archive-300924-12_09_18_Survive_The_Killer_Script[.]apk

General

Target

archive-300924-12_09_18_Survive_The_Killer_Script.apk
Size

24.5MB
MD5

94d20ae744806e55415d1f8068621b0b
SHA1

26efc4234990864f94995f5965dfdbd17b3df74c
SHA256

c397e4b72082c8616bcfdd905db67068546cadd728e9774039b7d58dd79ac3a0
SHA512

9ca3362f180728f54926c453f49e2ca348f524f061b3514a97fd7a4dd4505b7bac5bcc92a69ce1cf39a71632971f1451761738d8ded40edc5afc884a05fcb994
SSDEEP

393216:0T7Pv3C936nRsHHI3sSCNujUBNGym5pYmwhy2d/p+joussbBN80C:0XPv3C93ac+iBNvg0sTbBe7

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by telecom connection services to bind with the system. Allows apps to manage phone call aspects such as call setup and notifications.	android.permission.BIND_TELECOM_CONNECTION_SERVICE

Requests dangerous framework permissions 10 IoCs

description	ioc
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Required to be able to access the camera device.	android.permission.CAMERA
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows applications to use exact alarm APIs.	android.permission.SCHEDULE_EXACT_ALARM

Files

archive-300924-12_09_18_Survive_The_Killer_Script.apk
.apk android arch:arm arch:arm64

org.dkaf.qpdgyr

br.com.app.gpu1773443.gpu13e7fd96c1400cf8a2f729c9efbe49b6.PermissionActivity

Activities

com.facebook.CustomTabActivity

android.intent.action.VIEW
android.intent.action.VIEW

br.com.app.gpu1773443.gpu13e7fd96c1400cf8a2f729c9efbe49b6.MainActivity

android.intent.action.VIEW

br.com.app.gpu1773443.gpu13e7fd96c1400cf8a2f729c9efbe49b6.PermissionActivity

android.intent.action.MAIN

br.com.app.gpu1773443.gpu13e7fd96c1400cf8a2f729c9efbe49b6.PermissionActivity

android.intent.action.MAIN

Permissions

android.permission.INTERNET
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_NETWORK_STATE
android.permission.CAMERA
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.WAKE_LOCK
com.google.android.c2dm.permission.RECEIVE
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
android.permission.SYSTEM_ALERT_WINDOW
android.permission.SYSTEM_ALERT_WINDOW
android.permission.READ_BASIC_PHONE_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.FOREGROUND_SERVICE
android.permission.POST_NOTIFICATIONS
android.permission.MANAGE_OWN_CALLS
android.permission.USE_FULL_SCREEN_INTENT
com.google.android.gms.permission.AD_ID
android.permission.REQUEST_INSTALL_PACKAGES
android.permission.QUERY_ALL_PACKAGES
android.permission.SCHEDULE_EXACT_ALARM

Receivers

com.getcapacitor.plugin.notification.LocalNotificationRestoreReceiver

android.intent.action.LOCKED_BOOT_COMPLETED
android.intent.action.BOOT_COMPLETED
android.intent.action.QUICKBOOT_POWERON

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

com.facebook.CurrentAccessTokenExpirationBroadcastReceiver

com.facebook.sdk.ACTION_CURRENT_ACCESS_TOKEN_CHANGED

org.dkaf.qpdgyr.Nl49oB

android.intent.action.BOOT_COMPLETED

Services

com.getcapacitor.CapacitorFirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

org.dkaf.qpdgyr.KOqwxd

android.telecom.ConnectionService

Android Permissions

archive-300924-12_09_18_Survive_The_Killer_Script.apk

Permissions

android.permission.INTERNET

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_NETWORK_STATE

android.permission.CAMERA

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WAKE_LOCK

com.google.android.c2dm.permission.RECEIVE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_BASIC_PHONE_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.FOREGROUND_SERVICE

android.permission.POST_NOTIFICATIONS

android.permission.MANAGE_OWN_CALLS

android.permission.USE_FULL_SCREEN_INTENT

com.google.android.gms.permission.AD_ID

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.QUERY_ALL_PACKAGES

android.permission.SCHEDULE_EXACT_ALARM

Sharing

General

Malware Config

Signatures

Files

org.dkaf.qpdgyr

br.com.app.gpu1773443.gpu13e7fd96c1400cf8a2f729c9efbe49b6.PermissionActivity

Activities

com.facebook.CustomTabActivity

br.com.app.gpu1773443.gpu13e7fd96c1400cf8a2f729c9efbe49b6.MainActivity

br.com.app.gpu1773443.gpu13e7fd96c1400cf8a2f729c9efbe49b6.PermissionActivity

br.com.app.gpu1773443.gpu13e7fd96c1400cf8a2f729c9efbe49b6.PermissionActivity

Permissions

Receivers

com.getcapacitor.plugin.notification.LocalNotificationRestoreReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.facebook.CurrentAccessTokenExpirationBroadcastReceiver

org.dkaf.qpdgyr.Nl49oB

Services

com.getcapacitor.CapacitorFirebaseMessagingService

com.google.firebase.messaging.FirebaseMessagingService

org.dkaf.qpdgyr.KOqwxd

Android Permissions

archive-300924-12_09_18_Survive_The_Killer_Script.apk