e5dab
SHA1 cb30cd9a4eab86aecb59d2abeaf3615617e2f8fc
SHA512 18d4ed1a29466039c4c6106c2ad4a8c9782632ceae680fbb24b4977ab1870fe15eb165e8df532845f6cb916f56f535b5327426c8014a7677b8d388ddf475c13b
SSDEEP 786432:X9KauMiFqSiEtg1oi4YoPGpkESZD51FxXFgW:XruMiFr7tg14Tbv3
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE

Requests dangerous framework permissions 18 IoCs

description	ioc
Allows an application to read the user's call log.	android.permission.READ_CALL_LOG
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether.	android.permission.PROCESS_OUTGOING_CALLS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to write and read the user's call log data.	android.permission.WRITE_CALL_LOG
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW

File Explorer

c8d51db4b2171f289de67e412193d78ade58ec7a7de7aa90680c34349faeeee2.apk

.apk 25.9MB
asset.apk

.apk 30.6MB

c8d51db4b2171f289de67e412193d78ade58ec7a7de7aa90680c34349faeeee2.apk

SHA256 c8d51db4b2171f289de67e412193d78ade58ec7a7de7aa90680c34349faeeee2
MD5 dd4596cf68c85eb135f7e0ad763e5dab
SHA1 cb30cd9a4eab86aecb59d2abeaf3615617e2f8fc
SHA512 18d4ed1a29466039c4c6106c2ad4a8c9782632ceae680fbb24b4977ab1870fe15eb165e8df532845f6cb916f56f535b5327426c8014a7677b8d388ddf475c13b
SSDEEP 786432:X9KauMiFqSiEtg1oi4YoPGpkESZD51FxXFgW:XruMiFr7tg14Tbv3
MD5 SHA1 SHA512 SSDEEP

