General

  • Target

    new_chrome_v8.4.35.apk

  • Size

    16.8MB

  • MD5

    4d7c8b05b2af242297137a70f9f6216d

  • SHA1

    b2cd4d335ac946bdac5b02a215f649f35c57464c

  • SHA256

    e893374ee1f3e1a7ccabab85d2f47c64d7cf0781f64f5e0bb7a96368327919a9

  • SHA512

    2f6a50a9362ce29a617b078eed0c660a096a6e2d633dc3aaff144316ca6065f6a2971161168ca4a1d82d1fd93e222238804e371a706948ae8bf1bf8bbe30ce5d

  • SSDEEP

    393216:HcowMPJkvcCCthgGKztNk+s/kUIOgWRfWnDv45v62D6:H3HkVGytqLkU6WRfB5vlu

Score
6/10

Malware Config

Signatures

  • Attempts to obfuscate APK file format

    Applies obfuscation techniques to the APK format in order to hinder analysis

  • Declares services with permission to bind to the system 4 IoCs
  • Requests dangerous framework permissions 1 IoCs

Files

  • new_chrome_v8.4.35.apk
    .apk android

    com.luyabikone.development

    com.luyabikone.development.vjHnAvZwxadMWQN


  • jixofobu
    .apk android

    com.didalu.common

    com.didalu.common.NqmMOXWCZAsQnFtc


Android Permissions

new_chrome_v8.4.35.apk

Permissions

android.permission.USE_BIOMETRIC

android.permission.INTERNET

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.QUERY_ALL_PACKAGES

android.permission.WAKE_LOCK

android.permission.ACCESS_NETWORK_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

com.luyabikone.development.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION