Resubmissions

11-01-2025 14:37

250111-ry481atpbn 10

11-01-2025 14:22

250111-rpx4bs1mby 10

11-01-2025 14:13

250111-rjpvrstldq 6

General

  • Target

    fd4c4b2178e5c4ed16d41f387b25d8cbcdcd93f5f8163a860b8a9ecc477a2a42

  • Size

    9.3MB

  • MD5

    b337ccc9f9bac895be62c57c143052ff

  • SHA1

    46e08294c5a1d70aa746a944cf47e0bffdaa1d91

  • SHA256

    fd4c4b2178e5c4ed16d41f387b25d8cbcdcd93f5f8163a860b8a9ecc477a2a42

  • SHA512

    05039c2343f35ee1cb367cf5ac3bd03d27268a1a737fa3a1e82c17bbfb9d273dc904aab2e894603b53911a68547feba97d4f979fa7c89e723a425ac4f1ea91eb

  • SSDEEP

    98304:HIKgOuJ9AE9XrIYdaO5qwxwHmhaxd/uj7iRskhdC0Kvdief5iSRGIIVKOJVJBkMV:aOiJRbMDGj7iRdebgefr+U/Igwdd

Score
6/10

Malware Config

Signatures

  • Attempts to obfuscate APK file format

    Applies obfuscation techniques to the APK format in order to hinder analysis

  • Declares broadcast receivers with permission to handle system events 1 IoCs
  • Declares services with permission to bind to the system 2 IoCs
  • Requests dangerous framework permissions 35 IoCs

Files

  • fd4c4b2178e5c4ed16d41f387b25d8cbcdcd93f5f8163a860b8a9ecc477a2a42
    .apk android arch:arm arch:arm64 arch:x86 arch:x64

    com.khome2glitchipservice

    com.khome2glitchipservice.b3pHKELC


Android Permissions

fd4c4b2178e5c4ed16d41f387b25d8cbcdcd93f5f8163a860b8a9ecc477a2a42

Permissions

com.android.vending.BILLING

android.permission.CALL_PHONE

android.permission.READ_MEDIA_IMAGES

android.permission.ACCESS_FINE_LOCATION

android.permission.POST_NOTIFICATIONS

android.permission.USE_FULL_SCREEN_INTENT

com.oppo.launcher.permission.READ_SETTINGS

android.permission.CAMERA

android.permission.READ_MEDIA_VIDEO

com.google.android.gms.permission.AD_ID

android.permission.BLUETOOTH

me.everything.badger.permission.BADGE_COUNT_READ

android.permission.ACCESS_MEDIA_LOCATION

com.htc.launcher.permission.UPDATE_SHORTCUT

android.permission.CAMERA

mega.privacy.android.app.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

com.android.vending.BILLING

android.permission.READ_APP_BADGE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.READ_PHONE_NUMBERS

com.sonyericsson.home.permission.BROADCAST_BADGE

com.huawei.android.launcher.permission.CHANGE_BADGE

android.permission.ACCESS_ADSERVICES_AD_ID

android.permission.FOREGROUND_SERVICE

android.permission.ACCESS_MEDIA_LOCATION

android.permission.READ_PHONE_STATE

android.permission.WAKE_LOCK

com.htc.launcher.permission.READ_SETTINGS

android.permission.FOREGROUND_SERVICE_PHONE_CALL

me.everything.badger.permission.BADGE_COUNT_WRITE

com.sec.android.provider.badge.permission.WRITE

android.permission.MANAGE_OWN_CALLS

android.permission.ACCESS_NETWORK_STATE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

com.huawei.android.launcher.permission.WRITE_SETTINGS

android.permission.FOREGROUND_SERVICE

android.permission.READ_MEDIA_AUDIO

android.permission.FOREGROUND_SERVICE

android.permission.FOREGROUND_SERVICE_DATA_SYNC

android.permission.SEND_SMS

com.google.android.c2dm.permission.RECEIVE

android.permission.USES_POLICY_FORCE_LOCK

android.permission.WAKE_LOCK

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.SYSTEM_ALERT_WINDOW

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_COARSE_LOCATION