General

  • Target

    base.apk

  • Size

    20.2MB

  • MD5

    89df667765e055de3b4a1f8e93581503

  • SHA1

    af5c94d9bb570ba712d96abc69f9ea9c605bebbb

  • SHA256

    ba107afd85901aff3fc9d01c50f9380ad420a308acb2de7124f3cd6450f72011

  • SHA512

    0c05f0a168d763a9cdabd485d6b3d0fa7f7b1c6498a0d681295953b760a94f60740e871b4f7d348c3bec20edcb89a12e3d271058ee1d1b6a78e62b6677a44352

  • SSDEEP

    393216:r/bL9hIjAadyk0nayhve9O/GJ9fFnAP9pjjTGc5pyL:r/vzI8adnOeo/05AP9FjTGc5pyL

Score
6/10

Malware Config

Signatures

  • Requests dangerous framework permissions 3 IoCs

Files

  • base.apk
    .apk android arch:arm64 arch:arm

    Password: Nooo

    photoeditor.photoretouch.removeobjects.retouch

    retouch.photoeditor.remove.activity.DummyActivity


Android Permissions

base.apk

Permissions

android.permission.READ_MEDIA_IMAGES

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

com.android.vending.BILLING

android.permission.WAKE_LOCK

com.google.android.gms.permission.AD_ID

android.permission.ACCESS_WIFI_STATE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.VIBRATE

android.permission.FOREGROUND_SERVICE

photoeditor.photoretouch.removeobjects.retouch.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION