org.malwarebytes.antimalware.ui.MainActivity
android.intent.action.MAIN
android.intent.action.VIEW
android.intent.action.VIEW
net.openid.appauth.RedirectUriReceiverActivity
android.intent.action.VIEW
Static task
static1
2 signatures
General
-
Target
MalwarebytesMobileSecurityv5.11.1331PremiumModExtra.apk
-
Size
40.2MB
-
MD5
56b985e53a0bc063f6958a83ff56db34
-
SHA1
c947014b9ccf6a99d94fd86d916d736064c35b76
-
SHA256
7b104a7ff3ab1f1adb652b7e4716cf3eca4a91e216387d8f5190ca768fa5f327
-
SHA512
612dbff5b01d9a1bc96b6c98497bc1b7a7d19c5edda0149efba7310a23deef1cf0e0d682477d446e5d83435715bc74e8d9c00d0b15d7e198adb0ee84d636145d
-
SSDEEP
786432:xcSuYDVRvtjdiBznublfzq1omnwHb14cWZr+0YftTbqfIp34zJRbU:xcGJcDuZQl8b1GZr+0Y5OfIZSbU
Score
6/10
Malware Config
Signatures
-
Declares services with permission to bind to the system 4 IoCs
description ioc Required by VPN services to bind with the system. Allows apps to provision VPN services. android.permission.BIND_VPN_SERVICE Required by accessibility services to bind with the system. Allows apps to access accessibility features. android.permission.BIND_ACCESSIBILITY_SERVICE Required by remote views services to bind with the system. Allows apps to share and display views across different processes. android.permission.BIND_REMOTEVIEWS Required by remote views services to bind with the system. Allows apps to share and display views across different processes. android.permission.BIND_REMOTEVIEWS -
Requests dangerous framework permissions 9 IoCs
description ioc Allows an application a broad access to external storage in scoped storage. android.permission.MANAGE_EXTERNAL_STORAGE Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps. android.permission.SYSTEM_ALERT_WINDOW Allows an application to collect component usage statistics. android.permission.PACKAGE_USAGE_STATS Allows an application to receive SMS messages. android.permission.RECEIVE_SMS Allows an application to monitor incoming MMS messages. android.permission.RECEIVE_MMS Allows an application to receive WAP push messages. android.permission.RECEIVE_WAP_PUSH Allows an application to read SMS messages. android.permission.READ_SMS Allows an app to post notifications. android.permission.POST_NOTIFICATIONS
Files
-
MalwarebytesMobileSecurityv5.11.1331PremiumModExtra.apk.apk android arch:arm64 arch:arm arch:x86 arch:x64
org.malwarebytes.antimalware
org.malwarebytes.antimalware.ui.MainActivity
Activities
Permissions
android.permission.MANAGE_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.SYSTEM_ALERT_WINDOW
android.permission.PACKAGE_USAGE_STATS
android.permission.BIND_ACCESSIBILITY_SERVICE
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS
android.permission.QUERY_ALL_PACKAGES
android.permission.ACCESS_WIFI_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.FOREGROUND_SERVICE_DATA_SYNC
android.permission.FOREGROUND_SERVICE_SPECIAL_USE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.RECEIVE_SMS
android.permission.RECEIVE_MMS
android.permission.RECEIVE_WAP_PUSH
android.permission.READ_SMS
android.permission.INTERNET
android.permission.WAKE_LOCK
android.permission.POST_NOTIFICATIONS
android.permission.FOREGROUND_SERVICE
android.permission.REQUEST_DELETE_PACKAGES
com.google.android.c2dm.permission.RECEIVE
org.malwarebytes.antimalware.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
Receivers
org.malwarebytes.antimalware.widget.VpnWidgetReceiver
android.appwidget.action.APPWIDGET_UPDATE
org.malwarebytes.antimalware.widget.ScannerWidgetReceiver
android.appwidget.action.APPWIDGET_UPDATE
org.malwarebytes.antimalware.broadcast.sms.SmsBroadcastReceiver
android.provider.Telephony.SMS_RECEIVED
