com.jetstartgames.chess.MenuActivity
android.intent.action.MAIN
General
-
Target
chess.apk
-
Size
3.1MB
-
MD5
01db5841d7f0a59cdd302e1837731d13
-
SHA1
b0f7674f161606905a1e0ca43d7e4132a17ba8ea
-
SHA256
b39831c8270a75d402116007e59254d7d33074b3a21859045b67c10390ebd9d4
-
SHA512
35c1bcfc6ddb5c68a6d5dc6e39f5ec4c0c631df18a2bed0e91717b4cf570ae15abd1e7faea30b44fb66eb1714c500b2027190aaaf3d5884a246bbda3675e1fc2
-
SSDEEP
98304:4Zvh02A/m7I0q+DUrKhZF5tPIld+w1aQl86:4Z02ARIhHbIl/1ao86
Score
10/10
Malware Config
Signatures
-
Metasploit family
-
Metasploit payload 1 IoCs
resource yara_rule sample family_metasploit -
Requests dangerous framework permissions 15 IoCs
description ioc Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call. android.permission.CALL_PHONE Allows an application to read the user's call log. android.permission.READ_CALL_LOG Allows an application to record audio. android.permission.RECORD_AUDIO Allows an application to read or write the system settings. android.permission.WRITE_SETTINGS Required to be able to access the camera device. android.permission.CAMERA Allows an app to access precise location. android.permission.ACCESS_FINE_LOCATION Allows an application to send SMS messages. android.permission.SEND_SMS Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE Allows an application to write and read the user's call log data. android.permission.WRITE_CALL_LOG Allows an application to read the user's contacts data. android.permission.READ_CONTACTS Allows an application to receive SMS messages. android.permission.RECEIVE_SMS Allows an application to read SMS messages. android.permission.READ_SMS Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE Allows an app to access approximate location. android.permission.ACCESS_COARSE_LOCATION Allows an application to write the user's contacts data. android.permission.WRITE_CONTACTS
Files
-
chess.apk.apk android
com.jetstartgames.chess
com.jetstartgames.chess.MenuActivity
Activities
Permissions
android.permission.CALL_PHONE
android.permission.ACCESS_WIFI_STATE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.READ_CALL_LOG
android.permission.RECORD_AUDIO
android.permission.SET_WALLPAPER
android.permission.WRITE_SETTINGS
android.permission.CAMERA
android.permission.ACCESS_FINE_LOCATION
android.permission.SEND_SMS
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.CHANGE_WIFI_STATE
android.permission.WRITE_CALL_LOG
android.permission.READ_CONTACTS
android.permission.RECEIVE_SMS
android.permission.READ_SMS
android.permission.READ_PHONE_STATE
android.permission.ACCESS_COARSE_LOCATION
android.permission.WRITE_CONTACTS
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
com.android.vending.BILLING
android.permission.WAKE_LOCK
com.google.android.gms.permission.AD_ID
android.permission.ACCESS_ADSERVICES_AD_ID
android.permission.ACCESS_ADSERVICES_ATTRIBUTION
android.permission.ACCESS_ADSERVICES_TOPICS
android.permission.FOREGROUND_SERVICE
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
com.jetstartgames.chess.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
Receivers
androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy
android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED
androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy
android.intent.action.BATTERY_OKAY
android.intent.action.BATTERY_LOW
androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy
android.intent.action.DEVICE_STORAGE_LOW
android.intent.action.DEVICE_STORAGE_OK
androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy
android.net.conn.CONNECTIVITY_CHANGE
androidx.work.impl.background.systemalarm.RescheduleReceiver
android.intent.action.BOOT_COMPLETED
android.intent.action.TIME_SET
android.intent.action.TIMEZONE_CHANGED
androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver
androidx.work.impl.background.systemalarm.UpdateProxies
androidx.work.impl.diagnostics.DiagnosticsReceiver
androidx.work.diagnostics.REQUEST_DIAGNOSTICS
com.jetstartgames.chess.pvlqb.Xmwwo
android.intent.action.BOOT_COMPLETED
Services
Android Permissions
chess.apk
Permissions
android.permission.CALL_PHONE
android.permission.ACCESS_WIFI_STATE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.READ_CALL_LOG
android.permission.RECORD_AUDIO
android.permission.SET_WALLPAPER
android.permission.WRITE_SETTINGS
android.permission.CAMERA
android.permission.ACCESS_FINE_LOCATION
android.permission.SEND_SMS
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.CHANGE_WIFI_STATE
android.permission.WRITE_CALL_LOG
android.permission.READ_CONTACTS
android.permission.RECEIVE_SMS
android.permission.READ_SMS
android.permission.READ_PHONE_STATE
android.permission.ACCESS_COARSE_LOCATION
android.permission.WRITE_CONTACTS
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
com.android.vending.BILLING
android.permission.WAKE_LOCK
com.google.android.gms.permission.AD_ID
android.permission.ACCESS_ADSERVICES_AD_ID
android.permission.ACCESS_ADSERVICES_ATTRIBUTION
android.permission.ACCESS_ADSERVICES_TOPICS
android.permission.FOREGROUND_SERVICE
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
com.jetstartgames.chess.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION