General

  • Target

    Nika Client V2.apk

  • Size

    9.0MB

  • MD5

    163c55b39c01bdd5cc9d9d3b44411e90

  • SHA1

    28bd6b5269ba7cb441471e659fa15fd1a707a2b3

  • SHA256

    556b74159bc1942ff1792772359771bd17b0a7e17204b51be148e6f883b53ef2

  • SHA512

    8704a96e75e2645e72c059312ce1ce86590c4658fbf0ce01debda38be89592034c230f6105c13d2267361a20df669274d96ff2ab509420be532650e1c5d8ae8a

  • SSDEEP

    196608:c3J86kQV+UtgQHvBmnv/Oana38a/wIRZL3ObaHnvUrMTpXDYjJVBfnp:c3JDZEUtgQPOvVa38aNRpOgTpKVBvp

Score
6/10

Malware Config

Signatures

  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 2 IoCs

Files

  • Nika Client V2.apk
    .apk android arch:arm64 arch:x64

    nika.clientv2

    dev.sora.protohax.ui.activities.MainActivity


Android Permissions

Nika Client V2.apk

Permissions

android.permission.INTERNET

android.permission.FOREGROUND_SERVICE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.QUERY_ALL_PACKAGES

android.permission.FOREGROUND_SERVICE_SPECIAL_USE

android.permission.POST_NOTIFICATIONS

android.permission.ACCESS_NETWORK_STATE

android.permission.WAKE_LOCK

nika.clientv2_com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

nika.clientv2_com.google.android.gms.permission.AD_ID

nika.clientv2_dev.sora.protohax.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSIONqk