General

  • Target

    CLIENT.apk

  • Size

    3.4MB

  • MD5

    e05f642a954e5fa5d06c56cf04c00b2d

  • SHA1

    19d28d4f2677d6311ccc90c74806383931f2c0bc

  • SHA256

    2bbe9cd94760ffe4f2ac5058343c25d7e9a24c5c678a1d3493999de2a5ea18dc

  • SHA512

    e0f516e534619b727d4cf1508c5f7408e18f2ffe5a432c2393d7add17927bead273ad38fa08e8a53f996c8b2ee69500ff3f1cbe2daf96a417c0e3e4b037587ff

  • SSDEEP

    49152:Yad2okaqMvh9/rY68za8sdWuDLA2LQm1cOdc/bpjgmVY2yocPKl65So:Rd2oPvHc/S+m11dc/b7Pcc655

Score
6/10

Malware Config

Signatures

  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 13 IoCs

Files

  • CLIENT.apk
    .apk android

    cybershieldx.rainbow

    cybershieldx.rainbow.RainbowMainActivity


Android Permissions

CLIENT.apk

Permissions

android.permission.INTERNET

android.permission.READ_CONTACTS

android.permission.READ_EXTERNAL_STORAGE

android.permission.VIBRATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_SMS

android.permission.READ_CALL_LOG

android.permission.QUERY_ALL_PACKAGES

android.permission.CAMERA

android.permission.SEND_SMS

android.permission.RECORD_AUDIO

android.permission.READ_PHONE_STATE

android.permission.POST_NOTIFICATIONS

android.permission.READ_MEDIA_IMAGES

android.permission.READ_MEDIA_VIDEO

android.permission.READ_MEDIA_AUDIO

cybershieldx.rainbow.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION