trickmo.apk
- SHA256 a755cbfc1a25a54bc3d1d12d8a1d82f28b910b9cf870716529f32d5d02bc4c65
com.melt.elder
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
trickmo.apk
Resource
android-x86-arm-20240624-en
android-9-x86
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
trickmo.apk
Resource
android-x64-20240624-en
android-10-x64
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
trickmo.apk
Resource
android-x64-arm64-20240624-en
android-11-x64
3 signatures
150 seconds
Behavioral task
behavioral4
Sample
base.apk
Resource
android-x86-arm-20240624-en
android-9-x86
13 signatures
150 seconds
Behavioral task
behavioral5
Sample
base.apk
Resource
android-33-x64-arm64-20240624-en
android-13-x64
2 signatures
150 seconds
General
- Target trickmo.apk
- Size 11.0MB
- Sample241021-hapc7sshnb
- SHA256 a755cbfc1a25a54bc3d1d12d8a1d82f28b910b9cf870716529f32d5d02bc4c65
- MD5 c9e87f75a394e2c5e11288d2d611a931
- SHA1 2cd928ccfe3b8f72958b6068e81cebff01414370
- SHA512 88b29ec7cceba2deaf67e40510b6a999fb8ceebf9ef18ee65a3a6d9b06d7741417618a77cdaba6ea554b20a91f65e3751421c506ae2cfa8d3534ca99428d9ba0
- SSDEEP 196608:C3ljOQWaNYw1kBnsI0galDL25GzhSD9MbBHEbiq2CFMg9qAh:C1jOoY4kx0DL25GzCSBHEbirg99h
- MD5 SHA1 SHA512 SSDEEP
Score
6/10
Malware Config
Signatures
- Attempts to obfuscate APK file format
Applies obfuscation techniques to the APK format in order to hinder analysis
- Declares broadcast receivers with permission to handle system events 1 IoCs
description ioc Required by device admin receivers to bind with the system. Allows apps to manage device administration features. android.permission.BIND_DEVICE_ADMIN - Declares services with permission to bind to the system 4 IoCs
description ioc Required by accessibility services to bind with the system. Allows apps to access accessibility features. android.permission.BIND_ACCESSIBILITY_SERVICE Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device. android.permission.BIND_NOTIFICATION_LISTENER_SERVICE Required by input method services to bind with the system. Allows apps to provide custom input methods (keyboards). android.permission.BIND_INPUT_METHOD Required by VPN services to bind with the system. Allows apps to provision VPN services. android.permission.BIND_VPN_SERVICE - Requests dangerous framework permissions 1 IoCs
description ioc Allows an application to request installing packages. android.permission.REQUEST_INSTALL_PACKAGES
File Explorer
-
trickmo.apk.apk 11.0MB
-
base.apk.apk 7.2MB
base.apk
- SHA256 f1401e63b56fc8f013b5222139f8e2d663dfc03475d6f9cb5dd1c0a65466e598
- MD5 a8eacae2142d9ad431cc07a2eb41d618
- SHA1 e6dd5713bff00d0ceb4639f0a847044bd144f682
- SHA512 1c8b7a4aba40306b39e75a0bdf99eddf59ee9a42fd596bdecf7ac0ab70d5fc2ad130a1cc9dc234154eadbd51667b4947f83d7d15c7543d089f67427d8df17b0d
- SSDEEP 98304:bpo0fn7U0Jnem4AqI5zJG9fBZ2ZHKC1AMilltEXXZ6vrj7lTmpJ3xxtAlL2AMCHF:tfveCZiXaXpijlkJBxcBYGcKlyWTKU
- MD5 SHA1 SHA512 SSDEEP
cropim.an669.ga
cropim.an669.ga.k5Pn
android.permission.SEND_SMS
android.permission.KILL_BACKGROUND_PROCESSES
android.permission.ACCESS_WIFI_STATE
android.permission.CAMERA
android.permission.DISABLE_KEYGUARD
android.permission.QUERY_ALL_PACKAGES
android.permission.WRITE_CONTACTS
android.permission.ACCESS_NOTIFICATION_POLICY
android.permission.READ_PHONE_NUMBERS
android.permission.WAKE_LOCK
android.permission.READ_CALL_LOG
android.permission.USE_BIOMETRIC
android.permission.USE_FULL_SCREEN_INTENT
android.permission.SYSTEM_ALERT_WINDOW
android.permission.READ_PHONE_STATE
android.permission.PROCESS_OUTGOING_CALLS
com.sonymobile.home.permission.PROVIDER_INSERT_BADGE
android.permission.CALL_PHONE
android.permission.POST_NOTIFICATIONS
android.permission.USE_EXACT_ALARM
android.permission.FOREGROUND_SERVICE
android.permission.USE_FINGERPRINT
android.permission.ACCESS_BACKGROUND_LOCATION
android.permission.MANAGE_ACCOUNTS
com.anddoes.launcher.permission.UPDATE_COUNT
android.permission.EXPAND_STATUS_BAR
android.permission.REQUEST_DELETE_PACKAGES
android.permission.SCHEDULE_EXACT_ALARM
android.permission.ACCESS_MEDIA_LOCATION
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS
android.permission.ACCESS_NETWORK_STATE
android.permission.RECEIVE_SMS
android.permission.INTERNET
android.permission.WRITE_SECURE_SETTINGS
com.google.android.c2dm.permission.RECEIVE
android.permission.GET_ACCOUNTS
android.permission.RECEIVE_BOOT_COMPLETED
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
android.permission.REQUEST_INSTALL_PACKAGES
android.permission.QUERY_ALL_PACKAGES
android.permission.READ_SMS
com.sonyericsson.home.permission.BROADCAST_BADGE
android.permission.PACKAGE_USAGE_STATS
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.READ_CONTACTS
android.permission.WRITE_SETTINGS
android.permission.RECORD_AUDIO
android.permission.READ_PRECISE_PHONE_STATE
android.permission.READ_CALL_LOG
cropim.an669.ga.k5Pn
android.intent.action.MAIN
cropim.an669.ga.I7I6Dw_nF
android.intent.action.MAIN
cropim.an669.ga.UdaPNZKc
cropim.an669.ga.VSIN
cropim.an669.ga.f4pZ3KKmQeXpSg6pFa
cropim.an669.ga.An2
cropim.an669.ga.PgXUl
android.intent.action.SEND
android.intent.action.SENDTO
cropim.an669.ga.StubActivity
com.google.android.gms.common.api.GoogleApiActivity
cropim.an669.ga.OS
cropim.an669.ga.qF8xe0MKvHOEps
cropim.an669.ga.OWRDcYz26Z2kF
android.intent.action.RESPOND_VIA_MESSAGE
cropim.an669.ga.eCSwS7DnGIkADKzG54eS
android.accessibilityservice.AccessibilityService
cropim.an669.ga.KsyVqkarqQ
android.service.notification.NotificationListenerService
cropim.an669.ga.PushService
cropim.an669.ga.SoftKeyboardService
android.view.InputMethod
cropim.an669.ga.VpnService
android.net.VpnService
cropim.an669.ga.FirebaseMessagingService
com.google.firebase.MESSAGING_EVENT
androidx.work.impl.background.systemalarm.SystemAlarmService
androidx.work.impl.background.systemjob.SystemJobService
androidx.work.impl.foreground.SystemForegroundService
com.google.firebase.messaging.FirebaseMessagingService
com.google.firebase.MESSAGING_EVENT
com.google.firebase.components.ComponentDiscoveryService
androidx.room.MultiInstanceInvalidationService
com.google.android.datatransport.runtime.backends.TransportBackendDiscovery
com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService
cropim.an669.ga.Y7DEv4K0Jaa
android.provider.Telephony.SMS_RECEIVED
android.intent.action.USER_PRESENT
android.intent.action.BOOT_COMPLETED
android.intent.action.PHONE_STATE
android.intent.action.NEW_OUTGOING_CALL
android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED
android.net.conn.CONNECTIVITY_CHANGE
android.provider.action.DEFAULT_SMS_PACKAGE_CHANGED
android.intent.action.PACKAGE_ADDED
cropim.an669.ga.TXTg
android.provider.Telephony.SMS_DELIVER
cropim.an669.ga.gfIabyviYj9zTK5RF
android.provider.Telephony.WAP_PUSH_DELIVER
cropim.an669.ga.DeviceAdminReceiver
android.app.action.DEVICE_ADMIN_ENABLED
android.app.action.PROFILE_PROVISIONING_COMPLETE
android.app.action.PROFILE_OWNER_CHANGED
android.app.action.DEVICE_OWNER_CHANGED
androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver
androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy
android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED
androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy
android.intent.action.BATTERY_OKAY
android.intent.action.BATTERY_LOW
androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy
android.intent.action.DEVICE_STORAGE_LOW
android.intent.action.DEVICE_STORAGE_OK
androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy
android.net.conn.CONNECTIVITY_CHANGE
androidx.work.impl.background.systemalarm.RescheduleReceiver
android.intent.action.BOOT_COMPLETED
android.intent.action.TIME_SET
android.intent.action.TIMEZONE_CHANGED
androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver
androidx.work.impl.background.systemalarm.UpdateProxies
androidx.work.impl.diagnostics.DiagnosticsReceiver
androidx.work.diagnostics.REQUEST_DIAGNOSTICS
com.google.firebase.iid.FirebaseInstanceIdReceiver
com.google.android.c2dm.intent.RECEIVE
com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver
androidx.startup.InitializationProvider
com.google.firebase.provider.FirebaseInitProvider
Android Permissions
trickmo.apk
Permissions
android.permission.REQUEST_INSTALL_PACKAGES