Target
Vega.X.apk
Size
144.5MB
MD5
975ff7e91c2a1d1b5e4fb19e8c8b9084
SHA1
0f49e28cb4e58ec2e13723b90b5de6918fe9a5ae
SHA256
084e3731f445c41ba1f9dcad6ecf94994dcc25ae6c95c0c28be2e2d18f44cf59
SHA512
0bb5cb25a90f520d993ffd6f1cfe6e73fc01622ff463f4470c0a6ceaba1b83ae4f64636d661bcee3ff15717caf67343efb13633e2673986747b427093cf912ae
SSDEEP
3145728:t7qqqW8mq3qmO/v1SfFWa8Ga81se82CsXArlZdr9stO7aJpsiVk:t7qqrh/vSgGV1u2TSdrCwOJa9
Office document macro which triggers in special circumstances - often malicious.
| resource | yara_rule |
|---|---|
| sample | office_macro_on_action |
| description | ioc |
|---|---|
| Allows an app to post notifications. | android.permission.POST_NOTIFICATIONS |
| Allows an application to read the user's contacts data. | android.permission.READ_CONTACTS |
| Allows an application to write to external storage. | android.permission.WRITE_EXTERNAL_STORAGE |
| Allows an application to write to external storage. | android.permission.WRITE_EXTERNAL_STORAGE |
| Allows an application a broad access to external storage in scoped storage. | android.permission.MANAGE_EXTERNAL_STORAGE |
| Allows an application to read from external storage. | android.permission.READ_EXTERNAL_STORAGE |
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.MAIN
android.permission.BLUETOOTH
android.permission.POST_NOTIFICATIONS
android.permission.VIBRATE
com.android.vending.BILLING
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.READ_CONTACTS
android.permission.FOREGROUND_SERVICE
android.permission.FOREGROUND_SERVICE_DATA_SYNC
android.permission.USE_FULL_SCREEN_INTENT
android.permission.DISABLE_KEYGUARD
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.MANAGE_EXTERNAL_STORAGE
com.google.android.gms.permission.AD_ID
android.permission.READ_EXTERNAL_STORAGE
android.permission.ACCESS_ADSERVICES_ATTRIBUTION
com.huawei.appmarket.service.commondata.permission.GET_COMMON_DATA
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
android.permission.WAKE_LOCK
com.google.android.c2dm.permission.RECEIVE
com.roblox.client.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
com.google.android.gms.auth.api.phone.SMS_RETRIEVED
android.intent.action.MY_PACKAGE_REPLACED
com.android.vending.INSTALL_REFERRER
com.google.android.c2dm.intent.RECEIVE
com.google.firebase.MESSAGING_EVENT
com.google.firebase.MESSAGING_EVENT
android.permission.BLUETOOTH
android.permission.POST_NOTIFICATIONS
android.permission.VIBRATE
com.android.vending.BILLING
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.READ_CONTACTS
android.permission.FOREGROUND_SERVICE
android.permission.FOREGROUND_SERVICE_DATA_SYNC
android.permission.USE_FULL_SCREEN_INTENT
android.permission.DISABLE_KEYGUARD
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.MANAGE_EXTERNAL_STORAGE
com.google.android.gms.permission.AD_ID
android.permission.READ_EXTERNAL_STORAGE
android.permission.ACCESS_ADSERVICES_ATTRIBUTION
com.huawei.appmarket.service.commondata.permission.GET_COMMON_DATA
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
android.permission.WAKE_LOCK
com.google.android.c2dm.permission.RECEIVE
com.roblox.client.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION