General

  • Target

    eccd4ba9bdfb75b251a1aa4806cdbf8fe0b7cdc5484fb947cef9a27babcd394e

  • Size

    8.8MB

  • MD5

    5f6bd5fbcd6bf1e40d7df98bfd428e7e

  • SHA1

    fe12a4a9945e869388750467d21c66047f21741d

  • SHA256

    eccd4ba9bdfb75b251a1aa4806cdbf8fe0b7cdc5484fb947cef9a27babcd394e

  • SHA512

    47b0f6d38ca15a175fc9a028d9acdab6a9e9585e74ace39774482bcb93cc5ea6f6ba8ea2003827daa0260f35b4d38020afc409da7edff021e465b7e34bfadb86

  • SSDEEP

    196608:0zXjz/jP+0Z38dVT2GbTuX6prCDPZcMqovic58Vjmdqie3K5X:aXrPLBGbqSuDBv/vj1dbec

Score
6/10

Malware Config

Signatures

  • Attempts to obfuscate APK file format

    Applies obfuscation techniques to the APK format in order to hinder analysis

  • Declares broadcast receivers with permission to handle system events 1 IoCs
  • Declares services with permission to bind to the system 2 IoCs
  • Requests dangerous framework permissions 15 IoCs

Files

  • eccd4ba9bdfb75b251a1aa4806cdbf8fe0b7cdc5484fb947cef9a27babcd394e
    .apk android

    com.garbage.inherit

    com.purchase.decorate.InstallDropSession


  • base.apk
    .apk android arch:x86 arch:x64 arch:arm arch:arm64

    com.ui_restorefj2

    com.ui_restorefj2.xVW8GA9VWaa


Android Permissions

eccd4ba9bdfb75b251a1aa4806cdbf8fe0b7cdc5484fb947cef9a27babcd394e

Permissions

android.permission.READ_MEDIA_VIDEO

android.permission.REQUEST_INSTALL_PACKAGES

com.google.android.apps.photos.permission.GOOGLE_PHOTOS

android.permission.MANAGE_OWN_CALLS

android.permission.FLAG_SHOW_WHEN_LOCKED

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_ADSERVICES_AD_ID

android.permission.SYSTEM_ALERT_WINDOW

android.permission.FOREGROUND_SERVICE_MEDIA_PLAYBACK

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.READ_CONTACTS

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.ACCESS_FINE_LOCATION

android.permission.FOREGROUND_SERVICE

android.permission.USE_BIOMETRIC

android.permission.ACCESS_MEDIA_LOCATION

android.permission.READ_MEDIA_IMAGES

android.permission.CHANGE_NETWORK_STATE

com.android.vending.BILLING

com.google.android.gms.permission.AD_ID

android.permission.POST_NOTIFICATIONS

android.permission.BLUETOOTH

android.permission.USE_FINGERPRINT

android.permission.MANAGE_EXTERNAL_STORAGE

android.permission.VIBRATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.FOREGROUND_SERVICE_DATA_SYNC

android.permission.FOREGROUND_SERVICE_PHONE_CALL

android.permission.READ_MEDIA_VISUAL_USER_SELECTED

mega.privacy.android.app.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

android.permission.BLUETOOTH_CONNECT

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.READ_MEDIA_AUDIO

android.permission.RECORD_AUDIO

com.google.android.c2dm.permission.RECEIVE

android.permission.ACCESS_ADSERVICES_ATTRIBUTION

android.permission.CAMERA

android.permission.WAKE_LOCK