org.malwarebytes.antimalware.broadcast.sms.MmsBroadcastReceiver
android.provider.Telephony.WAP_PUSH_RECEIVED
org.malwarebytes.antimalware.broadcast.OnBootFinishedReceiver
android.intent.action.PACKAGE_REPLACED
android.intent.action.LOCKED_BOOT_COMPLETED
android.intent.action.BOOT_COMPLETED
android.intent.action.QUICKBOOT_POWERON
com.htc.intent.action.QUICKBOOT_POWERON
android.intent.action.REBOOT
android.intent.action.MY_PACKAGE_REPLACED
org.malwarebytes.antimalware.security.mb4app.common.receiver.OnBootReceiver
android.intent.action.PACKAGE_REPLACED
android.intent.action.MY_PACKAGE_REPLACED
android.intent.action.LOCKED_BOOT_COMPLETED
android.intent.action.BOOT_COMPLETED
android.intent.action.QUICKBOOT_POWERON
com.htc.intent.action.QUICKBOOT_POWERON
org.malwarebytes.antimalware.START_ALL_SERVICES
org.malwarebytes.antimalware.STOP_ALL_SERVICES
org.malwarebytes.antimalware.STOP_ALL_SERVICES_THAT_ARE_NOT_ALLOWED
com.google.firebase.iid.FirebaseInstanceIdReceiver
com.google.android.c2dm.intent.RECEIVE
androidx.glance.appwidget.MyPackageReplacedReceiver
android.intent.action.MY_PACKAGE_REPLACED
androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy
android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED
androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy
android.intent.action.BATTERY_OKAY
android.intent.action.BATTERY_LOW
androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy
android.intent.action.DEVICE_STORAGE_LOW
android.intent.action.DEVICE_STORAGE_OK
androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy
android.net.conn.CONNECTIVITY_CHANGE
androidx.work.impl.background.systemalarm.RescheduleReceiver
android.intent.action.BOOT_COMPLETED
android.intent.action.TIME_SET
android.intent.action.TIMEZONE_CHANGED
androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver
androidx.work.impl.background.systemalarm.UpdateProxies
androidx.work.impl.diagnostics.DiagnosticsReceiver
androidx.work.diagnostics.REQUEST_DIAGNOSTICS
androidx.profileinstaller.ProfileInstallReceiver
androidx.profileinstaller.action.INSTALL_PROFILE
androidx.profileinstaller.action.SKIP_FILE
androidx.profileinstaller.action.SAVE_PROFILE
androidx.profileinstaller.action.BENCHMARK_OPERATION
Services
org.malwarebytes.antimalware.notification.MbFirebaseMessagingService
com.google.firebase.MESSAGING_EVENT
com.wireguard.android.backend.GoBackend$VpnService
android.net.VpnService
org.malwarebytes.antimalware.security.mb4app.security.accessibility.SafeBrowsingA11yService
android.accessibilityservice.AccessibilityService
com.google.firebase.messaging.FirebaseMessagingService
com.google.firebase.MESSAGING_EVENT
Android Permissions
MalwarebytesMobileSecurityv5.11.1331PremiumModExtra.apk
Permissions
android.permission.MANAGE_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.SYSTEM_ALERT_WINDOW
android.permission.PACKAGE_USAGE_STATS
android.permission.BIND_ACCESSIBILITY_SERVICE
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS
android.permission.QUERY_ALL_PACKAGES
android.permission.ACCESS_WIFI_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.FOREGROUND_SERVICE_DATA_SYNC
android.permission.FOREGROUND_SERVICE_SPECIAL_USE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.RECEIVE_SMS
android.permission.RECEIVE_MMS
android.permission.RECEIVE_WAP_PUSH
android.permission.READ_SMS
android.permission.INTERNET
android.permission.WAKE_LOCK
android.permission.POST_NOTIFICATIONS
android.permission.FOREGROUND_SERVICE
android.permission.REQUEST_DELETE_PACKAGES
com.google.android.c2dm.permission.RECEIVE
org.malwarebytes.antimalware.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION