slocker | virusX[.]zip

Target

virusX.zip
Size

32.5MB
MD5

a58b72237a14d709c6eea04b73049210
SHA1

786a2d070ea75d7fd858ebd93869063fedd6d705
SHA256

51baf4bc48db631e887ded88c0beb05b7a2f6f26ad2d122ee7c6cca6678752f5
SHA512

978b868d4ce591570f722d167e14f2b6533d3b341bdaac1048fb3d1196ad26b2009269514d29b5aeb12aa75697ae556ebd3c88af1ed4ea00f8c83289fff7a9b9
SSDEEP

786432:xDWCPFc6LHxrdAxglUJMtJg9GzAl8g5lf/F9M6GvHzn9:sUzjxrdAxxJM+l8g5lDM6Gj9

Score

10^/10

slocker wipelock

Malware Config

Signatures

SLocker payload 1 IoCs

resource	yara_rule
static1/unpack001/5251a356421340a45c8dc6d431ef8a8cbca4078a0305a87f4fbd552e9fc0793e.apk	family_slocker_1

Slocker family
slocker

Wipelock Android payload 1 IoCs

resource	yara_rule
static1/unpack001/antivirus.apk	family_wipelock

Wipelock family
wipelock

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE

Requests dangerous framework permissions 16 IoCs

description	ioc
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows the app to answer an incoming phone call.	android.permission.ANSWER_PHONE_CALLS
Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether.	android.permission.PROCESS_OUTGOING_CALLS
Allows an application to read the user's call log.	android.permission.READ_CALL_LOG
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to read the user's calendar data.	android.permission.READ_CALENDAR
Allows an application to record audio.	android.permission.RECORD_AUDIO
Required to be able to access the camera device.	android.permission.CAMERA
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to collect component usage statistics.	android.permission.PACKAGE_USAGE_STATS
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS

Files

virusX.zip
.zip
1777a2ba85f831e41c6a60418f84205c9de9c66402f9b7e5be13d29c543a42b0.apk
.apk android arch:arm arch:arm64

com.crbpphsj.wjphxfzk

com.crbpphsj.wjphxfzk.dnmWQJIOot

Activities

com.crbpphsj.wjphxfzk.dnmWQJIOot

android.intent.action.MAIN

com.crbpphsj.wjphxfzk.ylJMnebWIK

android.intent.action.MAIN

Permissions

com.crbpphsj.wjphxfzk.permission.C2D_MESSAGE
android.permission.READ_CONTACTS
android.permission.READ_SMS
android.permission.CALL_PHONE
android.permission.READ_PHONE_STATE
android.permission.ANSWER_PHONE_CALLS
android.permission.PROCESS_OUTGOING_CALLS
android.permission.READ_LOGS
android.permission.READ_CALL_LOG
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.SDCARD_WRITE
android.permission.VIBRATE
android.permission.INTERNET
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_NETWORK_STATE
android.permission.READ_CALENDAR
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.RECORD_AUDIO
android.permission.CAMERA
android.permission.WAKE_LOCK
com.google.android.c2dm.permission.RECEIVE
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.GET_TASKS
android.permission.BIND_DEVICE_ADMIN
android.permission.CHANGE_NETWORK_STATE
android.permission.ACCESS_SUPERUSER
android.permission.SYSTEM_ALERT_WINDOW
android.permission.PACKAGE_USAGE_STATS
android.permission.USES_POLICY_WIPE_DATA
android.permission.BLUETOOTH
android.permission.BLUETOOTH_ADMIN
android.permission.WRITE_SETTINGS
android.permission.WRITE_SECURE_SETTINGS
android.permission.BROADCAST_STICKY
android.permission.GET_PACKAGE_SIZE
android.permission.WRITE_SYNC_SETTINGS
android.permission.CHANGE_WIFI_MULTICAST_STATE
android.permission.BATTERY_STATS
android.permission.CHANGE_CONFIGURATION
android.permission.FOREGROUND_SERVICE

Receivers

com.crbpphsj.wjphxfzk.core.ULqZdOHxjZ

com.crbpphsj.wjphxfzk.core.ULqZdOHxjZ.TIMER_ALARM

com.crbpphsj.wjphxfzk.core.INXaYQiyBg

com.crbpphsj.wjphxfzk.core.INXaYQiyBg.START
com.crbpphsj.wjphxfzk.core.INXaYQiyBg.STOP

com.crbpphsj.wjphxfzk.core.aiAoRmLptt

android.intent.action.NEW_OUTGOING_CALL
android.provider.Telephony.SMS_RECEIVED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.USER_PRESENT
android.intent.action.BOOT_COMPLETED
android.intent.action.ACTION_SHUTDOWN
android.intent.action.PHONE_STATE
android.intent.action.SIM_STATE_CHANGED
android.intent.action.PACKAGE_REMOVED
android.intent.action.PACKAGE_ADDED

com.crbpphsj.wjphxfzk.YZThsegsdP

com.google.android.c2dm.intent.REGISTRATION
com.google.android.c2dm.intent.RECEIVE
com.google.android.c2dm.intent.RETRY

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE
com.google.android.c2dm.intent.REGISTRATION
com.google.android.c2dm.intent.RECEIVE

com.crbpphsj.wjphxfzk.core.mbWjRwOpTH

android.app.action.DEVICE_ADMIN_ENABLED

Services

com.google.firebase.iid.FirebaseInstanceIdService

com.google.firebase.INSTANCE_ID_EVENT

com.crbpphsj.wjphxfzk.oiEaJCbJTw

com.google.firebase.MESSAGING_EVENT

com.crbpphsj.wjphxfzk.uYEvBYNKCB

com.google.firebase.INSTANCE_ID_EVENT

com.crbpphsj.wjphxfzk.core.listener.UsqDqoisSF

android.accessibilityservice.AccessibilityService

com.crbpphsj.wjphxfzk.core.listener.glvpEFlRKh

android.service.notification.NotificationListenerService

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT
5251a356421340a45c8dc6d431ef8a8cbca4078a0305a87f4fbd552e9fc0793e.apk
.apk android

com.XPhantom.id

com.XPhantom.id.MainActivity

Activities

com.XPhantom.id.MainActivity

android.intent.action.MAIN

Permissions

android.permission.SYSTEM_ALERT_WINDOW
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.SET_WALLPAPER
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_CONTACTS
android.permission.READ_SMS
android.permission.ACCESS_FINE_LOCATION
android.permission.WAKE_LOCK
android.permission.INTERNET
android.permission.REQUEST_INSTALL_PACKAGE
android.permission.CAMERA

Receivers

com.XPhantom.id.BootReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.QUICKBOOT_POWERON

Services
7c44519e51cc203cdd23f27cefe7cf99de34abddf947ba55951721725f15aa57.apk
.apk android arch:arm arch:arm64

com.foqrpral.oxudfpdy

com.foqrpral.oxudfpdy.TwPZjMsqPD

Activities

com.foqrpral.oxudfpdy.TwPZjMsqPD

android.intent.action.MAIN

com.foqrpral.oxudfpdy.htSFbtzAcn

android.intent.action.MAIN

Permissions

com.foqrpral.oxudfpdy.permission.C2D_MESSAGE
android.permission.READ_CONTACTS
android.permission.READ_SMS
android.permission.CALL_PHONE
android.permission.READ_PHONE_STATE
android.permission.ANSWER_PHONE_CALLS
android.permission.PROCESS_OUTGOING_CALLS
android.permission.READ_LOGS
android.permission.READ_CALL_LOG
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.SDCARD_WRITE
android.permission.VIBRATE
android.permission.INTERNET
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_NETWORK_STATE
android.permission.READ_CALENDAR
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.RECORD_AUDIO
android.permission.CAMERA
android.permission.WAKE_LOCK
com.google.android.c2dm.permission.RECEIVE
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.GET_TASKS
android.permission.BIND_DEVICE_ADMIN
android.permission.CHANGE_NETWORK_STATE
android.permission.ACCESS_SUPERUSER
android.permission.SYSTEM_ALERT_WINDOW
android.permission.PACKAGE_USAGE_STATS
android.permission.USES_POLICY_WIPE_DATA
android.permission.BLUETOOTH
android.permission.BLUETOOTH_ADMIN
android.permission.WRITE_SETTINGS
android.permission.WRITE_SECURE_SETTINGS
android.permission.BROADCAST_STICKY
android.permission.GET_PACKAGE_SIZE
android.permission.WRITE_SYNC_SETTINGS
android.permission.CHANGE_WIFI_MULTICAST_STATE
android.permission.BATTERY_STATS
android.permission.CHANGE_CONFIGURATION
android.permission.FOREGROUND_SERVICE

Receivers

com.foqrpral.oxudfpdy.core.wfCXjEWLKG

com.foqrpral.oxudfpdy.core.wfCXjEWLKG.TIMER_ALARM

com.foqrpral.oxudfpdy.core.CosApjMwcx

com.foqrpral.oxudfpdy.core.CosApjMwcx.START
com.foqrpral.oxudfpdy.core.CosApjMwcx.STOP

com.foqrpral.oxudfpdy.core.MaLsgTPzEF

android.intent.action.NEW_OUTGOING_CALL
android.provider.Telephony.SMS_RECEIVED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.USER_PRESENT
android.intent.action.BOOT_COMPLETED
android.intent.action.ACTION_SHUTDOWN
android.intent.action.PHONE_STATE
android.intent.action.SIM_STATE_CHANGED
android.intent.action.PACKAGE_REMOVED
android.intent.action.PACKAGE_ADDED

com.foqrpral.oxudfpdy.aKbpYVAvcf

com.google.android.c2dm.intent.REGISTRATION
com.google.android.c2dm.intent.RECEIVE
com.google.android.c2dm.intent.RETRY

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE
com.google.android.c2dm.intent.REGISTRATION
com.google.android.c2dm.intent.RECEIVE

com.foqrpral.oxudfpdy.core.JkZyiJCaPi

android.app.action.DEVICE_ADMIN_ENABLED

Services

com.google.firebase.iid.FirebaseInstanceIdService

com.google.firebase.INSTANCE_ID_EVENT

com.foqrpral.oxudfpdy.oXdNyUqlLI

com.google.firebase.MESSAGING_EVENT

com.foqrpral.oxudfpdy.UGhfhufmKe

com.google.firebase.INSTANCE_ID_EVENT

com.foqrpral.oxudfpdy.core.listener.UgQHIxsMsn

android.accessibilityservice.AccessibilityService

com.foqrpral.oxudfpdy.core.listener.UtpFqrHnFb

android.service.notification.NotificationListenerService

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT
FE_Invisible_Troll_Script.apk
.apk android

com.herocraft.game.freemium.catchthecandy

erkq.bl.vIyQA

Activities

erkq.bl.vIyQA

android.intent.action.MAIN

erkq.bl.XFShv

android.intent.action.VIEW
NotifActivity

erkq.bl.tT

android.search.action.GLOBAL_SEARCH

erkq.bl.ytci

android.intent.action.WEB_SEARCH

Permissions

android.permission.ACCESS_NETWORK_STATE
android.permission.INTERNET
com.google.android.c2dm.permission.RECEIVE
android.permission.ACCESS_COARSE_LOCATION
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.USE_FULL_SCREEN_INTENT
com.google.android.gms.permission.AD_ID
android.permission.FOREGROUND_SERVICE
android.permission.READ_EXTERNAL_STORAGE
android.permission.POST_NOTIFICATIONS
android.permission.WAKE_LOCK
com.herocraft.game.freemium.catchthecandy.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Receivers

erkq.bl.OL

android.net.wifi.STATE_CHANGE
android.net.wifi.WIFI_STATE_CHANGED
android.net.conn.CONNECTIVITY_CHANGE

erkq.bl.NGjj

android.appwidget.action.APPWIDGET_UPDATE

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

Services

erkq.bl.KXMdv

com.google.firebase.MESSAGING_EVENT

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT
HellBoy.apk
.apk android

com.hellboy

com.hellboy.MainActivity

Activities

com.hellboy.MainActivity

android.intent.action.MAIN

Permissions

android.permission.GET_TASKS
android.permission.READ_PHONE_STATE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.WRITE_SETTINGS
android.permission.WAKE_LOCK

Receivers

com.hellboy.BootReceiver

android.intent.action.BOOT_COMPLETED

Services
Roblox Keyless Bloxfruits Script HoHo Hub V3.apk
.apk android

com.herocraft.game.treasuresofthedeep

kandc.tdehj.X

Activities

kandc.tdehj.X

android.intent.action.MAIN

kandc.tdehj.hdKpk

android.intent.action.VIEW
NotifActivity

kandc.tdehj.wgPO

android.search.action.GLOBAL_SEARCH

kandc.tdehj.A

android.intent.action.WEB_SEARCH

Permissions

android.permission.ACCESS_NETWORK_STATE
android.permission.INTERNET
com.google.android.c2dm.permission.RECEIVE
android.permission.ACCESS_COARSE_LOCATION
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.USE_FULL_SCREEN_INTENT
com.google.android.gms.permission.AD_ID
android.permission.FOREGROUND_SERVICE
android.permission.READ_EXTERNAL_STORAGE
android.permission.POST_NOTIFICATIONS
android.permission.WAKE_LOCK
com.herocraft.game.treasuresofthedeep.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Receivers

kandc.tdehj.enxOw

android.net.wifi.STATE_CHANGE
android.net.wifi.WIFI_STATE_CHANGED
android.net.conn.CONNECTIVITY_CHANGE

kandc.tdehj.f

android.appwidget.action.APPWIDGET_UPDATE

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

Services

kandc.tdehj.NMv

com.google.firebase.MESSAGING_EVENT

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT
Stick War_ Legacy.apk
.apk android

com.herocraft.game.treasuresofthedeep

dwly.bdikn.rcsVR

Activities

dwly.bdikn.rcsVR

android.intent.action.MAIN

dwly.bdikn.hUj

android.intent.action.VIEW
NotifActivity

dwly.bdikn.oSTK

android.search.action.GLOBAL_SEARCH

dwly.bdikn.uwEV

android.intent.action.WEB_SEARCH

Permissions

android.permission.ACCESS_NETWORK_STATE
android.permission.INTERNET
com.google.android.c2dm.permission.RECEIVE
android.permission.ACCESS_COARSE_LOCATION
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.USE_FULL_SCREEN_INTENT
com.google.android.gms.permission.AD_ID
android.permission.FOREGROUND_SERVICE
android.permission.READ_EXTERNAL_STORAGE
android.permission.POST_NOTIFICATIONS
android.permission.WAKE_LOCK
com.herocraft.game.treasuresofthedeep.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Receivers

dwly.bdikn.YuEU

android.net.wifi.STATE_CHANGE
android.net.wifi.WIFI_STATE_CHANGED
android.net.conn.CONNECTIVITY_CHANGE

dwly.bdikn.bs

android.appwidget.action.APPWIDGET_UPDATE

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

Services

dwly.bdikn.mqW

com.google.firebase.MESSAGING_EVENT

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT
Undead_Defense_Tycoon_Script.apk
.apk android

com.herocraft.game.birdsonwire.freemium

zjlx.bdys.NgE

Activities

zjlx.bdys.NgE

android.intent.action.MAIN

zjlx.bdys.Ji

android.intent.action.VIEW
NotifActivity

zjlx.bdys.Jwjq

android.search.action.GLOBAL_SEARCH

zjlx.bdys.gVL

android.intent.action.WEB_SEARCH

Permissions

android.permission.ACCESS_NETWORK_STATE
android.permission.INTERNET
com.google.android.c2dm.permission.RECEIVE
android.permission.ACCESS_COARSE_LOCATION
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.USE_FULL_SCREEN_INTENT
com.google.android.gms.permission.AD_ID
android.permission.FOREGROUND_SERVICE
android.permission.READ_EXTERNAL_STORAGE
android.permission.POST_NOTIFICATIONS
android.permission.WAKE_LOCK
com.herocraft.game.birdsonwire.freemium.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Receivers

