11d926b4e7068914d27200e1aebcbc5e255088ae588a50a1f8f0520771bb6b15

General

Target

11d926b4e7068914d27200e1aebcbc5e255088ae588a50a1f8f0520771bb6b15
Size

4.5MB
MD5

4295dfdd9d9fad74ee08d48d13e2b856
SHA1

526d4db2c11f33d24ca4ec727ac119c677e46b52
SHA256

11d926b4e7068914d27200e1aebcbc5e255088ae588a50a1f8f0520771bb6b15
SHA512

07b80e9e1db7f811fb2c97dc1b1df9cceb8c3f752ad1d39f4aaa41df01123170b5deacb28902c3ebfa66804ab8782dd8a3ce8e8ab129c4d907deced43698581e
SSDEEP

98304:cjQ2sNAKHdW7C7LMD4747C56myn92vuXCNBPZqnAejSyB4Lb20B:cjj7C7LH74+56hn9FyNgSyr0B

Score

6^/10

Malware Config

Signatures

Attempts to obfuscate APK file format
Applies obfuscation techniques to the APK format in order to hinder analysis

Declares broadcast receivers with permission to handle system events 1 IoCs

Processes:

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 1 IoCs

Processes:

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE

Requests dangerous framework permissions 46 IoCs

Processes:

description	ioc
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Required to be able to connect to paired Bluetooth devices.	android.permission.BLUETOOTH_CONNECT
Required to be able to access the camera device.	android.permission.CAMERA
Required to be able to access the camera device.	android.permission.CAMERA
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to read image files from external storage.	android.permission.READ_MEDIA_IMAGES
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an app to turn on the screen on, e.g. with PowerManager.ACQUIRE_CAUSES_WAKEUP.	android.permission.TURN_SCREEN_ON
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application a broad access to external storage in scoped storage.	android.permission.MANAGE_EXTERNAL_STORAGE
Allows an application to read image files from external storage.	android.permission.READ_MEDIA_IMAGES
Allows an application to read video files from external storage.	android.permission.READ_MEDIA_VIDEO
Allows an application to read audio files from external storage.	android.permission.READ_MEDIA_AUDIO
Required to be able to connect to paired Bluetooth devices.	android.permission.BLUETOOTH_CONNECT
Allows an application to read audio files from external storage.	android.permission.READ_MEDIA_AUDIO
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read video files from external storage.	android.permission.READ_MEDIA_VIDEO
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to read video files from external storage.	android.permission.READ_MEDIA_VIDEO
Allows an application to read image files from external storage.	android.permission.READ_MEDIA_IMAGES
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows applications to use exact alarm APIs.	android.permission.SCHEDULE_EXACT_ALARM
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to recognize physical activity.	android.permission.ACTIVITY_RECOGNITION
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to read audio files from external storage.	android.permission.READ_MEDIA_AUDIO
Allows an application to read image or video files from external storage that a user has selected via the permission prompt photo picker.	android.permission.READ_MEDIA_VISUAL_USER_SELECTED
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS

Files

11d926b4e7068914d27200e1aebcbc5e255088ae588a50a1f8f0520771bb6b15
.apk android

Password: infected

com.example.mysoul

com.example.mysoul.SaxyxokytPexapnfanGwdh

Activities

com.example.mysoul.SaxyxokytPexapnfanGwdh

android.intent.action.MAIN
android.intent.action.VIEW
android.intent.action.SEND
android.intent.action.SENDTO

com.example.mysoul.WgahpbydTfukr

xyz

com.neutral.defy.dog.Sobjectpool

android.intent.action.SEND

Permissions

android.permission.BLUETOOTH
android.permission.RECEIVE_SMS
android.permission.FOREGROUND_SERVICE_CAMERA
com.huawei.android.launcher.permission.CHANGE_BADGE
android.permission.BLUETOOTH_CONNECT
android.permission.CAMERA
android.permission.GET_TASKS
android.permission.REQUEST_COMPANION_RUN_IN_BACKGROUND
com.vivo.permission.manage.permission.ACCESS
android.permission.CAMERA
android.permission.EXPAND_STATUS_BAR
android.permission.ACCESS_ADSERVICES_AD_ID
android.permission.READ_PHONE_STATE
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS
android.permission.READ_SMS
android.permission.FOREGROUND_SERVICE
com.android.launcher.permission.UNINSTALL_SHORTCUT
com.android.launcher2.permission.WRITE_SETTINGS
android.permission.READ_MEDIA_IMAGES
android.permission.WAKE_LOCK
android.permission.FOREGROUND_SERVICE
android.permission.READ_CONTACTS
com.android.vending.BILLING
android.permission.AUTHENTICATE_ACCOUNTS
android.permission.ACCESS_COARSE_LOCATION
android.permission.QUERY_ALL_PACKAGES
android.permission.GET_INSTALLED_APPS
android.permission.POST_NOTIFICATIONS
android.permission.TURN_SCREEN_ON
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.MANAGE_EXTERNAL_STORAGE
android.permission.MANAGE_ALL_FILES_ACCESS_PERMISSION
android.permission.READ_MEDIA_IMAGES
android.permission.READ_MEDIA_VIDEO
android.permission.READ_MEDIA_AUDIO
android.permission.INTERNET
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.BLUETOOTH_CONNECT
android.permission.READ_MEDIA_AUDIO
com.android.launcher.permission.READ_SETTINGS
com.sonymobile.home.permission.PROVIDER_INSERT_BADGE
com.sonyericsson.home.permission.BROADCAST_BADGE
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS
android.permission.REQUEST_COMPANION_USE_DATA_IN_BACKGROUND
android.permission.READ_PHONE_STATE
android.permission.READ_MEDIA_VIDEO
com.huawei.android.launcher.permission.WRITE_SETTINGS
android.permission.ACCESS_ADSERVICES_ATTRIBUTION
com.vivo.notification.permission.BADGE_ICON
android.permission.ACCESS_NOTIFICATION_POLICY
android.permission.GET_PACKAGE_SIZE
android.permission.ACCESS_FINE_LOCATION
android.permission.RECEIVE_USER_PRESENT
com.google.android.gms.permission.AD_ID
android.permission.CLEAR_APP_CACHE
android.permission.ACCESS_WIFI_STATE
com.android.launcher.permission.INSTALL_SHORTCUT
android.permission.CAMERA
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.READ_MEDIA_VIDEO
android.permission.READ_MEDIA_IMAGES
android.permission.BATTERY_STATS
android.permission.RECORD_AUDIO
android.permission.VIBRATE
com.android.launcher.permission.WRITE_SETTINGS
android.permission.FOREGROUND_SERVICE_DATA_SYNC
android.permission.WRITE_SETTINGS
android.permission.FLASHLIGHT
android.permission.VIBRATE
android.permission.READ_PHONE_STATE
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.REORDER_TASKS
com.android.launcher.permission.INSTALL_SHORTCUT
com.android.launcher3.permission.WRITE_SETTINGS
android.permission.SYSTEM_ALERT_WINDOW
android.permission.USE_EXACT_ALARM
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.READ_CONTACTS
android.permission.SYSTEM_ALERT_WINDOW
com.android.launcher3.permission.READ_SETTINGS
android.permission.REQUEST_DELETE_PACKAGES
android.permission.ACCESS_NOTIFICATION_POLICY
android.permission.CHANGE_NETWORK_STATE
com.android.launcher2.permission.READ_SETTINGS
android.permission.WAKE_LOCK
android.permission.HIGH_SAMPLING_RATE_SENSORS
android.permission.USES_POLICY_FORCE_LOCK
com.android.launcher.permission.READ_SETTINGS
android.permission.REQUEST_INSTALL_PACKAGES
android.permission.RECEIVE_BOOT_COMPLETED
com.google.android.c2dm.permission.RECEIVE
android.permission.RECORD_AUDIO
android.permission.WRITE_SETTINGS
android.permission.SCHEDULE_EXACT_ALARM
android.permission.SYSTEM_ALERT_WINDOW
android.permission.REORDER_TASKS
com.google.android.providers.gsf.permission.READ_GSERVICES
android.permission.ACCESS_NETWORK_STATE
android.permission.CALL_PHONE
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.ACCESS_NETWORK_STATE
com.huawei.permission.external_app_settings.USE_COMPONENT
com.huawei.android.launcher.permission.READ_SETTINGS
android.permission.READ_CONTACTS
android.permission.ACCESS_WIFI_STATE
android.permission.ACTIVITY_RECOGNITION
com.coloros.mcs.permission.RECIEVE_MCS_MESSAGE
android.permission.POST_NOTIFICATIONS
android.permission.GET_ACCOUNTS
com.heytap.mcs.permission.RECIEVE_MCS_MESSAGE
android.permission.SEND_SMS
android.permission.READ_MEDIA_AUDIO
android.permission.INTERACT_ACROSS_USERS
android.permission.ACCESS_ADSERVICES_TOPICS
android.permission.WAKE_LOCK
com.android.launcher.permission.UNINSTALL_SHORTCUT
com.android.alarm.permission.SET_ALARM
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.FOREGROUND_SERVICE_MICROPHONE
android.permission.READ_MEDIA_VISUAL_USER_SELECTED
android.permission.WRITE_SYNC_SETTINGS
android.permission.INTERNET
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
android.permission.MANAGE_ACCOUNTS
android.permission.CHANGE_WIFI_STATE
android.permission.VIBRATE
com.applovin.array.apphub.permission.BIND_APPHUB_SERVICE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.INTERACT_ACROSS_USERS_FULL
com.google.android.apps.photos.permission.GOOGLE_PHOTOS
android.permission.BLUETOOTH
oppo.permission.OPPO_COMPONENT_SAFE
android.permission.POST_NOTIFICATIONS

Receivers

com.example.mysoul.AwynqmzamAiqxmcgn

RestartSensor
android.intent.action.SCREEN_ON
android.intent.action.SCREEN_OFF
android.intent.action.USER_PRESENT
android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED
android.intent.action.BOOT_COMPLETED
android.intent.action.QUICKBOOT_POWERON
android.intent.action.LOCKED_BOOT_COMPLETED
android.intent.action.QUICK_INFO
android.provider.Telephony.SMS_RECEIVED
android.provider.Telephony.SMS_DELIVER
BOOT_COMPLETED1
android.intent.action.PACKAGE_INSTALL
android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED
android.intent.action.PACKAGE_REPLACED
android.intent.action.PACKAGE_CHANGED
android.hardware.usb.action.USB_STATE
android.intent.action.WALLPAPER_CHANGED
android.provider.Telephony.SMS_RECEIVED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.BATTERY_CHANGED

com.example.mysoul.NvjpuUdhhzkcpd

android.app.action.DEVICE_ADMIN_ENABLED

com.neutral.defy.dog.Mlivesmart

com.runningsdk.action.REQUEST_SDK_RUNNING_ACTION
com.runningsdk.action.RESPONSE_SDK_RUNNING_ACTION

com.neutral.defy.dog.Hspringduty

android.intent.action.BOOT_COMPLETED
android.intent.action.MY_PACKAGE_REPLACED
android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED
android.intent.action.PHONE_STATE
android.hardware.usb.action.USB_STATE

com.neutral.defy.dog.Abecauseladder

android.intent.action.MY_PACKAGE_REPLACED

com.neutral.defy.dog.Gdelaynest

android.intent.action.MEDIA_SCANNER_SCAN_FILE

com.neutral.defy.dog.Ipupilvirus

android.intent.action.MY_PACKAGE_REPLACED
android.intent.action.BOOT_COMPLETED
android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY
android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW
android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.TIME_SET
android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

Services

com.example.mysoul.KjiyrqobnZcskyxlsfv

MAIN.STARTED.ACTION

com.example.mysoul.TqtrwLlqfeioaYjxvbuljd

com.example.mysoul.BOOT_JOB
android.intent.action.BOOT_COMPLETED

com.example.mysoul.MqcshiLrfqtluhuf

android.accessibilityservice.AccessibilityService

Android Permissions

11d926b4e7068914d27200e1aebcbc5e255088ae588a50a1f8f0520771bb6b15

Permissions

android.permission.BLUETOOTH

android.permission.RECEIVE_SMS

android.permission.FOREGROUND_SERVICE_CAMERA

com.huawei.android.launcher.permission.CHANGE_BADGE

android.permission.BLUETOOTH_CONNECT

android.permission.CAMERA

android.permission.GET_TASKS

android.permission.REQUEST_COMPANION_RUN_IN_BACKGROUND

com.vivo.permission.manage.permission.ACCESS

android.permission.CAMERA

android.permission.EXPAND_STATUS_BAR

android.permission.ACCESS_ADSERVICES_AD_ID

android.permission.READ_PHONE_STATE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.READ_SMS

android.permission.FOREGROUND_SERVICE

com.android.launcher.permission.UNINSTALL_SHORTCUT

com.android.launcher2.permission.WRITE_SETTINGS

android.permission.READ_MEDIA_IMAGES

android.permission.WAKE_LOCK

android.permission.FOREGROUND_SERVICE

android.permission.READ_CONTACTS

com.android.vending.BILLING

android.permission.AUTHENTICATE_ACCOUNTS

android.permission.ACCESS_COARSE_LOCATION

android.permission.QUERY_ALL_PACKAGES

android.permission.GET_INSTALLED_APPS

android.permission.POST_NOTIFICATIONS

android.permission.TURN_SCREEN_ON

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MANAGE_EXTERNAL_STORAGE

android.permission.MANAGE_ALL_FILES_ACCESS_PERMISSION

android.permission.READ_MEDIA_IMAGES

android.permission.READ_MEDIA_VIDEO

android.permission.READ_MEDIA_AUDIO

android.permission.INTERNET

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.BLUETOOTH_CONNECT

android.permission.READ_MEDIA_AUDIO

com.android.launcher.permission.READ_SETTINGS

com.sonymobile.home.permission.PROVIDER_INSERT_BADGE

com.sonyericsson.home.permission.BROADCAST_BADGE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.REQUEST_COMPANION_USE_DATA_IN_BACKGROUND

android.permission.READ_PHONE_STATE

android.permission.READ_MEDIA_VIDEO

com.huawei.android.launcher.permission.WRITE_SETTINGS

android.permission.ACCESS_ADSERVICES_ATTRIBUTION

com.vivo.notification.permission.BADGE_ICON

Sharing

General

Malware Config

Signatures

Files

Password: infected

com.example.mysoul

com.example.mysoul.SaxyxokytPexapnfanGwdh

Activities

com.example.mysoul.SaxyxokytPexapnfanGwdh

com.example.mysoul.WgahpbydTfukr

com.neutral.defy.dog.Sobjectpool

Permissions

Receivers

com.example.mysoul.AwynqmzamAiqxmcgn

com.example.mysoul.NvjpuUdhhzkcpd

com.neutral.defy.dog.Mlivesmart

com.neutral.defy.dog.Hspringduty

com.neutral.defy.dog.Abecauseladder

com.neutral.defy.dog.Gdelaynest

com.neutral.defy.dog.Ipupilvirus

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

Services

com.example.mysoul.KjiyrqobnZcskyxlsfv

com.example.mysoul.TqtrwLlqfeioaYjxvbuljd

com.example.mysoul.MqcshiLrfqtluhuf

Android Permissions

11d926b4e7068914d27200e1aebcbc5e255088ae588a50a1f8f0520771bb6b15