General

  • Target

    72488e171fd2956be9688b58dae1a99ab5f3b8bbf6a3019aafb723793edec70c.bin

  • Size

    4.5MB

  • MD5

    a713f8ccbe52c00cee54a7e08b78e3d1

  • SHA1

    63e8530e22ed23791fb184bc0d2a1dac98d2eaaa

  • SHA256

    72488e171fd2956be9688b58dae1a99ab5f3b8bbf6a3019aafb723793edec70c

  • SHA512

    e630ada9c1d8d8dd0c1259115cc074af7c87a1c38f18d36cc96f6decc64aa9353a66010af39c78942bce66c6b89256fb53aa9b2b643ab496beb0a21b6dcc3d88

  • SSDEEP

    98304:R0BE+fH+ni4KMRwzimRie1ron17WHxOufowjt/z/ajcg5l19jC:5+f+n0iek17iPUIUl19m

Score
6/10

Malware Config

Signatures

  • Declares services with permission to bind to the system 1 IoCs

Files

  • 72488e171fd2956be9688b58dae1a99ab5f3b8bbf6a3019aafb723793edec70c.bin
    .apk android arch:arm arch:arm64 arch:x64 arch:x86

    com.spreaker.android

    com.budgestudios.ThomasAndFriendsGoGoThomas.hip


Android Permissions

72488e171fd2956be9688b58dae1a99ab5f3b8bbf6a3019aafb723793edec70c.bin

Permissions

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.ACCESS_WIFI_STATE

android.permission.QUERY_ALL_PACKAGES

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.DISABLE_KEYGUARD

android.permission.FOREGROUND_SERVICE

android.permission.WAKE_LOCK

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

com.google.android.gms.permission.AD_ID

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE