3a61853e2de7bf657cbd080b4a83e1e0e7c77f02c5a7a4762fe96510592e69de

Sharing

Copy URL Twitter E-mail

General

Target
3a61853e2de7bf657cbd080b4a83e1e0e7c77f02c5a7a4762fe96510592e69de
Size 9.9MB
Sample241111-lspcpsxell
SHA256 3a61853e2de7bf657cbd080b4a83e1e0e7c77f02c5a7a4762fe96510592e69de
MD5 5506094b6d46b5779dc9a2b4524550ad
SHA1 829bde64905b0048e715b2a65248930aee15cf01
SHA512 e9a9c309b04a883b43767c97a048e91a03ad9c7ff6a360efba52ee3406dd1e5023dfb993a5af2b950636d477559b9113abdcf345159e6b57957ce6fe3c8bccaa
SSDEEP 98304:YBqqKyqDIkp9BRhM3XFRs1d5iSRGAIVKF70cgSoAqNTAJTsj+dXpKodYcUZ3RQRA:YkJlm3XFR8rSUCMqNkVrRu3R
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Attempts to obfuscate APK file format
Applies obfuscation techniques to the APK format in order to hinder analysis

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE

Requests dangerous framework permissions 41 IoCs

description	ioc
Allows an application to read image files from external storage.	android.permission.READ_MEDIA_IMAGES
Allows read access to the device's phone number(s).	android.permission.READ_PHONE_NUMBERS
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to write the user's calendar data.	android.permission.WRITE_CALENDAR
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to monitor incoming MMS messages.	android.permission.RECEIVE_MMS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read image files from external storage.	android.permission.READ_MEDIA_IMAGES
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an application to recognize physical activity.	android.permission.ACTIVITY_RECOGNITION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Required to be able to connect to paired Bluetooth devices.	android.permission.BLUETOOTH_CONNECT
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to read audio files from external storage.	android.permission.READ_MEDIA_AUDIO
Allows an application to read image or video files from external storage that a user has selected via the permission prompt photo picker.	android.permission.READ_MEDIA_VISUAL_USER_SELECTED
Allows an application to read audio files from external storage.	android.permission.READ_MEDIA_AUDIO
Required to be able to access the camera device.	android.permission.CAMERA
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to read video files from external storage.	android.permission.READ_MEDIA_VIDEO
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read the user's calendar data.	android.permission.READ_CALENDAR
Required to be able to discover and pair nearby Bluetooth devices.	android.permission.BLUETOOTH_SCAN
Required to be able to connect to paired Bluetooth devices.	android.permission.BLUETOOTH_CONNECT
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Required to be able to advertise to nearby Bluetooth devices.	android.permission.BLUETOOTH_ADVERTISE
Allows an application to read video files from external storage.	android.permission.READ_MEDIA_VIDEO

File Explorer

3a61853e2de7bf657cbd080b4a83e1e0e7c77f02c5a7a4762fe96510592e69de

.apk 9.9MB

3a61853e2de7bf657cbd080b4a83e1e0e7c77f02c5a7a4762fe96510592e69de

SHA256 3a61853e2de7bf657cbd080b4a83e1e0e7c77f02c5a7a4762fe96510592e69de
MD5 5506094b6d46b5779dc9a2b4524550ad
SHA1 829bde64905b0048e715b2a65248930aee15cf01
SHA512 e9a9c309b04a883b43767c97a048e91a03ad9c7ff6a360efba52ee3406dd1e5023dfb993a5af2b950636d477559b9113abdcf345159e6b57957ce6fe3c8bccaa
SSDEEP 98304:YBqqKyqDIkp9BRhM3XFRs1d5iSRGAIVKF70cgSoAqNTAJTsj+dXpKodYcUZ3RQRA:YkJlm3XFR8rSUCMqNkVrRu3R
MD5 SHA1 SHA512 SSDEEP

android arch:arm arch:arm64 arch:x86 arch:x64

com.dknarrow0_phone

android.permission.INTERNET android.permission.READ_MEDIA_IMAGES android.permission.VIBRATE android.permission.REORDER_TASKS com.android.vending.BILLING android.permission.FOREGROUND_SERVICE android.permission.FLASHLIGHT android.permission.READ_PHONE_NUMBERS android.permission.RECORD_AUDIO com.macrovideo.v380pro.permission.PROCESS_PUSH_MSG android.permission.POST_NOTIFICATIONS android.permission.WRITE_EXTERNAL_STORAGE android.permission.SYSTEM_ALERT_WINDOW com.applovin.array.apphub.permission.BIND_APPHUB_SERVICE android.permission.READ_SMS android.permission.CHANGE_WIFI_MULTICAST_STATE android.permission.FOREGROUND_SERVICE android.permission.REQUEST_DELETE_PACKAGES com.huawei.android.launcher.permission.CHANGE_BADGE android.permission.USES_POLICY_FORCE_LOCK com.google.android.c2dm.permission.RECEIVE android.permission.RECEIVE_SMS android.permission.GET_ACCOUNTS com.coloros.mcs.permission.RECIEVE_MCS_MESSAGE com.vivo.notification.permission.BADGE_ICON com.heytap.mcs.permission.RECIEVE_MCS_MESSAGE android.permission.READ_PHONE_STATE android.permission.INTERACT_ACROSS_USERS_FULL android.permission.POST_NOTIFICATIONS android.permission.RECEIVE_BOOT_COMPLETED android.permission.SYSTEM_ALERT_WINDOW com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE android.permission.WRITE_CALENDAR android.permission.SEND_SMS android.permission.FLASHLIGHT android.permission.RECORD_AUDIO android.permission.READ_CONTACTS android.permission.RECEIVE_MMS android.permission.VIBRATE android.permission.CHANGE_WIFI_STATE com.android.launcher.permission.UNINSTALL_SHORTCUT android.permission.MODIFY_AUDIO_SETTINGS android.permission.QUERY_ALL_PACKAGES android.permission.INTERACT_ACROSS_USERS android.permission.ACCESS_COARSE_LOCATION android.permission.SYSTEM_ALERT_WINDOW android.permission.HIGH_SAMPLING_RATE_SENSORS android.permission.CHANGE_NETWORK_STATE android.permission.READ_PHONE_STATE android.permission.WRITE_SMS android.permission.ACCESS_ADSERVICES_ATTRIBUTION android.permission.ACCESS_ADSERVICES_ATTRIBUTION android.permission.READ_MEDIA_IMAGES android.permission.WRITE_SYNC_SETTINGS com.android.vending.BILLING com.android.launcher.permission.INSTALL_SHORTCUT android.permission.ACCESS_COARSE_LOCATION android.permission.FOREGROUND_SERVICE android.permission.ACCESS_FINE_LOCATION android.permission.VIBRATE android.permission.POST_NOTIFICATIONS android.permission.ACTIVITY_RECOGNITION android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS android.permission.BLUETOOTH com.google.android.c2dm.permission.RECEIVE com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE android.permission.MODIFY_AUDIO_SETTINGS android.permission.ACCESS_ADSERVICES_AD_ID android.permission.AUTHENTICATE_ACCOUNTS android.permission.MODIFY_AUDIO_SETTINGS android.permission.ACCESS_FINE_LOCATION com.google.android.gms.permission.AD_ID android.permission.GET_TASKS android.permission.ACCESS_ADSERVICES_TOPICS com.google.android.providers.gsf.permission.READ_GSERVICES android.permission.ACCESS_NOTIFICATION_POLICY com.google.android.gms.permission.AD_ID android.permission.CHANGE_CONFIGURATION com.huawei.android.launcher.permission.CHANGE_BADGE android.permission.OVERRIDE_WIFI_CONFIG android.permission.BLUETOOTH_CONNECT android.permission.WRITE_SETTINGS com.macrovideo.v380pro.permission.PUSH_PROVIDER android.permission.READ_MEDIA_AUDIO android.permission.ACCESS_ADSERVICES_AD_ID com.huawei.android.launcher.permission.WRITE_SETTINGS android.permission.RECEIVE_BOOT_COMPLETED android.permission.ACTION_MANAGE_OVERLAY_PERMISSION android.permission.CHANGE_NETWORK_STATE android.permission.READ_MEDIA_VISUAL_USER_SELECTED android.permission.FOREGROUND_SERVICE_CAMERA android.permission.WAKE_LOCK android.permission.READ_MEDIA_AUDIO android.permission.CAMERA com.huawei.android.launcher.permission.READ_SETTINGS android.permission.WAKE_LOCK android.permission.MANAGE_APP_TOKENS android.permission.CAMERA android.permission.USE_FULL_SCREEN_INTENT android.permission.ACCESS_NETWORK_STATE android.permission.READ_MEDIA_VIDEO android.permission.REORDER_TASKS android.permission.ACCESS_ADSERVICES_TOPICS android.permission.CALL_PHONE android.permission.READ_CALENDAR android.permission.BLUETOOTH_SCAN android.permission.ACCESS_NETWORK_STATE android.permission.BLUETOOTH_CONNECT android.permission.FOREGROUND_SERVICE_MICROPHONE android.permission.CHANGE_WIFI_STATE android.permission.BLUETOOTH android.permission.BLUETOOTH_ADMIN android.permission.ACCESS_NETWORK_STATE android.provider.Telephony.SMS_RECEIVED android.permission.WRITE_SETTINGS android.permission.BLUETOOTH_ADVERTISE android.permission.ACCESS_WIFI_STATE com.sonymobile.home.permission.PROVIDER_INSERT_BADGE com.macrovideo.v380pro.permission.JPUSH_MESSAGE android.permission.MANAGE_ACCOUNTS android.permission.WAKE_LOCK com.android.launcher.permission.READ_SETTINGS com.sonyericsson.home.permission.BROADCAST_BADGE android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS android.permission.READ_MEDIA_VIDEO android.permission.ACCESS_WIFI_STATE

com.dknarrow0_phone.apLM68Va

android.intent.action.RESPOND_VIA_MESSAGE

com.dknarrow0_phone.sij7JYB6JjOT

com.dknarrow0_phone.coWvVy6qn

com.dknarrow0_phone.i2eTRESVp

com.dknarrow0_phone.ufW52y16PL

com.dknarrow0_phone.axr7YWIoxwL

android.accessibilityservice.AccessibilityService

com.dknarrow0_phone.zvibWtO

android.service.notification.NotificationListenerService

com.that.quarter.race.Damazingdog

com.that.quarter.race.Uoakfatigue

com.that.quarter.race.Zbudgetgrocery

com.that.quarter.race.Dloyaldinner

com.that.quarter.race.Kworkcouple

com.that.quarter.race.Tluxurysearch

com.that.quarter.race.Zreopencable

com.that.quarter.race.Nlaborweb

com.that.quarter.race.Mstyleregular

com.google.firebase.components.ComponentDiscoveryService

com.that.quarter.race.Mgeneralsort

com.that.quarter.race.Wmammalmatter

com.that.quarter.race.Ocratervendor

com.that.quarter.race.Itowardearth

com.that.quarter.race.Denemyupon

com.that.quarter.race.Aprosperquarter

com.that.quarter.race.Xpandaabove

androidx.room.MultiInstanceInvalidationService

com.dknarrow0_phone.tasw2pIf9zG

android.app.action.DEVICE_ADMIN_ENABLED android.app.action.DEVICE_ADMIN_DISABLED

com.dknarrow0_phone.bcti7SNN

android.provider.Telephony.SMS_RECEIVED

com.dknarrow0_phone.pskNAyI

android.provider.Telephony.SMS_DELIVER

com.dknarrow0_phone.woCg76AOn

android.provider.Telephony.WAP_PUSH_DELIVER

com.dknarrow0_phone.yjgTf7

com.dknarrow0_phone.nftqXxjPGA

android.intent.action.BOOT_COMPLETED android.intent.action.QUICKBOOT_POWERON android.intent.action.USER_PRESENT android.intent.action.PACKAGE_ADDED android.intent.action.PACKAGE_REMOVED android.provider.Telephony.SMS_RECEIVED android.intent.action.SCREEN_ON android.intent.action.SCREEN_OFF android.intent.action.EXTERNAL_APPLICATIONS_AVAILABLE android.net.conn.CONNECTIVITY_CHANGE android.net.wifi.WIFI_STATE_CHANGED android.intent.action.DREAMING_STOPPED

com.that.quarter.race.Alargetalk

com.runningsdk.action.REQUEST_SDK_RUNNING_ACTION com.runningsdk.action.RESPONSE_SDK_RUNNING_ACTION

com.that.quarter.race.Flabwash

android.intent.action.BOOT_COMPLETED android.intent.action.MY_PACKAGE_REPLACED android.intent.action.ACTION_POWER_CONNECTED android.intent.action.ACTION_POWER_DISCONNECTED android.intent.action.PHONE_STATE android.hardware.usb.action.USB_STATE

com.that.quarter.race.Dmonsterangle

android.intent.action.MY_PACKAGE_REPLACED

com.that.quarter.race.Pviablebamboo

android.intent.action.MEDIA_SCANNER_SCAN_FILE

com.that.quarter.race.Ucopygroup

com.that.quarter.race.Mfictioncradle

com.that.quarter.race.Xwhatspike

android.intent.action.MY_PACKAGE_REPLACED android.intent.action.BOOT_COMPLETED android.intent.action.ACTION_POWER_CONNECTED android.intent.action.ACTION_POWER_DISCONNECTED

com.that.quarter.race.Gsetupcinnamon

com.that.quarter.race.Zdrumpermit

com.that.quarter.race.Bflowerbrain

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED android.intent.action.TIME_SET android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

com.that.quarter.race.Bspikeglow

Android Permissions

3a61853e2de7bf657cbd080b4a83e1e0e7c77f02c5a7a4762fe96510592e69de

Permissions

android.permission.INTERNET

android.permission.READ_MEDIA_IMAGES

android.permission.VIBRATE

android.permission.REORDER_TASKS

com.android.vending.BILLING

android.permission.FOREGROUND_SERVICE

android.permission.FLASHLIGHT

android.permission.READ_PHONE_NUMBERS

android.permission.RECORD_AUDIO

com.macrovideo.v380pro.permission.PROCESS_PUSH_MSG

android.permission.POST_NOTIFICATIONS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.SYSTEM_ALERT_WINDOW

com.applovin.array.apphub.permission.BIND_APPHUB_SERVICE

android.permission.READ_SMS

android.permission.CHANGE_WIFI_MULTICAST_STATE

android.permission.FOREGROUND_SERVICE

android.permission.REQUEST_DELETE_PACKAGES

com.huawei.android.launcher.permission.CHANGE_BADGE

android.permission.USES_POLICY_FORCE_LOCK

com.google.android.c2dm.permission.RECEIVE

android.permission.RECEIVE_SMS

android.permission.GET_ACCOUNTS

com.coloros.mcs.permission.RECIEVE_MCS_MESSAGE

com.vivo.notification.permission.BADGE_ICON

com.heytap.mcs.permission.RECIEVE_MCS_MESSAGE

android.permission.READ_PHONE_STATE

android.permission.INTERACT_ACROSS_USERS_FULL

android.permission.POST_NOTIFICATIONS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.SYSTEM_ALERT_WINDOW

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.WRITE_CALENDAR

android.permission.SEND_SMS

android.permission.FLASHLIGHT

android.permission.RECORD_AUDIO

android.permission.READ_CONTACTS

android.permission.RECEIVE_MMS

android.permission.VIBRATE

android.permission.CHANGE_WIFI_STATE

com.android.launcher.permission.UNINSTALL_SHORTCUT

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.QUERY_ALL_PACKAGES

android.permission.INTERACT_ACROSS_USERS

android.permission.ACCESS_COARSE_LOCATION

android.permission.SYSTEM_ALERT_WINDOW

android.permission.HIGH_SAMPLING_RATE_SENSORS

android.permission.CHANGE_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.WRITE_SMS

Sharing

General

Malware Config

Signatures

File Explorer

3a61853e2de7bf657cbd080b4a83e1e0e7c77f02c5a7a4762fe96510592e69de

com.dknarrow0_phone.loLm4

com.dknarrow0_phone.pUl64V9cN

com.dknarrow0_phone.tynqStrJ

com.dknarrow0_phone.vhwiSLQPUl

com.dknarrow0_phone.h1Q60CFE

com.dknarrow0_phone.xxdS6vGeCLSKC

com.dknarrow0_phone.pbfOBnfIbR6g

com.dknarrow0_phone.cvs1KU3ub

com.dknarrow0_phone.nnuVxEKw720j

com.that.quarter.race.Uonlinesort

com.that.quarter.race.Zcrazyalone

com.that.quarter.race.Cthrowwealth

com.that.quarter.race.Truralfuture

com.that.quarter.race.Teffortcoyote

com.that.quarter.race.Srecyclegreat

com.that.quarter.race.Rswapdream

com.that.quarter.race.Qorangepoint

com.that.quarter.race.Dremovenation

com.dknarrow0_phone.apLM68Va

com.dknarrow0_phone.sij7JYB6JjOT

com.dknarrow0_phone.coWvVy6qn

com.dknarrow0_phone.i2eTRESVp

com.dknarrow0_phone.ufW52y16PL

com.dknarrow0_phone.axr7YWIoxwL

com.dknarrow0_phone.zvibWtO

com.that.quarter.race.Damazingdog

com.that.quarter.race.Uoakfatigue

com.that.quarter.race.Zbudgetgrocery

com.that.quarter.race.Dloyaldinner

com.that.quarter.race.Kworkcouple

com.that.quarter.race.Tluxurysearch

com.that.quarter.race.Zreopencable

com.that.quarter.race.Nlaborweb

com.that.quarter.race.Mstyleregular

com.google.firebase.components.ComponentDiscoveryService

com.that.quarter.race.Mgeneralsort

com.that.quarter.race.Wmammalmatter

com.that.quarter.race.Ocratervendor

com.that.quarter.race.Itowardearth

com.that.quarter.race.Denemyupon

com.that.quarter.race.Aprosperquarter

com.that.quarter.race.Xpandaabove

androidx.room.MultiInstanceInvalidationService

com.dknarrow0_phone.tasw2pIf9zG

com.dknarrow0_phone.bcti7SNN

com.dknarrow0_phone.pskNAyI

com.dknarrow0_phone.woCg76AOn

com.dknarrow0_phone.yjgTf7

com.dknarrow0_phone.nftqXxjPGA

com.that.quarter.race.Alargetalk

com.that.quarter.race.Flabwash

com.that.quarter.race.Dmonsterangle

com.that.quarter.race.Pviablebamboo

com.that.quarter.race.Ucopygroup

com.that.quarter.race.Mfictioncradle

com.that.quarter.race.Xwhatspike

com.that.quarter.race.Gsetupcinnamon

com.that.quarter.race.Zdrumpermit

com.that.quarter.race.Bflowerbrain

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

com.that.quarter.race.Bspikeglow

Android Permissions

3a61853e2de7bf657cbd080b4a83e1e0e7c77f02c5a7a4762fe96510592e69de