General

  • Target

    4a04b5136a5ded43c667ff9b702602b8ca90aa766413f761766113a6d8965601.bin

  • Size

    2.0MB

  • MD5

    90eaa36290d4c462c8fc100309953631

  • SHA1

    b4c0eccc1095819a583f32530a6cbeb903915935

  • SHA256

    4a04b5136a5ded43c667ff9b702602b8ca90aa766413f761766113a6d8965601

  • SHA512

    3df55b89adc0f1cedd741d0657b1d2120633ffbade6ee403e2dc2d4f2af6190f105c1255bdd98d9d2b44de18fc9aaae0d251fc4fc312286b0bc56947395def37

  • SSDEEP

    49152:HrPgV32UvAvK4uq8Q8YCDZOl4IzUg+4YTWSAVXGJPRBlckBMxLs:H7GovK4uq8Q7CoLvNKxVRBuSMxw

Score
6/10

Malware Config

Signatures

  • Attempts to obfuscate APK file format

    Applies obfuscation techniques to the APK format in order to hinder analysis

  • Declares broadcast receivers with permission to handle system events 1 IoCs
  • Declares services with permission to bind to the system 2 IoCs
  • Requests dangerous framework permissions 18 IoCs

Files

  • 4a04b5136a5ded43c667ff9b702602b8ca90aa766413f761766113a6d8965601.bin
    .apk android arch:arm arch:arm64 arch:x86 arch:x64

    com.cereal.defy

    com.escape.p045l


Android Permissions

4a04b5136a5ded43c667ff9b702602b8ca90aa766413f761766113a6d8965601.bin

Permissions

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.USES_POLICY_FORCE_LOCK

android.permission.POST_NOTIFICATIONS

android.permission.INTERNET

android.permission.ACCESS_ADSERVICES_AD_ID

android.permission.WAKE_LOCK

android.permission.ACCESS_ADSERVICES_ATTRIBUTION

com.oplus.metis.factdata.permission.DATABASE

android.permission.ACCESS_COARSE_LOCATION

com.xiaomi.permission.AUTH_SERVICE

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.READ_PHONE_STATE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.CALL_PHONE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_SETTINGS

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.FOREGROUND_SERVICE

com.fundevs.app.mediaconverter.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

android.permission.CHANGE_COMPONENT_ENABLED_STATE

android.permission.REQUEST_DELETE_PACKAGES

android.permission.GET_TASKS

com.oppo.launcher.permission.READ_SETTINGS

android.permission.ACCESS_NETWORK_STATE

android.permission.UPDATE_APP_OPS_STATS

android.permission.READ_MEDIA_VIDEO

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.MANAGE_APP_OPS_MODES

com.oppo.permission.RUTILCMD

android.permission.FOREGROUND_SERVICE

android.permission.WAKE_LOCK

android.permission.READ_MEDIA_AUDIO

com.oppo.permission.safe.SAU

oppo.permission.OPPO_COMPONENT_SAFE

android.permission.REQUEST_COMPANION_USE_DATA_IN_BACKGROUND

android.permission.ACCESS_ADSERVICES_TOPICS

android.permission.READ_EXTERNAL_STORAGE

android.permission.READ_SMS

android.permission.QUERY_ALL_PACKAGES

android.permission.BATTERY_STATS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.READ_PHONE_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.CLEAR_APP_CACHE

com.oplus.thirdkit.permission.SECURITY

android.permission.INSTALL_SHORTCUT

android.permission.USE_FINGERPRINT

android.permission.WRITE_SETTINGS