zjlx.bdys.kqfT

android.net.wifi.STATE_CHANGE
android.net.wifi.WIFI_STATE_CHANGED
android.net.conn.CONNECTIVITY_CHANGE

zjlx.bdys.OjnvJ

android.appwidget.action.APPWIDGET_UPDATE

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

Services

zjlx.bdys.Rbtiu

com.google.firebase.MESSAGING_EVENT

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT
antivirus.apk
.apk android

com.elite

com.elite.MainActivity

Activities

com.elite.MainActivity

android.intent.action.MAIN

com.elite.UninstallAdminDevice

android.intent.action.SEND

Permissions

android.permission.GET_TASKS
android.permission.READ_PHONE_STATE
android.permission.RECEIVE_SMS
android.permission.SEND_SMS
android.permission.READ_SMS
android.permission.WRITE_SMS
android.permission.READ_CONTACTS
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.WRITE_SETTINGS
android.permission.WAKE_LOCK

Receivers

com.elite.AdminReciever

android.app.action.DEVICE_ADMIN_ENABLED

com.elite.SMSReceiver

android.provider.Telephony.SMS_RECEIVED

com.elite.BootReceiver

android.intent.action.BOOT_COMPLETED

Services
b3f23bdd3dea208f05de7a5b9ea928758187b3f2b0f4f5733c8bdb3298818ec0.apk
.apk android arch:arm arch:arm64

com.ygvezckt.rwqaztkw

com.mhyzzjvy.pizvbaoa.CUhBzurQSa

Activities

com.mhyzzjvy.pizvbaoa.CUhBzurQSa

android.intent.action.MAIN

com.mhyzzjvy.pizvbaoa.EPBoaQrUer

android.intent.action.MAIN

Permissions

com.mhyzzjvy.pizvbaoa.permission.C2D_MESSAGE
android.permission.READ_CONTACTS
android.permission.READ_SMS
android.permission.CALL_PHONE
android.permission.READ_PHONE_STATE
android.permission.ANSWER_PHONE_CALLS
android.permission.PROCESS_OUTGOING_CALLS
android.permission.READ_LOGS
android.permission.READ_CALL_LOG
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.SDCARD_WRITE
android.permission.INTERNET
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_NETWORK_STATE
android.permission.READ_CALENDAR
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.RECORD_AUDIO
android.permission.CAMERA
android.permission.WAKE_LOCK
com.google.android.c2dm.permission.RECEIVE
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.GET_TASKS
android.permission.BIND_DEVICE_ADMIN
android.permission.CHANGE_NETWORK_STATE
android.permission.ACCESS_SUPERUSER
android.permission.SYSTEM_ALERT_WINDOW
android.permission.PACKAGE_USAGE_STATS
android.permission.USES_POLICY_WIPE_DATA
android.permission.BLUETOOTH_ADMIN
android.permission.WRITE_SETTINGS
android.permission.WRITE_SECURE_SETTINGS
android.permission.BROADCAST_STICKY
android.permission.GET_PACKAGE_SIZE
android.permission.WRITE_SYNC_SETTINGS
android.permission.CHANGE_WIFI_MULTICAST_STATE
android.permission.BATTERY_STATS
android.permission.CHANGE_CONFIGURATION
android.permission.EXPAND_STATUS_BAR
android.permission.FOREGROUND_SERVICE
com.ygvezckt.rwqaztkw.permission.C2D_MESSAGE

