General

  • Target

    Unionparivar.apk

  • Size

    2.6MB

  • MD5

    24d57695c782a62c7e239e127cd99f61

  • SHA1

    16c34e1b57909de813366a26872deb222d3d4e42

  • SHA256

    75cd1cc265f7a216e78c02058652f052f112a089c19b3ae3be1825f85ba10761

  • SHA512

    c39571fbaf2b718ee7e0ca89a251b370b9206ba1ab3eeefacb191ca6fab07199e0fcc7800fa44c1fb15fb076f0130d76cb04550faec26ebedf68e47a06242bf3

  • SSDEEP

    49152:/ylz9UWm7fJ5FFdsAWrhApFFGbh4iezs7TOZOUBuppzXnNXfGCCDo0Tfs99EjZdZ:wu57fJ5FF7WroQhxev1ubplCM0Tfs7EB

Score
10/10

Malware Config

Signatures

  • Antidot family
  • Antidot payload 1 IoCs
  • Requests dangerous framework permissions 2 IoCs

Files

  • Unionparivar.apk
    .apk android

    com.ubi.parivar

    com.ubi.parivar.MainActivity


  • stub-release.apk
    .apk android

    com.topjohnwu.magisk

    x.COMPONENT_PLACEHOLDER_2


Android Permissions

Unionparivar.apk

Permissions

android.permission.INTERNET

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.USE_BIOMETRIC

android.permission.USE_FINGERPRINT

android.permission.WAKE_LOCK

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

com.google.android.providers.gsf.permission.READ_GSERVICES