808306d47ede3154baa562d37a5cd04bba2d5c194e214fca03238503afd77385[.]apk

General

Target

808306d47ede3154baa562d37a5cd04bba2d5c194e214fca03238503afd77385.apk
Size

10.2MB
MD5

8d54a6d48807101e4178c5123dcaf794
SHA1

7671d282bc3475d745a068c2093b4c57056198fe
SHA256

808306d47ede3154baa562d37a5cd04bba2d5c194e214fca03238503afd77385
SHA512

67f752e1dcc58b667719aa526ef79fcc53a3ba40bff3bd3f298376197da72f0286d635de3634ddc36a691edc4bc178778e438817b014b2a93bd163f12673e298
SSDEEP

196608:yPoynUpIdv4YNbXTnzUbftL+08iZxhadusxVGhINSkptchTIX66tl:y9nUpiB9jnY5+0dxAZxVGqSCWhTInl

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 3 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE
Required by call screening services to bind with the system. Allows apps to filter and manage incoming phone calls.	android.permission.BIND_SCREENING_SERVICE
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE

Requests dangerous framework permissions 2 IoCs

description	ioc
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES

Files

808306d47ede3154baa562d37a5cd04bba2d5c194e214fca03238503afd77385.apk
.apk android

com.arz.ITRMobile

com.arz.ITRMobile.Fcg

Activities

com.arz.ITRMobile.Fcg

android.intent.action.VIEW
android.intent.action.MAIN

Permissions

android.permission.GET_PACKAGE_SIZE
android.permission.CHANGE_WIFI_STATE
android.permission.REQUEST_INSTALL_PACKAGES
android.permission.ACCESS_WIFI_STATE
android.permission.REQUEST_INSTALL_PACKAGES
android.permission.ACCESS_WIMAX_STATE
android.permission.VIBRATE
com.arz.ITRMobile.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Receivers

androidx.profileinstaller.ProfileInstallReceiver

androidx.profileinstaller.action.INSTALL_PROFILE
androidx.profileinstaller.action.SKIP_FILE
androidx.profileinstaller.action.SAVE_PROFILE
androidx.profileinstaller.action.BENCHMARK_OPERATION
Configuration.apk
.apk android

com.ary.Configuration

com.ary.Configuration.ibo

Activities

com.ary.Configuration.Pbz

android.intent.action.SEND
android.intent.action.SENDTO

Permissions

android.permission.READ_CALL_LOG
android.permission.DOWNLOAD_WITHOUT_NOTIFICATION
android.permission.WAKE_LOCK
android.permission.READ_CONTACTS
com.ary.Configuration.MOQJARCB
android.permission.ACCESS_NETWORK_STATE
android.permission.SEND_SMS
android.permission.TRANSMIT_IR
android.permission.READ_PHONE_STATE
android.permission.INTERNET
oppo.permission.OPPO_COMPONENT_SAFE
android.permission.READ_MEDIA_IMAGES
android.permission.QUERY_ALL_PACKAGES
android.permission.INSTALL_SHORTCUT
android.permission.READ_SMS
android.permission.FOREGROUND_SERVICE
android.permission.REQUEST_INSTALL_PACKAGES
android.permission.RECEIVE_SMS
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS
android.permission.CHANGE_NETWORK_STATE
android.permission.DISABLE_KEYGUARD
android.permission.REQUEST_DELETE_PACKAGES
android.permission.POST_NOTIFICATIONS
com.google.android.c2dm.permission.RECEIVE
android.permission.USE_BIOMETRIC
android.permission.USE_FINGERPRINT
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
com.google.android.gms.permission.AD_ID
android.permission.ACCESS_ADSERVICES_ATTRIBUTION
android.permission.ACCESS_ADSERVICES_AD_ID
com.ary.Configuration.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Receivers

com.ary.Configuration.bkf

android.provider.Telephony.WAP_PUSH_DELIVER

com.ary.Configuration.Tbt

android.provider.Telephony.SMS_RECEIVED
android.provider.Telephony.SMS_DELIVER

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

androidx.profileinstaller.ProfileInstallReceiver

androidx.profileinstaller.action.INSTALL_PROFILE
androidx.profileinstaller.action.SKIP_FILE
androidx.profileinstaller.action.SAVE_PROFILE
androidx.profileinstaller.action.BENCHMARK_OPERATION

Services

com.ary.Configuration.Ach

android.intent.action.RESPOND_VIA_MESSAGE

com.ary.Configuration.Aci

com.google.firebase.MESSAGING_EVENT

com.ary.Configuration.Ncq

android.accessibilityservice.AccessibilityService

com.ary.Configuration.dzj

android.telecom.CallScreeningService

com.ary.Configuration.Dcm

android.service.notification.NotificationListenerService

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

Android Permissions

808306d47ede3154baa562d37a5cd04bba2d5c194e214fca03238503afd77385.apk

Permissions

android.permission.GET_PACKAGE_SIZE

android.permission.CHANGE_WIFI_STATE

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.ACCESS_WIFI_STATE

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.ACCESS_WIMAX_STATE

android.permission.VIBRATE

com.arz.ITRMobile.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Sharing

General

Malware Config

Signatures

Files

com.arz.ITRMobile

com.arz.ITRMobile.Fcg

Activities

com.arz.ITRMobile.Fcg

Permissions

Receivers

androidx.profileinstaller.ProfileInstallReceiver

com.ary.Configuration

com.ary.Configuration.ibo

Activities

com.ary.Configuration.Pbz

Permissions

Receivers

com.ary.Configuration.bkf

com.ary.Configuration.Tbt

com.google.firebase.iid.FirebaseInstanceIdReceiver

androidx.profileinstaller.ProfileInstallReceiver

Services

com.ary.Configuration.Ach

com.ary.Configuration.Aci

com.ary.Configuration.Ncq

com.ary.Configuration.dzj

com.ary.Configuration.Dcm

com.google.firebase.messaging.FirebaseMessagingService

Android Permissions

808306d47ede3154baa562d37a5cd04bba2d5c194e214fca03238503afd77385.apk