General

  • Target

    4FB5C7CAFC9EEA1117FE8FE205E92789FC68D1B91C36B20EBAA73E4DB32985FD.apk

  • Size

    7.4MB

  • MD5

    22cce821e1ad715ed540c1704c93fadb

  • SHA1

    cf7855c81245fe52362e9ab3c12e8a8fc315b1d2

  • SHA256

    4fb5c7cafc9eea1117fe8fe205e92789fc68d1b91c36b20ebaa73e4db32985fd

  • SHA512

    c1ebd6c82575576732f0d40a1204ea2f43384b3c158ab665b661f2045f9462f6b47e3706c98a4c0e0cfc92d056671ebbaf94f7cfef9a29af4ea3fe4ac1ae5c80

  • SSDEEP

    98304:ga5iSRGKrRs/zjYpTqVKwcy0j7YyWRC2lBO/:garrRWzFUxZj7YvRCYBO/

Score
6/10

Malware Config

Signatures

  • Attempts to obfuscate APK file format

    Applies obfuscation techniques to the APK format in order to hinder analysis

  • Declares broadcast receivers with permission to handle system events 1 IoCs
  • Declares services with permission to bind to the system 2 IoCs
  • Requests dangerous framework permissions 24 IoCs

Files

  • 4FB5C7CAFC9EEA1117FE8FE205E92789FC68D1B91C36B20EBAA73E4DB32985FD.apk
    .apk android arch:x86 arch:arm64 arch:x64 arch:arm

    com.nfont_systemh

    com.nfont_systemh.lUr8qjM


Android Permissions

4FB5C7CAFC9EEA1117FE8FE205E92789FC68D1B91C36B20EBAA73E4DB32985FD.apk

Permissions

android.permission.SYSTEM_ALERT_WINDOW

com.google.android.apps.photos.permission.GOOGLE_PHOTOS

android.permission.INTERNET

android.permission.CALL_PHONE

com.android.vending.BILLING

android.permission.CHANGE_NETWORK_STATE

android.permission.ACCESS_MEDIA_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.SYSTEM_ALERT_WINDOW

android.permission.WAKE_LOCK

android.permission.REORDER_TASKS

android.permission.POST_NOTIFICATIONS

android.permission.WAKE_LOCK

android.permission.MODIFY_AUDIO_SETTINGS

com.oppo.launcher.permission.WRITE_SETTINGS

android.permission.MANAGE_OWN_CALLS

android.permission.SEND_SMS

android.permission.QUERY_ALL_PACKAGES

android.permission.ACCESS_NETWORK_STATE

android.permission.USE_FULL_SCREEN_INTENT

com.oplus.permission.safe.APP_MANAGER

mega.privacy.android.app.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

android.permission.FOREGROUND_SERVICE

android.permission.FORCE_STOP_PACKAGES

android.permission.WRITE_SMS

android.permission.READ_MEDIA_VISUAL_USER_SELECTED

android.permission.READ_PHONE_STATE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.USE_FINGERPRINT

com.google.android.gms.permission.AD_ID

android.permission.CHANGE_COMPONENT_ENABLED_STATE

android.permission.READ_SMS

android.permission.BLUETOOTH_CONNECT

com.coloros.bootreg.permission.OPPO_BOOTREG_COMPLETED

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.ACCESS_MTP

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.FLAG_SHOW_WHEN_LOCKED

android.permission.READ_MEDIA_AUDIO

com.oppo.launcher.permission.READ_SETTINGS

com.oppo.permission.RUTILCMD

android.permission.MODIFY_AUDIO_SETTINGS

com.google.android.c2dm.permission.RECEIVE

com.oplus.metis.factdata.permission.DATABASE

android.permission.RECEIVE_MMS

android.permission.UPDATE_APP_OPS_STATS

com.oppo.permission.safe.SAU

com.coloros.backuprestore.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

android.permission.USES_POLICY_FORCE_LOCK