General

  • Target

    ioboti.apk

  • Size

    784KB

  • MD5

    776e2e37bff43c52c4afbe296be6e9b8

  • SHA1

    3d97124f5258b6cd708922dfb0ffb471c288c680

  • SHA256

    094d9d8200af167e65c1270bb9ef081b3de3c4b33bf830f64f6bbacbcd134f13

  • SHA512

    6001f4ffcb7b1bbf778603490ed24e13da52c2ce2dce1f6052132293d55c80d2b1f5862059bf6a434d03e02592999badc28d1af9916efdf2985c423d9c050b35

  • SSDEEP

    24576:X7isHIz5v7bQ3bxx8pEVG/jEjmENyf8srz:Esbxx8pEkbEjmI0

Score
6/10

Malware Config

Signatures

  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 4 IoCs

Files

  • ioboti.apk
    .apk android

    com.kt.falcon

    com.kt.falcon.MainActivity


Android Permissions

ioboti.apk

Permissions

android.permission.INTERNET

android.permission.ACCESS_WIFI_STATE

android.permission.POST_NOTIFICATIONS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.SYSTEM_ALERT_WINDOW

android.permission.RECEIVE_LAUNCH_BROADCASTS

android.permission.QUICKBOOT_POWERON

android.permission.ACTION_MANAGE_OVERLAY_PERMISSION

android.permission.READ_PHONE_STATE

android.permission.READ_PHONE_NUMBERS

android.permission.FOREGROUND_SERVICE

android.permission.WAKE_LOCK

android.permission.FOREGROUND_SERVICE_MEDIA_PROJECTION

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

com.kt.falcon.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION