SecAddon[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SecAddon.zip
Size

2.0MB
MD5

f74e9deec543ec96678f3fd9d90f0eb6
SHA1

451ba6b1ac5c6bbabaeca744ad16664a4e8728bc
SHA256

7d4115f1486c89cfa88278fe8a83c901ebd754abd85cdf7b402e873ee87224a6
SHA512

ef3e17b795b4354ba36b93197836216a95ea2d2a4fbd7728b9c9d67fe701b60e23f79692f1f25c9da0b8550d9cb1b28ecb73f4c783d967a207857a38d86d1559
SSDEEP

49152:DsXzMpKxXb3n7MuUhC74NvSNwc4v/cqCIQR+p7/T0kPHtn:IjMp8XbLXz4hSNwaRy/QeJ

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE

Requests dangerous framework permissions 11 IoCs

description	ioc
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access location in the background.	android.permission.ACCESS_BACKGROUND_LOCATION
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application a broad access to external storage in scoped storage.	android.permission.MANAGE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to read SMS messages.	android.permission.READ_SMS
Required to be able to access the camera device.	android.permission.CAMERA

Files

SecAddon.zip
.zip

Password: @onionsoft
SecAddon+7+BETA (1).apk
.apk android

Password: @onionsoft

com.huntmix.secbutton

com.huntmix.secbutton.MainActivity

Activities

com.huntmix.secbutton.MainActivity

android.intent.action.MAIN

com.huntmix.secbutton.Cryptonic

android.intent.action.MAIN

Permissions

android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_BACKGROUND_LOCATION
android.permission.REQUEST_DELETE_PACKAGES
com.android.launcher.permission.INSTALL_SHORTCUT
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.MANAGE_EXTERNAL_STORAGE
android.permission.FOREGROUND_SERVICE
android.permission.READ_EXTERNAL_STORAGE
android.permission.RECEIVE_SMS
android.permission.SEND_SMS
android.permission.READ_CONTACTS
android.permission.BROADCAST_SMS
android.permission.READ_SMS
android.permission.QUERY_ALL_PACKAGES
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.CAMERA
android.permission.INTERNET

Receivers

com.huntmix.secbutton.SmsActions

android.provider.Telephony.SMS_RECEIVED

com.huntmix.secbutton.ScreenListener

android.intent.action.SCREEN_ON

com.huntmix.secbutton.DeviceAdmin

android.app.action.DEVICE_ADMIN_ENABLED

com.huntmix.secbutton.Autostart

android.intent.action.BOOT_COMPLETED

Services

com.huntmix.secbutton.NotificationService

android.service.notification.NotificationListenerService