Receivers

com.mhyzzjvy.pizvbaoa.core.LRpohhEysg

com.mhyzzjvy.pizvbaoa.core.LRpohhEysg.TIMER_ALARM

com.mhyzzjvy.pizvbaoa.core.MeDuhggysT

com.mhyzzjvy.pizvbaoa.core.MeDuhggysT.START
com.mhyzzjvy.pizvbaoa.core.MeDuhggysT.STOP

com.mhyzzjvy.pizvbaoa.core.DaqiMvsFWk

android.intent.action.NEW_OUTGOING_CALL
android.provider.Telephony.SMS_RECEIVED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.USER_PRESENT
android.intent.action.BOOT_COMPLETED
android.intent.action.ACTION_SHUTDOWN
android.intent.action.PHONE_STATE
android.intent.action.SIM_STATE_CHANGED
android.intent.action.PACKAGE_REMOVED
android.intent.action.PACKAGE_ADDED

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE
com.google.android.c2dm.intent.REGISTRATION
com.google.android.c2dm.intent.RECEIVE

com.mhyzzjvy.pizvbaoa.core.eDKBPdqFMw

android.app.action.DEVICE_ADMIN_ENABLED

Services

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

com.google.firebase.iid.FirebaseInstanceIdService

com.google.firebase.INSTANCE_ID_EVENT

com.mhyzzjvy.pizvbaoa.BWpnwAKbsL

com.google.firebase.MESSAGING_EVENT

com.mhyzzjvy.pizvbaoa.OrwfAplHXF

com.google.firebase.INSTANCE_ID_EVENT

com.mhyzzjvy.pizvbaoa.core.listener.GtmQUPhFbC

android.accessibilityservice.AccessibilityService

com.mhyzzjvy.pizvbaoa.core.listener.YQNWVtIMir

android.service.notification.NotificationListenerService
e8947bc9fb2bd597daba3064d5fab275d8df2beac92f301063f22fe276dcbc10.apk
.apk android arch:arm64 arch:arm

com.herocraft.game.birdsonwire.freemium

fn.xhrbc.E

Activities

fn.xhrbc.E

android.intent.action.MAIN

fn.xhrbc.Swtfj

android.intent.action.VIEW
NotifActivity

Permissions

android.permission.INTERNET
com.google.android.c2dm.permission.RECEIVE
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_COARSE_LOCATION
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.USE_FULL_SCREEN_INTENT
com.google.android.gms.permission.AD_ID
android.permission.FOREGROUND_SERVICE
android.permission.READ_EXTERNAL_STORAGE
android.permission.POST_NOTIFICATIONS
android.permission.WAKE_LOCK

Receivers

fn.xhrbc.fbOI

android.net.wifi.STATE_CHANGE
android.net.wifi.WIFI_STATE_CHANGED
android.net.conn.CONNECTIVITY_CHANGE

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

Services

fn.xhrbc.Xw

com.google.firebase.MESSAGING_EVENT

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT
insta_followers.apk
.apk android

com.test.accessibility

com.test.accessibility.SplashActivity

Activities

com.test.accessibility.SplashActivity

android.intent.action.MAIN

Permissions

android.permission.INTERNET

Services

com.test.accessibility.MyAccessibilityService

android.accessibilityservice.AccessibilityService
xxx.apk
.apk android arch:arm

yige.liwu

com.androlua.Welcome

Activities

com.androlua.Main

android.intent.action.VIEW
android.intent.action.EDIT
android.intent.action.VIEW
android.intent.action.EDIT
android.intent.action.VIEW
android.intent.action.EDIT
android.intent.action.VIEW
android.intent.action.EDIT

com.tencent.tauth.AuthActivity

android.intent.action.VIEW

com.androlua.LuaActivity

android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.EDIT
android.intent.action.VIEW
android.intent.action.EDIT
android.intent.action.VIEW
android.intent.action.VIEW

