Resubmissions

05/09/2024, 09:49

240905-ltdycsydrd 6

05/09/2024, 09:48

240905-ls824sydqh 6

General

  • Target

    sample.apk

  • Size

    2.0MB

  • MD5

    62d9b7cff4a09d7c3b7e8bcf9d00d196

  • SHA1

    376e81739e6e2acb54f5548e07aee1a8382b1e22

  • SHA256

    936c19d03c181c926f8bd55abe6e729a61f548866a95b37ea172e372b08fd5a4

  • SHA512

    dca0862802a99b11f7c76255fbd87eacd1561727f0da7a18a3f2145abf54150a6dd88317bd1ccaf72011afa5ee31f68c6a04e91c648b2d151bbf8239156172dd

  • SSDEEP

    49152:0N24SqntBhn4xtCrmOj/2jM/+WjC5IiUo/KrhN0Od:0Qmn3hnsCrhjkOvjoI5o/KrhCOd

Score
6/10

Malware Config

Signatures

  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 2 IoCs

Files

  • sample.apk
    .apk android

    com.drama.photo.camera

    com.drama.photo.camera.PhotoCamera


Android Permissions

sample.apk

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.CAMERA

android.permission.RECORD_AUDIO

android.permission.CHANGE_NETWORK_STATE

com.drama.photo.camera.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE