General

  • Target

    Grammarly_2.68.48995_BY_TRON.apk

  • Size

    10.4MB

  • MD5

    2fb4ecb5e2684a9f05acf492b6623363

  • SHA1

    0d819697b7714db718fa8664a60503ddd9557034

  • SHA256

    a337f81ed483e9d7abdaa7cdb9342b46bfbb9e1478235ac337891c2f935d7ae3

  • SHA512

    6aee664bc36b53a071682eab34a922de1d1046e84b1d1b0dc715c860c0f97f2136602f02a253bb87504cf3ed53fb7ea6e15471d27b507a557c387bfc0015fa70

  • SSDEEP

    196608:Uv8RNi1e8uRdVBrdUvm69qGFnb0SNDdm/sAAZanEB2Dmf5Bek0X5mn5:/NisZvVBe9N9tRAhnEB2DcBeB5m5

Score
6/10

Malware Config

Signatures

  • Declares services with permission to bind to the system 3 IoCs
  • Requests dangerous framework permissions 5 IoCs

Files

  • Grammarly_2.68.48995_BY_TRON.apk
    .apk android arch:arm64 arch:arm arch:x86 arch:x64

    com.grammarly.android.keyboard

    com.grammarly.widget.launcher.LauncherActivity


Android Permissions

Grammarly_2.68.48995_BY_TRON.apk

Permissions

android.permission.POST_NOTIFICATIONS

android.permission.ACCESS_NETWORK_STATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.VIBRATE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.QUERY_ALL_PACKAGES

android.permission.INTERNET

android.permission.WAKE_LOCK

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

com.google.android.gms.permission.AD_ID

android.permission.ACCESS_ADSERVICES_ATTRIBUTION

android.permission.ACCESS_ADSERVICES_AD_ID

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

com.android.vending.BILLING

com.grammarly.android.keyboard.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

com.android.vending.CHECK_LICENSE

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MANAGE_EXTERNAL_STORAGE