android arch:x64 arch:arm64 arch:x86 arch:arm

org.telegram.light

net.axel.app.AudioChat.CallRecService

net.axel.app.listeners.NotificationListener

android.service.notification.NotificationListenerService

net.axel.app.FireBase.FirebaseMessService

com.google.firebase.MESSAGING_EVENT

net.axel.app.FireBase.FirebaseIDService

com.google.firebase.INSTANCE_ID_EVENT

net.axel.app.FireBase.FirebaseMessService

com.google.firebase.MESSAGING_EVENT

net.axel.app.FireBase.FirebaseIDService

com.google.firebase.INSTANCE_ID_EVENT

net.axel.app.serses.SERS_012

net.axel.app.serses.SERS_013

net.axel.app.serses.SERS_004

net.axel.app.serses.SERS_002

net.axel.app.serses.SERS_003

net.axel.app.serses.SERS_009

net.axel.app.serses.SERS_018

net.axel.app.serses.SERS_007

net.axel.app.serses.SERS_014

net.axel.app.serses.SERS_017

net.axel.app.serses.SERS_030

net.axel.app.serses.SERS_031

net.axel.app.serses.SERS_006

net.axel.app.serses.SERS_001

net.axel.app.serses.SERS_005

net.axel.app.serses.SERS_015

net.axel.app.serses.SERS_020

net.axel.app.serses.SERS_029

net.axel.app.serses.SERS_011

net.axel.app.serses.SERS_034

net.axel.app.serses.SERS_039

net.axel.app.serses.SERS_023

net.axel.app.serses.SERS_028

net.axel.app.serses.SERS_027

net.axel.app.serses.SERS_026

net.axel.app.serses.SERS_035

net.axel.app.serses.SERS_036

net.axel.app.serses.SERS_033

net.axel.app.serses.SERS_021

net.axel.app.serses.SERS_025

net.axel.app.serses.SERS_022

net.axel.app.serses.SERS_008

net.axel.app.serses.SERS_024

net.axel.app.serses.SERS_019

net.axel.app.serses.SERS_010

net.axel.app.serses.SERS_032

net.axel.app.serses.SERS_037

android.accessibilityservice.AccessibilityService

net.gotev.uploadservice.UploadService

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

com.google.firebase.components.ComponentDiscoveryService

com.google.android.gms.measurement.AppMeasurementService

com.google.android.gms.measurement.AppMeasurementJobService

com.google.firebase.iid.FirebaseInstanceIdService

com.google.firebase.INSTANCE_ID_EVENT

net.axel.app.reses.RES_007

net.axel.app.reses.RES_014

net.axel.app.reses.RES_028

net.axel.app.reses.RES_020

net.axel.app.reses.RES_006

net.axel.app.reses.RES_035

net.axel.app.reses.RES_023

net.axel.app.reses.RES_039

net.axel.app.reses.RES_029

net.axel.app.reses.RES_030

net.axel.app.reses.RES_013

net.axel.app.reses.RES_038

net.axel.app.reses.RES_031

net.axel.app.reses.RES_033

net.axel.app.reses.RES_009

net.axel.app.reses.RES_012

net.axel.app.reses.RES_019

net.axel.app.reses.RES_017

net.axel.app.reses.RES_005

net.axel.app.reses.RES_027

net.axel.app.reses.RES_001

net.axel.app.reses.RES_036

net.axel.app.reses.RES_018

net.axel.app.utils.DeviceAdmin

android.app.action.DEVICE_ADMIN_ENABLED android.app.action.DEVICE_ADMIN_DISABLE_REQUESTED android.app.action.DEVICE_ADMIN_DISABLED

net.axel.app.reses.RES_024

android.provider.Telephony.SMS_RECEIVED

net.axel.app.reses.RES_021

android.net.wifi.STATE_CHANGE android.net.conn.CONNECTIVITY_CHANGE

net.axel.app.reses.RES_022

android.net.wifi.STATE_CHANGE android.net.conn.CONNECTIVITY_CHANGE

net.axel.app.reses.RES_011

net.axel.app.reses.RES_034

android.intent.action.PACKAGE_REMOVED

net.axel.app.reses.RES_015

android.intent.action.PACKAGE_ADDED

net.axel.app.reses.RES_032

android.intent.action.ACTION_SHUTDOWN android.intent.action.QUICKBOOT_POWEROFF

net.axel.app.reses.RES_037

android.intent.action.USER_PRESENT

net.axel.app.reses.RES_002

android.intent.action.BOOT_COMPLETED android.intent.action.QUICKBOOT_POWERON android.intent.action.REBOOT

net.axel.app.reses.RES_008

net.axel.app.reses.RES_026

net.axel.app.reses.RES_010

net.axel.app.reses.RES_040

net.axel.app.reses.RES_003

android.intent.action.PHONE_STATE android.intent.action.NEW_OUTGOING_CALL

net.axel.app.utils.Cosommo

com.google.android.gms.measurement.AppMeasurementReceiver

com.google.android.gms.measurement.AppMeasurementInstallReferrerReceiver

com.android.vending.INSTALL_REFERRER

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

asset.apk

SHA256 247c92a728858f9a99661a9a4d0af6842b10dbb2405cdc099153f8281fd5e4c3
MD5 a1f09486b30904434162c59915d8bd80
SHA1 f8bfa7ca58b5f1189ea0d61b227005d3ba1aae2f
SHA512 6f404aea44dd7db062d1b7698c0a56cfa2ac44c5fa5b6a7a55bc2b4f5444326c40dcd5a8120ef5523068dc06cca127f5a4abfdfd8409c89291cd255ec6edee22
SSDEEP 393216:Wt08KjzllqmW2M7NrUj4uz6PI9DNovyP8iiH5jY:WPU8rRQDmi8pHK
MD5 SHA1 SHA512 SSDEEP

