General

  • Target

    a4020417ccaadf52fff38bfd57ff518995d43776b7ca04c85fbbbefac54439f1.bin

  • Size

    5.0MB

  • MD5

    a8d0b9569ca5868cdc517c094389a7c4

  • SHA1

    83affae29e5c912737395d34a511654d0ee3b4ea

  • SHA256

    a4020417ccaadf52fff38bfd57ff518995d43776b7ca04c85fbbbefac54439f1

  • SHA512

    a296385d5da8ba7abd3295c9f96387fc50568f7151d152e559083a31232455e87d0a5923d01fc4957a0ad7c137996348ad8ce3269762c61488af330ea1edd4c0

  • SSDEEP

    98304:QSFUt6GpvAztEeEZNCjBMM40tyLZWk1kV4hQWr+KQujvowcS9szZDzSXZx6FoZ51:Q3t6+vAzSeN40tyLZbN3Qw2KhpV5

Score
6/10

Malware Config

Signatures

  • Attempts to obfuscate APK file format

    Applies obfuscation techniques to the APK format in order to hinder analysis

  • Declares broadcast receivers with permission to handle system events 1 IoCs
  • Declares services with permission to bind to the system 2 IoCs
  • Requests dangerous framework permissions 27 IoCs

Files

  • a4020417ccaadf52fff38bfd57ff518995d43776b7ca04c85fbbbefac54439f1.bin
    .apk android

    com.stub

    com.stub.webview.MainActivity


  • yxvcklwiwg.apk
    .apk android

    com.tortoise.relief

    AHxcd55273bf4538518b02.AHx1e1e2ec80e0c02633dc.AHx2d3704788409dbfdfe8.AHxfb42081b0110a11b5e3


Android Permissions

a4020417ccaadf52fff38bfd57ff518995d43776b7ca04c85fbbbefac54439f1.bin

Permissions

com.oplus.thirdkit.permission.SECURITY

android.permission.ACCESS_NETWORK_STATE

android.permission.FOREGROUND_SERVICE_REMOTE_MESSAGING

android.permission.ACCESS_COARSE_LOCATION

android.permission.MANAGE_USB

android.permission.DELETE_PACKAGES

com.coloros.operationManual.permission.tipsprovider

android.permission.OVERRIDE_WIFI_CONFIG

android.permission.UPDATE_APP_OPS_STATS

android.permission.INTERACT_ACROSS_USERS_FULL

android.permission.ACCESS_MEDIA_LOCATION

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_MTP

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.ACCESS_BACKGROUND_LOCATION

com.oplus.permission.safe.SECURITY

android.permission.VIBRATE

com.oppo.permission.RUTILCMD

android.permission.POST_NOTIFICATIONS

android.permission.MODIFY_PHONE_STATE

com.oplus.permission.safe.PRIVATE

com.oplus.permission.safe.BACKUP

android.permission.MANAGE_EXTERNAL_STORAGE

android.permission.READ_MEDIA_VIDEO

android.permission.CHANGE_COMPONENT_ENABLED_STATE

android.permission.INTERNET

com.oppo.launcher.permission.READ_SETTINGS

android.permission.WAKE_LOCK

com.oplus.permission.safe.POWER

android.permission.FOREGROUND_SERVICE

android.permission.INSTALL_PACKAGES

android.permission.WRITE_SETTINGS

android.permission.NEARBY_WIFI_DEVICES

com.coloros.backuprestore.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

com.oplus.bootreg.permission.OPLUS_BOOTREG_COMPLETED

com.oplus.permission.safe.PASSWORD

android.permission.MANAGE_APP_OPS_MODES

com.oplus.metis.factdata.permission.DATABASE

android.permission.POST_NOTIFICATIONS

android.permission.ACCESS_FINE_LOCATION

com.oplus.permission.safe.CONNECTIVITY

com.oplus.codebook.permission.BACKUP_AND_RESTORE

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

oplus.permission.PHONE_CLONE_DATA_MIGRATION

com.coloros.bootreg.permission.OPPO_BOOTREG_COMPLETED

android.permission.BLUETOOTH_ADVERTISE

com.oplus.permission.safe.PROTECT

android.permission.WRITE_MEDIA_STORAGE

android.permission.WAKE_LOCK