General

  • Target

    system-dwnld_127.0.620_2451c.apk

  • Size

    76.6MB

  • MD5

    af239a04811b534f95af86f4ccdf3aa2

  • SHA1

    3003941cae26b1b30c9adcb73ab60dac7315dbbb

  • SHA256

    fbacbfdb70f228cca3e6c20fd0912382b8f8e4da2fc39ba7de759e88cd00649b

  • SHA512

    5e07f434726beba8652aac35d06c2c586c0c1bb16877d6cd7085b0afedc0e8416a3e0409ab4513076cf59baaddc4defd467a7c53b086510d97674fced459dd98

  • SSDEEP

    1572864:5IH25mXlhNmuKsigh1OqwU7G8f+syOPlO8JCIK3:5FCvwuKsiUQqLVf+sFdxM3

Score
10/10

Malware Config

Signatures

  • Android Triada payload 1 IoCs
  • Triada family
  • Declares services with permission to bind to the system 3 IoCs
  • Requests dangerous framework permissions 23 IoCs

Files

  • system-dwnld_127.0.620_2451c.apk
    .apk android arch:arm64 arch:arm

    com.yowhats.software

    com.yowhats.software.Main


Android Permissions

system-dwnld_127.0.620_2451c.apk

Permissions

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_MEDIA_LOCATION

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.BLUETOOTH

android.permission.BROADCAST_STICKY

android.permission.CAMERA

android.permission.CHANGE_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.FOREGROUND_SERVICE_DATA_SYNC

android.permission.FOREGROUND_SERVICE_LOCATION

android.permission.GET_TASKS

android.permission.INSTALL_SHORTCUT

android.permission.INTERNET

android.permission.MANAGE_ACCOUNTS

android.permission.MANAGE_OWN_CALLS

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.NFC

android.permission.READ_CONTACTS

android.permission.READ_PHONE_NUMBERS

android.permission.READ_PHONE_STATE

android.permission.READ_PROFILE

android.permission.READ_SYNC_SETTINGS

android.permission.READ_SYNC_STATS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.RECORD_AUDIO

android.permission.SCHEDULE_EXACT_ALARM

android.permission.USE_CREDENTIALS

android.permission.USE_FINGERPRINT

android.permission.USE_BIOMETRIC

android.permission.VIBRATE

android.permission.WAKE_LOCK

android.permission.WRITE_CONTACTS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.READ_MEDIA_AUDIO

android.permission.READ_MEDIA_IMAGES

android.permission.READ_MEDIA_VIDEO

android.permission.READ_MEDIA_VISUAL_USER_SELECTED

android.permission.POST_NOTIFICATIONS

android.permission.WRITE_SYNC_SETTINGS

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.FOREGROUND_SERVICE

android.permission.USE_FULL_SCREEN_INTENT

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.UNINSTALL_SHORTCUT

com.google.android.c2dm.permission.RECEIVE

com.google.android.providers.gsf.permission.READ_GSERVICES

com.sec.android.provider.badge.permission.READ