Resubmissions

03-09-2024 11:23

240903-ng9klsvflq 6

03-09-2024 11:22

240903-ngmqvawfnf 6

General

  • Target

    07817036570a35b7959c80af3b139f8ca2c6d9fc39a1d5e46488725c2340823c.apk

  • Size

    533KB

  • MD5

    ee9fa666e11b6b60babaf000e5a176c4

  • SHA1

    47b9c65970221a02fbfbbad211348504e5c1aa2f

  • SHA256

    07817036570a35b7959c80af3b139f8ca2c6d9fc39a1d5e46488725c2340823c

  • SHA512

    aa641b6352364a6838b2f206c8efa6e161527a850969db24425e23fa327a6f831384c5b9612ddbac8121b248df822e938f3b09e36a707d71be03712b2f3a1355

  • SSDEEP

    12288:ZWcugItKovp4K62TojtMsColRxE8pzsS/njEjdUxGFRSQ:ZWc2tKCWxlRxE8pwS/jEjKQH

Score
6/10

Malware Config

Signatures

  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 4 IoCs

Files

  • 07817036570a35b7959c80af3b139f8ca2c6d9fc39a1d5e46488725c2340823c.apk
    .apk android

    com.kt.falcon

    com.kt.falcon.MainActivity


Android Permissions

07817036570a35b7959c80af3b139f8ca2c6d9fc39a1d5e46488725c2340823c.apk

Permissions

android.permission.INTERNET

android.permission.ACCESS_WIFI_STATE

android.permission.POST_NOTIFICATIONS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.SYSTEM_ALERT_WINDOW

android.permission.RECEIVE_LAUNCH_BROADCASTS

android.permission.QUICKBOOT_POWERON

android.permission.ACTION_MANAGE_OVERLAY_PERMISSION

android.permission.READ_PHONE_STATE

android.permission.READ_PHONE_NUMBERS

android.permission.FOREGROUND_SERVICE

android.permission.WAKE_LOCK

android.permission.FOREGROUND_SERVICE_MEDIA_PROJECTION

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

com.kt.falcon.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION