General

  • Target

    1.1.1.1.apk

  • Size

    32.2MB

  • MD5

    e1cc15739334042d20805cd62cbccffe

  • SHA1

    081e2ff637378105da17694c73486407bb240e82

  • SHA256

    4e99120af665d7c915555552779bba2c5ed9dd0808a7f88e808512a858b839e1

  • SHA512

    0e87f49fe1967fa58fcd6fc61ca65b2f5cce1c07d20810dd2c3a9f75019d47a8166f796be2af059a4723b0d22ce8b6e720b2e47664d0ed84f02cbc2b410775f4

  • SSDEEP

    786432:eMy9hDfD5Ogl8POupPFrOrqvt9E9XQnuqQN5GhY0UQ/uqNHdXJ6V:ebUgl8mGPoGE9XYun5Gu0x/zX4

Score
6/10

Malware Config

Signatures

  • Declares services with permission to bind to the system 2 IoCs
  • Requests dangerous framework permissions 4 IoCs

Files

  • 1.1.1.1.apk
    .apk android arch:arm64 arch:arm arch:x86 arch:x64

    com.cloudflare.onedotonedotonedotone

    com.cloudflare.app.presentation.main.SplashActivity


Android Permissions

1.1.1.1.apk

Permissions

com.cloudflare.onedotonedotonedotone.permission.ACCESS_EXPORTED_ACTIVITY

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

android.permission.ACCESS_WIFI_STATE

android.permission.POST_NOTIFICATIONS

android.permission.ACCESS_COARSE_LOCATION

android.permission.READ_EXTERNAL_STORAGE

com.android.vending.BILLING

android.permission.WAKE_LOCK

com.google.android.c2dm.permission.RECEIVE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE