General

  • Target

    Delta_-_Android.apk

  • Size

    17.4MB

  • MD5

    fa2a085d9e06e05d9b0209f273d3f2aa

  • SHA1

    0609850d15bc4da56f0ef5a2d2c9b9254a4d48a6

  • SHA256

    28967e84be5d5e59c1223c686c548a04aeec626ee7c1aec32bdb890d4af3a87f

  • SHA512

    c0ae0fab22447caedb8685873ba1833aeeefa36cb49104a3c85029d78c1ca2f2411df3483ff569fa0fb61bbf6c2d3235775ef850f25041a86c50a2dc028bbe06

  • SSDEEP

    393216:pA6FFunOj7fvQzhXuzLEGzmLqmkEARo6r9Ir9E51jcVzthan5mQIT:pKnK7goLz5r29ELjmzDq5mQIT

Score
6/10

Malware Config

Signatures

  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 4 IoCs

Files

  • Delta_-_Android.apk
    .apk android arch:arm arch:arm64

    com.tgto.lzsk.gml

    com.sk.disawarresult.PermissionActivity


Android Permissions

Delta_-_Android.apk

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.POST_NOTIFICATIONS

com.google.android.gms.permission.AD_ID

android.permission.ACCESS_ADSERVICES_AD_ID

android.permission.ACCESS_ADSERVICES_ATTRIBUTION

android.permission.ACCESS_ADSERVICES_TOPICS

android.permission.WAKE_LOCK

com.google.android.c2dm.permission.RECEIVE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.FOREGROUND_SERVICE

com.tgto.lzsk.gml.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_BASIC_PHONE_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.ACCESS_WIFI_STATE

android.permission.MANAGE_OWN_CALLS

android.permission.USE_FULL_SCREEN_INTENT

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.QUERY_ALL_PACKAGES

android.permission.SCHEDULE_EXACT_ALARM