General

  • Target

    Zlx_v1_private_v1.4.21.apk

  • Size

    12.5MB

  • MD5

    d3cfb1560f7c3d065d7bf50ed837e87c

  • SHA1

    53a5f3553b965049472259830e8d9fff458555e8

  • SHA256

    5c2e6c489c57f67559f2c9eaba7be37285c5ce682d475712666d9a6a4e7b0365

  • SHA512

    b6e961be6d5550885a2a92c2803e3ea49a517a28d8bbf5efa392ef877e7530802189b12aeb8ce3cd16ea5bb367c7a7d0e39b47bec863f3c9213f3e8f46174d9b

  • SSDEEP

    196608:wsYXTNxFGkoyf64xEiwwfkAixlK95lwHlPClEE50Qfm3q7VakSBixVSxLC:5YXTNnGkH8ixDiU3wH4EWVfm67ie0RC

Score
6/10

Malware Config

Signatures

  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 2 IoCs

Files

  • Zlx_v1_private_v1.4.21.apk
    .apk android arch:arm64 arch:arm arch:x64

    dev.zlxv1

    dev.sora.protohax.ui.activities.MainActivity


Android Permissions

Zlx_v1_private_v1.4.21.apk

Permissions

android.permission.INTERNET

android.permission.FOREGROUND_SERVICE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.QUERY_ALL_PACKAGES

android.permission.FOREGROUND_SERVICE_SPECIAL_USE

android.permission.POST_NOTIFICATIONS

android.permission.ACCESS_NETWORK_STATE

android.permission.WAKE_LOCK

dev.zlxv1_com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

dev.zlxv1_com.google.android.gms.permission.AD_ID

dev.zlxv1.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION