General

  • Target

    File_v2_8_encurta (2).apk

  • Size

    26.0MB

  • MD5

    4a383b733bdb0cff819e52c3f533abdf

  • SHA1

    710c11b8e8469ef5854a831a223aaa6e9ade7bb5

  • SHA256

    d880d02cd22c9c5b4445e1a8e444549bc0cabfb73c591534602e91452b0b56ba

  • SHA512

    1dfeccc37537b4fd811b463b06f263de4b47c6a364ac26bf8806aa40f49a4fa724f5304c4a801f2725d06bcdf0bfb28da738754cb4c69f09fc0598b63061fedc

  • SSDEEP

    393216:F23zNd2cMRDau89bBpVt+NY3+QVQqJN6hhvu0idb7InlI8k8E1R:w3T2cet8GeuQZN6JeFesR

Score
6/10

Malware Config

Signatures

  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 4 IoCs

Files

  • File_v2_8_encurta (2).apk
    .apk android arch:arm arch:arm64

    Password: infected

    org.ulsza.qnynz

    com.whiteningskinn.bashratafteh.PermissionActivity


Android Permissions

File_v2_8_encurta (2).apk

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

com.google.android.gms.permission.AD_ID

android.permission.WAKE_LOCK

android.permission.FOREGROUND_SERVICE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_BASIC_PHONE_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.ACCESS_WIFI_STATE

android.permission.POST_NOTIFICATIONS

android.permission.MANAGE_OWN_CALLS

android.permission.USE_FULL_SCREEN_INTENT

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.QUERY_ALL_PACKAGES

android.permission.SCHEDULE_EXACT_ALARM