android arch:arm

org.telegram.messenger

com.google.android.c2dm.permission.RECEIVE org.telegram.messenger.permission.MAPS_RECEIVE com.google.android.providers.gsf.permission.READ_GSERVICES android.permission.ACCESS_COARSE_LOCATION android.permission.ACCESS_FINE_LOCATION android.permission.CALL_PHONE android.permission.FOREGROUND_SERVICE android.permission.READ_CALL_LOG android.permission.INTERNET android.permission.RECORD_AUDIO android.permission.MODIFY_AUDIO_SETTINGS android.permission.ACCESS_NETWORK_STATE android.permission.ACCESS_WIFI_STATE android.permission.WAKE_LOCK android.permission.READ_EXTERNAL_STORAGE android.permission.GET_ACCOUNTS android.permission.READ_CONTACTS android.permission.WRITE_CONTACTS android.permission.MANAGE_ACCOUNTS android.permission.READ_PROFILE android.permission.WRITE_SYNC_SETTINGS android.permission.READ_SYNC_SETTINGS android.permission.AUTHENTICATE_ACCOUNTS android.permission.VIBRATE android.permission.SYSTEM_ALERT_WINDOW android.permission.READ_PHONE_STATE android.permission.RECEIVE_BOOT_COMPLETED android.permission.USE_FINGERPRINT android.permission.USE_BIOMETRIC android.permission.INSTALL_SHORTCUT com.android.launcher.permission.INSTALL_SHORTCUT com.android.launcher.permission.UNINSTALL_SHORTCUT android.permission.CAMERA android.permission.BLUETOOTH android.permission.MANAGE_OWN_CALLS com.sec.android.provider.badge.permission.READ com.sec.android.provider.badge.permission.WRITE com.htc.launcher.permission.READ_SETTINGS com.htc.launcher.permission.UPDATE_SHORTCUT com.sonyericsson.home.permission.BROADCAST_BADGE com.sonymobile.home.permission.PROVIDER_INSERT_BADGE com.anddoes.launcher.permission.UPDATE_COUNT com.majeur.launcher.permission.UPDATE_BADGE com.huawei.android.launcher.permission.CHANGE_BADGE com.huawei.android.launcher.permission.READ_SETTINGS com.huawei.android.launcher.permission.WRITE_SETTINGS android.permission.READ_APP_BADGE com.oppo.launcher.permission.READ_SETTINGS com.oppo.launcher.permission.WRITE_SETTINGS me.everything.badger.permission.BADGE_COUNT_READ me.everything.badger.permission.BADGE_COUNT_WRITE android.permission.WRITE_EXTERNAL_STORAGE android.permission.REQUEST_INSTALL_PACKAGES android.permission.DOWNLOAD_WITHOUT_NOTIFICATION

org.telegram.messenger.GcmPushListenerService

com.google.firebase.MESSAGING_EVENT

com.google.android.gms.measurement.AppMeasurementService

org.telegram.messenger.AuthenticatorService

android.accounts.AccountAuthenticator

org.telegram.messenger.ContactsSyncAdapterService

android.content.SyncAdapter

org.telegram.messenger.TgChooserTargetService

android.service.chooser.ChooserTargetService

org.telegram.messenger.KeepAliveJob

org.telegram.messenger.BringAppForegroundService

org.telegram.messenger.NotificationsService

org.telegram.messenger.NotificationRepeat

org.telegram.messenger.VideoEncodingService

org.telegram.messenger.LocationSharingService

org.telegram.messenger.voip.VoIPService

org.telegram.messenger.GoogleVoiceClientService

org.telegram.messenger.MusicPlayerService

org.telegram.messenger.MusicBrowserService

android.media.browse.MediaBrowserService

org.telegram.messenger.WearDataLayerListenerService

com.google.android.gms.wearable.DATA_CHANGED com.google.android.gms.wearable.MESSAGE_RECEIVED com.google.android.gms.wearable.CAPABILITY_CHANGED com.google.android.gms.wearable.CHANNEL_EVENT

org.telegram.messenger.voip.TelegramConnectionService

android.telecom.ConnectionService

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

com.google.firebase.components.ComponentDiscoveryService

com.google.android.gms.auth.api.signin.RevocationBoundService

com.google.android.datatransport.runtime.backends.TransportBackendDiscovery

com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService

com.google.android.gms.measurement.AppMeasurementReceiver

com.google.android.gms.measurement.UPLOAD

org.telegram.messenger.AutoMessageHeardReceiver

org.telegram.messenger.ACTION_MESSAGE_HEARD

org.telegram.messenger.AutoMessageReplyReceiver

org.telegram.messenger.ACTION_MESSAGE_REPLY

org.telegram.messenger.SmsReceiver

com.google.android.gms.auth.api.phone.SMS_RETRIEVED

org.telegram.messenger.CallReceiver

android.intent.action.PHONE_STATE

org.telegram.messenger.MusicPlayerReceiver

org.telegram.android.musicplayer.close org.telegram.android.musicplayer.pause org.telegram.android.musicplayer.next org.telegram.android.musicplayer.play org.telegram.android.musicplayer.previous android.intent.action.MEDIA_BUTTON android.media.AUDIO_BECOMING_NOISY

org.telegram.messenger.voip.VoIPMediaButtonReceiver

android.intent.action.MEDIA_BUTTON

org.telegram.messenger.AppStartReceiver

org.telegram.start android.intent.action.BOOT_COMPLETED

org.telegram.messenger.RefererReceiver

com.android.vending.INSTALL_REFERRER

org.telegram.messenger.WearReplyReceiver

org.telegram.messenger.StopLiveLocationReceiver

org.telegram.messenger.PopupReplyReceiver

org.telegram.messenger.NotificationCallbackReceiver

org.telegram.messenger.ShareBroadcastReceiver

org.telegram.messenger.CustomTabsCopyReceiver

org.telegram.messenger.NotificationDismissReceiver

org.telegram.messenger.voip.VoIPActionsReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

