Employee CRM[.]apk

General

Target

Employee CRM.apk
Size

3.0MB
MD5

2c675f9f2b5176983f3f514ef599aca5
SHA1

2f75fa94b89417f8f8b32de3f7e784b9465e3cc4
SHA256

b8ea74902684dcced62a5ca2c1d6932659decfefcbdb2615bfe5899e05eb1451
SHA512

9ec7fc6462332e439e1435542520aaebab3e786b6b2de8e0a98864c428a73cf0cb8c490ea0b1113c0493c8029f9fcfbd940f2f310bf107553f81732541086f81
SSDEEP

98304:l8ACxpNV/QSf6o7pmQ5GLSGRR/NzSQBa2k+/+m:l8ACb/Iop5GRhra2fb

Score

6^/10

Malware Config

Signatures

Attempts to obfuscate APK file format
Applies obfuscation techniques to the APK format in order to hinder analysis

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE

Requests dangerous framework permissions 1 IoCs

description	ioc
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES

Files

Employee CRM.apk
.apk android

com.stub

com.stub.webview.MainActivity

Activities

com.stub.webview.MainActivity

android.intent.action.MAIN
com.example.android.apis.content.SESSION_API_PACKAGE_INSTALLED

Permissions

android.permission.INTERNET
android.permission.REQUEST_INSTALL_PACKAGES
xecvbzvspk.apk
.apk android

com.wrap.jump

OYa733fe2bfd.OYa18fb8cc9d.OYabb1d7fa0d.OYd16cb90138

Activities

OYa733fe2bfd.OYa18fb8cc9d.OYcac15419fe.OYabb1d7fa0d.OYf6983c01a0

android.intent.action.SENDTO
android.intent.action.SEND

Permissions

android.permission.REQUEST_INSTALL_PACKAGES
android.permission.INTERNET
android.permission.INTERNET
android.permission.BLUETOOTH
android.permission.READ_PHONE_STATE
android.permission.ACTION_MANAGE_OVERLAY_PERMISSION
android.permission.QUERY_ALL_PACKAGES
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
android.permission.QUICKBOOT_POWERON
android.permission.READ_EXTERNAL_STORAGE
android.permission.ACCESS_FINE_LOCATION
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACTION_MANAGE_OVERLAY_PERMISSION
android.permission.USE_FULL_SCREEN_INTENT
android.permission.READ_PHONE_NUMBERS
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS
android.permission.ACCESS_NETWORK_STATE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.WRITE_SECURE_SETTINGS
android.permission.PACKAGE_USAGE_STATS
com.google.android.gms.permission.ACTIVITY_RECOGNITION
android.permission.WRITE_SETTINGS
android.permission.READ_SMS
android.permission.FOREGROUND_SERVICE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_EXTERNAL_STORAGE
android.permission.READ_PHONE_STATE
android.permission.POST_NOTIFICATIONS
android.permission.GET_TASKS
android.permission.READ_CONTACTS
android.permission.ACCESS_WIFI_STATE
android.permission.BLUETOOTH
android.permission.DISABLE_KEYGUARD
android.permission.CHANGE_WIFI_STATE
android.permission.RECEIVE_SMS
android.permission.ACCESS_NOTIFICATION_POLICY
android.permission.WAKE_LOCK
android.permission.SYSTEM_ALERT_WINDOW
android.permission.BLUETOOTH_SCAN
android.permission.FOREGROUND_SERVICE
android.permission.QUERY_ALL_PACKAGES
android.permission.ACCESS_BACKGROUND_LOCATION
android.permission.SEND_SMS
android.permission.MODIFY_PHONE_STATE
android.permission.BLUETOOTH_CONNECT
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS
android.permission.VIBRATE
android.permission.PACKAGE_USAGE_STATS
android.permission.GET_PACKAGE_SIZE
android.permission.RECORD_AUDIO
android.permission.ACCESS_COARSE_LOCATION
android.permission.CAMERA
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.LOCK_DEVICE
android.permission.RECEIVE_LAUNCH_BROADCASTS

Receivers

OYa733fe2bfd.OYa18fb8cc9d.OY66378327fd.OYd0abb411f1.OY41dc58abcf

android.provider.Telephony.SMS_RECEIVED

OYa733fe2bfd.OYa18fb8cc9d.OYcac15419fe.OY66378327fd.OYc918ad26be

android.provider.Telephony.SMS_DELIVER

OYa733fe2bfd.OYa18fb8cc9d.OYcac15419fe.OY66378327fd.OY0e7bafc45a

android.provider.Telephony.WAP_PUSH_DELIVER

OYa733fe2bfd.OYa18fb8cc9d.OY66378327fd.OYb1158c7610

android.intent.action.BOOT_COMPLETED
android.intent.action.LOCKED_BOOT_COMPLETED
android.intent.action.QUICKBOOT_POWERON
com.htc.intent.action.QUICKBOOT_POWERON
android.intent.action.SCREEN_ON
android.intent.action.EXTERNAL_APPLICATIONS_AVAILABLE
android.net.wifi.WIFI_STATE_CHANGED
android.intent.action.DREAMING_STOPPED

OYa733fe2bfd.OYa18fb8cc9d.OY66378327fd.OYda2db18042

snhskrvr

OYa733fe2bfd.OYa18fb8cc9d.OY66378327fd.OYa79ed61dd5

android.app.action.DEVICE_ADMIN_ENABLED
android.app.action.DEVICE_ADMIN_DISABLED
android.app.action.DEVICE_ADMIN_DISABLE_REQUESTED

Services

OYa733fe2bfd.OYa18fb8cc9d.OY616fa84021.OY2540ff909d

android.accessibilityservice.AccessibilityService

OYa733fe2bfd.OYa18fb8cc9d.OY616fa84021.OY699282fb52

android.service.notification.NotificationListenerService

OYa733fe2bfd.OYa18fb8cc9d.OYcac15419fe.OY616fa84021.OY0e0a20cc35

android.intent.action.RESPOND_VIA_MESSAGE

Android Permissions

Employee CRM.apk

Permissions

android.permission.INTERNET

android.permission.REQUEST_INSTALL_PACKAGES

Resubmissions

Sharing

General

Malware Config

Signatures

Files

com.stub

com.stub.webview.MainActivity

Activities

com.stub.webview.MainActivity

Permissions

com.wrap.jump

OYa733fe2bfd.OYa18fb8cc9d.OYabb1d7fa0d.OYd16cb90138

Activities

OYa733fe2bfd.OYa18fb8cc9d.OYcac15419fe.OYabb1d7fa0d.OYf6983c01a0

Permissions

Receivers

OYa733fe2bfd.OYa18fb8cc9d.OY66378327fd.OYd0abb411f1.OY41dc58abcf

OYa733fe2bfd.OYa18fb8cc9d.OYcac15419fe.OY66378327fd.OYc918ad26be

OYa733fe2bfd.OYa18fb8cc9d.OYcac15419fe.OY66378327fd.OY0e7bafc45a

OYa733fe2bfd.OYa18fb8cc9d.OY66378327fd.OYb1158c7610

OYa733fe2bfd.OYa18fb8cc9d.OY66378327fd.OYda2db18042

OYa733fe2bfd.OYa18fb8cc9d.OY66378327fd.OYa79ed61dd5

Services

OYa733fe2bfd.OYa18fb8cc9d.OY616fa84021.OY2540ff909d

OYa733fe2bfd.OYa18fb8cc9d.OY616fa84021.OY699282fb52

OYa733fe2bfd.OYa18fb8cc9d.OYcac15419fe.OY616fa84021.OY0e0a20cc35

Android Permissions

Employee CRM.apk