General

  • Target

    1c816b006c08e1c805512564c9b74fb4b02de85c49b777a7131c1b69230210d0.bin

  • Size

    1.6MB

  • MD5

    b2e845f802015dc94e7ebf6854acf14d

  • SHA1

    b040a51054864fcab09f22e1fc142373a98ce2b3

  • SHA256

    1c816b006c08e1c805512564c9b74fb4b02de85c49b777a7131c1b69230210d0

  • SHA512

    c52a452c7049cec81be37746c0cb1837ad40f0357a41ea1acc2c0edb900a3717ae1a262a2d8d9b64de3054f07ea5eed45a855ea7861a1061722fc6c97d66d00a

  • SSDEEP

    49152:7jjyb+BWR2UJRqltolsQa6JdjK7CbOk4fvLWpenmvp5:m+CJ+uyb6f28r6vLceg5

Score
6/10

Malware Config

Signatures

  • Attempts to obfuscate APK file format

    Applies obfuscation techniques to the APK format in order to hinder analysis

  • Declares broadcast receivers with permission to handle system events 1 IoCs
  • Declares services with permission to bind to the system 2 IoCs
  • Requests dangerous framework permissions 18 IoCs

Files

  • 1c816b006c08e1c805512564c9b74fb4b02de85c49b777a7131c1b69230210d0.bin
    .apk android arch:arm arch:arm64 arch:x86 arch:x64

    com.legend.urge

    com.already.p045l


Android Permissions

1c816b006c08e1c805512564c9b74fb4b02de85c49b777a7131c1b69230210d0.bin

Permissions

android.permission.POST_NOTIFICATIONS

com.fundevs.app.mediaconverter.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

com.oppo.permission.safe.SAU

android.permission.GET_TASKS

android.permission.ACCESS_WIFI_STATE

android.permission.SEND_SMS

android.permission.FORCE_STOP_PACKAGES

com.coloros.bootreg.permission.OPPO_BOOTREG_COMPLETED

android.permission.CLEAR_APP_CACHE

android.permission.INSTALL_SHORTCUT

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.ACCESS_ADSERVICES_TOPICS

android.permission.FOREGROUND_SERVICE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

com.oppo.launcher.permission.READ_SETTINGS

com.xiaomi.permission.AUTH_SERVICE

android.permission.WRITE_SETTINGS

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.INTERNET

oppo.permission.OPPO_COMPONENT_SAFE

android.permission.BATTERY_STATS

com.google.android.providers.gsf.permission.READ_GSERVICES

android.permission.INTERNET

android.permission.ACCESS_ADSERVICES_AD_ID

android.permission.ACCESS_MTP

android.permission.ADD_VOICEMAIL

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_MEDIA_AUDIO

android.permission.READ_EXTERNAL_STORAGE

android.permission.REQUEST_COMPANION_USE_DATA_IN_BACKGROUND

android.permission.FOREGROUND_SERVICE

android.permission.READ_EXTERNAL_STORAGE

com.google.android.gms.permission.ACTIVITY_RECOGNITION

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.GET_PACKAGE_SIZE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.REQUEST_DELETE_PACKAGES

android.permission.RECEIVE_SMS

com.oppo.permission.RUTILCMD

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.ACCESS_COARSE_LOCATION

android.permission.READ_MEDIA_IMAGES

com.coloros.alarmclock.permission.ACCESS_PROVIDER

android.permission.WAKE_LOCK

android.permission.READ_MEDIA_VIDEO

android.permission.REQUEST_DELETE_PACKAGES