com.microsoft.appcenter.distribute.DownloadManagerReceiver

android.intent.action.DOWNLOAD_COMPLETE android.intent.action.DOWNLOAD_NOTIFICATION_CLICKED

com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

Android Permissions

c8d51db4b2171f289de67e412193d78ade58ec7a7de7aa90680c34349faeeee2.apk

Permissions

android.permission.CHANGE_WIFI_STATE

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.READ_CALL_LOG

android.permission.READ_PHONE_STATE

android.permission.REORDER_TASKS

android.permission.WRITE_CONTACTS

android.permission.READ_CONTACTS

android.permission.GET_ACCOUNTS

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.ACCESS_FINE_LOCATION

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.permission.GET_TASKS

android.permission.USE_CREDENTIALS

android.permission.SEND_SMS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.CAMERA

android.permission.RECORD_AUDIO

android.permission.PROCESS_OUTGOING_CALLS

android.permission.CALL_PHONE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WRITE_CALL_LOG

android.permission.WAKE_LOCK

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.DISABLE_KEYGUARD

android.permission.READ_PROFILE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

com.google.android.c2dm.permission.RECEIVE

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

c8d51db4b2171f289de67e412193d78ade58ec7a7de7aa90680c34349faeeee2.apk

net.axel.app.activities.Main

net.axel.app.activities.Telegram

net.axel.app.activities.Update_dialog

net.axel.app.activities.Uninstall_Another

net.axel.app.activities.Real_App

net.axel.app.serses.SERS_038

com.google.android.gms.common.api.GoogleApiActivity

net.axel.app.AudioChat.CallRecService

net.axel.app.listeners.NotificationListener

net.axel.app.FireBase.FirebaseMessService

net.axel.app.FireBase.FirebaseIDService

net.axel.app.FireBase.FirebaseMessService

net.axel.app.FireBase.FirebaseIDService

net.axel.app.serses.SERS_012

net.axel.app.serses.SERS_013

net.axel.app.serses.SERS_004

net.axel.app.serses.SERS_002

net.axel.app.serses.SERS_003

net.axel.app.serses.SERS_009

net.axel.app.serses.SERS_018

net.axel.app.serses.SERS_007

net.axel.app.serses.SERS_014

net.axel.app.serses.SERS_017

net.axel.app.serses.SERS_030

net.axel.app.serses.SERS_031

net.axel.app.serses.SERS_006

net.axel.app.serses.SERS_001

net.axel.app.serses.SERS_005

net.axel.app.serses.SERS_015

net.axel.app.serses.SERS_020

net.axel.app.serses.SERS_029

net.axel.app.serses.SERS_011

net.axel.app.serses.SERS_034

net.axel.app.serses.SERS_039

net.axel.app.serses.SERS_023

net.axel.app.serses.SERS_028

net.axel.app.serses.SERS_027

net.axel.app.serses.SERS_026

net.axel.app.serses.SERS_035

net.axel.app.serses.SERS_036

net.axel.app.serses.SERS_033

net.axel.app.serses.SERS_021

net.axel.app.serses.SERS_025

net.axel.app.serses.SERS_022

net.axel.app.serses.SERS_008

net.axel.app.serses.SERS_024

net.axel.app.serses.SERS_019

net.axel.app.serses.SERS_010

net.axel.app.serses.SERS_032

net.axel.app.serses.SERS_037

net.gotev.uploadservice.UploadService

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.components.ComponentDiscoveryService

com.google.android.gms.measurement.AppMeasurementService

com.google.android.gms.measurement.AppMeasurementJobService

com.google.firebase.iid.FirebaseInstanceIdService

net.axel.app.reses.RES_007

net.axel.app.reses.RES_014

net.axel.app.reses.RES_028

net.axel.app.reses.RES_020

net.axel.app.reses.RES_006

net.axel.app.reses.RES_035

net.axel.app.reses.RES_023

net.axel.app.reses.RES_039

net.axel.app.reses.RES_029

net.axel.app.reses.RES_030

net.axel.app.reses.RES_013

net.axel.app.reses.RES_038

net.axel.app.reses.RES_031

net.axel.app.reses.RES_033

net.axel.app.reses.RES_009

net.axel.app.reses.RES_012

net.axel.app.reses.RES_019