General

  • Target

    Ghost%20Commander%201.63.1b5.apk

  • Size

    4.7MB

  • MD5

    08115e5c594ef600dc4f19be84caa650

  • SHA1

    806ee9bb54796923cb86d85817790e97a831dfd7

  • SHA256

    c87aad0e7d9d1878f62e3c2bd257b71ee58345fb5217c6973937ac9c07183c51

  • SHA512

    db3175365478ea714415b3d4d883f86c87480577c113a3966d477b013a5cbac5d76c976a968729fa339afd297cb61e0f0ea29f97ea7715b8817d90e79ecbad33

  • SSDEEP

    98304:k4LNnAW4LN67NTdJeMuT9GnRDxBMar7EBqxiO0CnVyIcuvtiuzfbnbb1lrTZ5LXA:VRnLNuZ0RDM87oqxyypcXuf/fZpXL1G

Score
6/10

Malware Config

Signatures

  • Requests dangerous framework permissions 5 IoCs

Files

  • Ghost%20Commander%201.63.1b5.apk
    .apk android

    Password: infected

    com.ghostsq.commander

    com.ghostsq.commander.FileCommander


Android Permissions

Ghost%20Commander%201.63.1b5.apk

Permissions

android.permission.INTERNET

android.permission.ACCESS_WIFI_STATE

android.permission.POST_NOTIFICATIONS

android.permission.WAKE_LOCK

android.permission.FOREGROUND_SERVICE

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MANAGE_EXTERNAL_STORAGE

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.REQUEST_DELETE_PACKAGES

android.permission.ACCESS_SUPERUSER

android.permission.USE_CREDENTIALS

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.VIBRATE

android.permission.QUERY_ALL_PACKAGES