com.androlua.Welcome

android.intent.action.MAIN

Permissions

android.permission.UNKNOWN
android.permission.UNKNOWN
android.permission.UNKNOWN
android.permission.UNKNOWN
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.UNKNOWN
android.permission.UNKNOWN
android.permission.UNKNOWN
android.permission.UNKNOWN
android.permission.UNKNOWN
android.permission.UNKNOWN
android.permission.UNKNOWN
android.permission.UNKNOWN
android.permission.UNKNOWN
android.permission.UNKNOWN
android.permission.UNKNOWN
android.permission.UNKNOWN
android.permission.UNKNOWN
android.permission.UNKNOWN
android.permission.UNKNOWN
android.permission.UNKNOWN
android.permission.UNKNOWN
android.permission.UNKNOWN
android.permission.UNKNOWN
android.permission.UNKNOWN
android.permission.UNKNOWN
android.permission.UNKNOWN
android.permission.UNKNOWN
android.permission.UNKNOWN
android.permission.UNKNOWN
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.UNKNOWN
android.permission.UNKNOWN
android.permission.UNKNOWN
android.permission.UNKNOWN
android.permission.UNKNOWN
android.permission.UNKNOWN
android.permission.UNKNOWN
android.permission.UNKNOWN
android.permission.UNKNOWN
android.permission.UNKNOWN
android.permission.UNKNOWN
android.permission.UNKNOWN
android.permission.UNKNOWN

Services

com.androlua.LuaAccessibilityService

android.accessibilityservice.AccessibilityService

Resubmissions

Sharing

General

Malware Config

Signatures

Files

com.crbpphsj.wjphxfzk

com.crbpphsj.wjphxfzk.dnmWQJIOot

Activities

com.crbpphsj.wjphxfzk.dnmWQJIOot

com.crbpphsj.wjphxfzk.ylJMnebWIK

Permissions

Receivers

com.crbpphsj.wjphxfzk.core.ULqZdOHxjZ

com.crbpphsj.wjphxfzk.core.INXaYQiyBg

com.crbpphsj.wjphxfzk.core.aiAoRmLptt

com.crbpphsj.wjphxfzk.YZThsegsdP

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.crbpphsj.wjphxfzk.core.mbWjRwOpTH

Services

com.google.firebase.iid.FirebaseInstanceIdService

com.crbpphsj.wjphxfzk.oiEaJCbJTw

com.crbpphsj.wjphxfzk.uYEvBYNKCB

com.crbpphsj.wjphxfzk.core.listener.UsqDqoisSF

com.crbpphsj.wjphxfzk.core.listener.glvpEFlRKh

com.google.firebase.messaging.FirebaseMessagingService

com.XPhantom.id

com.XPhantom.id.MainActivity

Activities

com.XPhantom.id.MainActivity

Permissions

Receivers

com.XPhantom.id.BootReceiver

Services

com.foqrpral.oxudfpdy

com.foqrpral.oxudfpdy.TwPZjMsqPD

Activities

com.foqrpral.oxudfpdy.TwPZjMsqPD

com.foqrpral.oxudfpdy.htSFbtzAcn

Permissions

Receivers

com.foqrpral.oxudfpdy.core.wfCXjEWLKG

com.foqrpral.oxudfpdy.core.CosApjMwcx

com.foqrpral.oxudfpdy.core.MaLsgTPzEF

com.foqrpral.oxudfpdy.aKbpYVAvcf

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.foqrpral.oxudfpdy.core.JkZyiJCaPi

Services

com.google.firebase.iid.FirebaseInstanceIdService

com.foqrpral.oxudfpdy.oXdNyUqlLI

com.foqrpral.oxudfpdy.UGhfhufmKe

com.foqrpral.oxudfpdy.core.listener.UgQHIxsMsn

com.foqrpral.oxudfpdy.core.listener.UtpFqrHnFb

com.google.firebase.messaging.FirebaseMessagingService

com.herocraft.game.freemium.catchthecandy

erkq.bl.vIyQA

Activities

erkq.bl.vIyQA

erkq.bl.XFShv

erkq.bl.tT

erkq.bl.ytci

Permissions

Receivers

erkq.bl.OL

erkq.bl.NGjj

com.google.firebase.iid.FirebaseInstanceIdReceiver

Services

erkq.bl.KXMdv

com.google.firebase.messaging.FirebaseMessagingService

com.hellboy

com.hellboy.MainActivity

Activities

com.hellboy.MainActivity

Permissions

Receivers

com.hellboy.BootReceiver

Services

com.herocraft.game.treasuresofthedeep

kandc.tdehj.X

Activities