E-IFADE[.]apk | Triage™

General

Target
E-IFADE.apk
Size 1.5MB
Sample240813-kqs3fatgqa
SHA256 e2f2b603ba9dddb03a4fe69959b48887892067da0fe6ece93101df0f372c31e0
MD5 ecfefd2b55d14ae615e0b7b07707f561
SHA1 790699512bc9b002cf73eaf7236e3087dc6ec902
SHA512 a06b92e256d2ce7987b5d0439362e8e10ffaf344dda3b69ae9f382bec6694d4ce6caee2c156de0c01a469373f50bdb2c5b3e36136a993bb4fd2be1f5626857ad
SSDEEP 24576:caIWzeNZHhO6G24+fZfjQrw5aBY6INRYxvtbZbLb161kf4gTj9Y0BB6bH1jRHdMJ:caIW6lO6G24+fZLnsBYtNRyvttQ6fnf9
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Attempts to obfuscate APK file format
Applies obfuscation techniques to the APK format in order to hinder analysis

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE

Requests dangerous framework permissions 7 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS

File Explorer

E-IFADE.apk

.apk 1.5MB

E-IFADE.apk

SHA256 e2f2b603ba9dddb03a4fe69959b48887892067da0fe6ece93101df0f372c31e0
MD5 ecfefd2b55d14ae615e0b7b07707f561
SHA1 790699512bc9b002cf73eaf7236e3087dc6ec902
SHA512 a06b92e256d2ce7987b5d0439362e8e10ffaf344dda3b69ae9f382bec6694d4ce6caee2c156de0c01a469373f50bdb2c5b3e36136a993bb4fd2be1f5626857ad
SSDEEP 24576:caIWzeNZHhO6G24+fZfjQrw5aBY6INRYxvtbZbLb161kf4gTj9Y0BB6bH1jRHdMJ:caIW6lO6G24+fZLnsBYtNRyvttQ6fnf9
MD5 SHA1 SHA512 SSDEEP

android arch:arm64 arch:arm arch:x86

com.beginhigh19

Android Permissions

E-IFADE.apk

Permissions

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ADD_VOICEMAIL

android.permission.GET_PACKAGE_SIZE

android.permission.CLEAR_APP_CACHE

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.INTERNET

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.Manifest.permission.READ_PHONE_STATE

android.permission.SEND_SMS

android.permission.WAKE_LOCK

android.permission.READ_PHONE_STATE

android.permission.CALL_PHONE

android.permission.USES_POLICY_FORCE_LOCK

android.permission.VIBRATE

android.permission.REQUEST_COMPANION_RUN_IN_BACKGROUND

android.permission.REQUEST_COMPANION_USE_DATA_IN_BACKGROUND

android.permission.REQUEST_DELETE_PACKAGES

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_SETTINGS

android.permission.REORDER_TASKS

E-IFADE.apk

com.beginhigh19.p079j

com.beginhigh19.p025i

com.beginhigh19.p059u

com.beginhigh19.p085x

com.beginhigh19.p036o

com.beginhigh19.p036n

com.beginhigh19.p016j

com.beginhigh19.p049p

com.beginhigh19.p025p

com.beginhigh19.p057t

com.beginhigh19.p059j

com.beginhigh19.p075b

com.beginhigh19.p027d

com.beginhigh19.p041i

com.beginhigh19.p054v

com.beginhigh19.p071p

com.beginhigh19.p067x

com.beginhigh19.p044i

com.beginhigh19.p023w

com.beginhigh19.p025n

com.beginhigh19.p073f

com.beginhigh19.p042w

com.beginhigh19.p095e

com.beginhigh19.p053u

com.beginhigh19.p050i

com.beginhigh19.p077o

com.beginhigh19.p043q

com.beginhigh19.p032o

com.beginhigh19.p086c

com.beginhigh19.p088s

com.beginhigh19.p047t

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

E-IFADE.apk

com.beginhigh19.p079j

com.beginhigh19.p025i

com.beginhigh19.p059u

com.beginhigh19.p085x

com.beginhigh19.p036o

com.beginhigh19.p036n

com.beginhigh19.p016j

com.beginhigh19.p049p

com.beginhigh19.p025p

com.beginhigh19.p057t

com.beginhigh19.p059j

com.beginhigh19.p075b

com.beginhigh19.p027d

com.beginhigh19.p041i

com.beginhigh19.p054v

com.beginhigh19.p071p

com.beginhigh19.p067x

com.beginhigh19.p044i

com.beginhigh19.p023w

com.beginhigh19.p025n

com.beginhigh19.p073f

com.beginhigh19.p042w

com.beginhigh19.p095e

com.beginhigh19.p053u

com.beginhigh19.p050i

com.beginhigh19.p077o

com.beginhigh19.p043q

com.beginhigh19.p032o

com.beginhigh19.p086c

com.beginhigh19.p088s

com.beginhigh19.p047t

Android Permissions

E-IFADE.apk