XDR_ResponseApp_CollectFile_RM-20240818-00013_62D83317-5944-48B5-9037-671EE12C6907_20240818T115710Z[.]7z

General

Target

XDR_ResponseApp_CollectFile_RM-20240818-00013_62D83317-5944-48B5-9037-671EE12C6907_20240818T115710Z.7z
Size

33.1MB
MD5

20e3183854c0cd23d149c967aa4665a2
SHA1

9a7521b5e058b16749a8a3d1fa59f4ee6a97a609
SHA256

98d66e493df41692aebbc15fd81ba74e1c76da450ac7c5103368a252a62d73ca
SHA512

b646c23b6e9cc1080ad67747c215ffdbcec3fc6ec649d6e088646ec600a4fdc1626df83f52bef907b9731070a4bf88b468238e9f7b776026ed258bc5454d7da4
SSDEEP

786432:/vlv/yO6gpmc0r5pMhCcA7LfBOX72tw4JTWT:Xlj9pmcUbMsxnfBOX7gw4JTWT

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 3 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION

Files

XDR_ResponseApp_CollectFile_RM-20240818-00013_62D83317-5944-48B5-9037-671EE12C6907_20240818T115710Z.7z
.zip

Password: n4hl5q34
PixelLab_2.0.7_apkcombo.com.apk
.apk android arch:arm64 arch:arm arch:x86 arch:x64

Password: n4hl5q34

com.imaginstudio.imagetools.pixellab

com.imaginstudio.imagetools.pixellab.MainActivity

Activities

com.imaginstudio.imagetools.pixellab.MainActivity

android.intent.action.MAIN
android.intent.action.SEND
android.intent.action.EDIT
android.intent.action.VIEW

io.presage.mraid.browser.ShortcutActivity

android.intent.action.MAIN

io.presage.mraid.browser.Android8AndLaterShortcutActivity

android.intent.action.MAIN

Permissions

android.permission.WRITE_EXTERNAL_STORAGE
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
com.android.vending.BILLING
com.android.vending.CHECK_LICENSE
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_WIFI_STATE
com.google.android.gms.permission.AD_ID
android.permission.WAKE_LOCK
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.FOREGROUND_SERVICE

Receivers

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY
android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW
android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.TIME_SET
android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.work.diagnostics.REQUEST_DIAGNOSTICS

com.appodeal.ads.AppodealPackageAddedReceiver

android.intent.action.PACKAGE_ADDED

com.ogury.core.internal.OguryLogEnablerReceiver

com.ogury.sdk.intent.ENABLE_LOGS

Services

com.yandex.metrica.MetricaService

com.yandex.metrica.IMetricaService

com.yandex.metrica.ConfigurationService

com.yandex.metrica.configuration.ACTION_INIT

Sharing

General

Malware Config

Signatures

Files

Password: n4hl5q34

Password: n4hl5q34

com.imaginstudio.imagetools.pixellab

com.imaginstudio.imagetools.pixellab.MainActivity

Activities

com.imaginstudio.imagetools.pixellab.MainActivity

io.presage.mraid.browser.ShortcutActivity

io.presage.mraid.browser.Android8AndLaterShortcutActivity

Permissions

Receivers

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.diagnostics.DiagnosticsReceiver

com.appodeal.ads.AppodealPackageAddedReceiver

com.ogury.core.internal.OguryLogEnablerReceiver

Services

com.yandex.metrica.MetricaService

com.yandex.metrica.ConfigurationService