Overview

overview

8

Static

static

8

Delta_Exec...04.apk

android-9-x86

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    Delta_Executor 2.644.704.apk

  • Size

    178.1MB

  • MD5

    a68de1084b3224b412f751d70bb9cb4b

  • SHA1

    3dd52846f62dfb92e71fff34ceeff2bf53689369

  • SHA256

    bbf70d0a0ac029a2887b96713baa0abdf1bf26f05e3b58d8db1b2a99cfb61ea0

  • SHA512

    d3dbc176bf0a93f39977bb1d7d54c8a605e04d01536e622f2d4ac5661a2452c4e3e959383883aeb14064e4ab71b0fab5009027163f4a4f8919c688c1bbbe4e80

  • SSDEEP

    3145728:q5W8mq3qmO/v1SfVA24ulPk9JqfRvzWwa8Ga81se82CsXArlZdr9stO7aJpsiVp:Zh/vM9Zls7qfRvzWKGV1u2TSdrCwOJao

Score
8/10
macromacro_on_action

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

    macromacro_on_action
  • Requests dangerous framework permissions 5 IoCs

Files

  • Delta_Executor 2.644.704.apk
    .apk android arch:arm64 arch:arm

    com.roblox.client

    com.roblox.client.startup.ActivitySplash


Android Permissions

Delta_Executor 2.644.704.apk

Permissions

android.permission.BLUETOOTH

android.permission.POST_NOTIFICATIONS

android.permission.VIBRATE

com.android.vending.BILLING

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.READ_CONTACTS

android.permission.FOREGROUND_SERVICE

android.permission.FOREGROUND_SERVICE_DATA_SYNC

android.permission.USE_FULL_SCREEN_INTENT

android.permission.DISABLE_KEYGUARD

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MANAGE_EXTERNAL_STORAGE

com.google.android.gms.permission.AD_ID

android.permission.READ_EXTERNAL_STORAGE

android.permission.ACCESS_ADSERVICES_ATTRIBUTION

com.huawei.appmarket.service.commondata.permission.GET_COMMON_DATA

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.WAKE_LOCK

com.google.android.c2dm.permission.RECEIVE

com.roblox.client.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION