General

  • Target

    4928c563dc610a7c968f697e4ebcda9a441d94a4abd5013c38dfa8e8b62cc4f5.zip

  • Size

    58.8MB

  • MD5

    5e36fcfbfc82a96527329d8decaf5e1e

  • SHA1

    6737e3ec7e284b4da5e67cf1966d16a7b8a2d673

  • SHA256

    3e2a43d7889e7ed0c54c926c76978fb0e3785418c375c4e85c6aa43d6ba2165c

  • SHA512

    76d80e0c8e93b514b7f49290db622fc2346568908d479410ac315661da0eb783f4bbec85c919678fb7000573ea22d991134106d928876cbc201747afc6622ee3

  • SSDEEP

    1572864:rYBwmb6vWhMZVkZhI8/PlXlJ/GEmvhLVL2u3MmZ2HB:rrvW0kZhIiPlXlHm5LVd7oB

Score
6/10

Malware Config

Signatures

  • Attempts to obfuscate APK file format

    Applies obfuscation techniques to the APK format in order to hinder analysis

  • Declares broadcast receivers with permission to handle system events 1 IoCs
  • Declares services with permission to bind to the system 2 IoCs
  • Requests dangerous framework permissions 5 IoCs

Files

  • 4928c563dc610a7c968f697e4ebcda9a441d94a4abd5013c38dfa8e8b62cc4f5.zip
    .zip

    Password: infected

  • 4928c563dc610a7c968f697e4ebcda9a441d94a4abd5013c38dfa8e8b62cc4f5.apk
    .apk android arch:arm64 arch:arm arch:x86 arch:x64

    ch.admin.babs.alertswiss

    ch.admin.babs.alertswiss.MainActivity


  • base.apk
    .apk android arch:arm arch:arm64 arch:x86 arch:x64

    com.clphone_new1

    com.clphone_new1.la1yt1qT30V