cfa37c111d5d86aa348a8411c39fe1c54034c437a5c15777a42638c6a9d03eb0_2025-01-31[.]apk

General

Target

cfa37c111d5d86aa348a8411c39fe1c54034c437a5c15777a42638c6a9d03eb0_2025-01-31.apk
Size

8.1MB
MD5

c889e75eb26de5a53531ca1d799a777e
SHA1

4c9ae2c8bc9a2bc02926ee2a9a49730881907a69
SHA256

cfa37c111d5d86aa348a8411c39fe1c54034c437a5c15777a42638c6a9d03eb0
SHA512

cbe94441f6ea06b1c9c9de0933e9755d3ac7deb3197d795570cde4d0680c87f25c8c3e34c189a8b8d898b8afa9140093dfbf731852cbc6bf02cfc03c00bd5941
SSDEEP

196608:5erveQWOfAMidD+traG/iYVS9MEY2HWv7ecSb5xW:47eQqMidD+hjpVSe/2Uu2

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 4 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE
Required by input method services to bind with the system. Allows apps to provide custom input methods (keyboards).	android.permission.BIND_INPUT_METHOD
Required by VPN services to bind with the system. Allows apps to provision VPN services.	android.permission.BIND_VPN_SERVICE

Requests dangerous framework permissions 22 IoCs

description	ioc
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to access any geographic locations persisted in the user's shared collection.	android.permission.ACCESS_MEDIA_LOCATION
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows read access to the device's phone number(s).	android.permission.READ_PHONE_NUMBERS
Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether.	android.permission.PROCESS_OUTGOING_CALLS
Allows an application a broad access to external storage in scoped storage.	android.permission.MANAGE_EXTERNAL_STORAGE
Required to be able to access the camera device.	android.permission.CAMERA
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows applications to use exact alarm APIs.	android.permission.SCHEDULE_EXACT_ALARM
Allows an application to read the user's call log.	android.permission.READ_CALL_LOG
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to collect component usage statistics.	android.permission.PACKAGE_USAGE_STATS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE

Files

cfa37c111d5d86aa348a8411c39fe1c54034c437a5c15777a42638c6a9d03eb0_2025-01-31.apk
.apk android

aner.fos540.ex

aner.fos540.ex.g3PWrQRv0cAZ1i

Activities

aner.fos540.ex.CrxlWarvBWB7f

android.intent.action.SEND
android.intent.action.SENDTO

Permissions

com.google.android.c2dm.permission.RECEIVE
android.permission.MANAGE_ACCOUNTS
android.permission.REQUEST_INSTALL_PACKAGES
android.permission.KILL_BACKGROUND_PROCESSES
android.permission.POST_NOTIFICATIONS
android.permission.WRITE_SECURE_SETTINGS
android.permission.GET_ACCOUNTS
android.permission.INTERNET
android.permission.ACCESS_MEDIA_LOCATION
android.permission.RECORD_AUDIO
android.permission.SEND_SMS
android.permission.WRITE_SETTINGS
android.permission.READ_PHONE_NUMBERS
android.permission.PROCESS_OUTGOING_CALLS
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.FOREGROUND_SERVICE
android.permission.MANAGE_EXTERNAL_STORAGE
android.permission.CAMERA
android.permission.READ_PHONE_STATE
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS
android.permission.ACCESS_NOTIFICATION_POLICY
android.permission.USE_FULL_SCREEN_INTENT
android.permission.READ_CONTACTS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.USE_BIOMETRIC
android.permission.USE_EXACT_ALARM
android.permission.REQUEST_DELETE_PACKAGES
android.permission.RECEIVE_SMS
android.permission.ACCESS_NETWORK_STATE
android.permission.SCHEDULE_EXACT_ALARM
android.permission.QUERY_ALL_PACKAGES
android.permission.READ_PRECISE_PHONE_STATE
android.permission.READ_CALL_LOG
android.permission.WRITE_CONTACTS
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_SMS
android.permission.PACKAGE_USAGE_STATS
android.permission.SYSTEM_ALERT_WINDOW
android.permission.WAKE_LOCK
android.permission.ACCESS_WIFI_STATE
android.permission.DISABLE_KEYGUARD
android.permission.CALL_PHONE

Receivers

aner.fos540.ex.sE4wCxj0Ev

android.provider.Telephony.SMS_RECEIVED
android.intent.action.USER_PRESENT
android.intent.action.BOOT_COMPLETED
android.intent.action.PHONE_STATE
android.intent.action.NEW_OUTGOING_CALL
android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED
android.net.conn.CONNECTIVITY_CHANGE
android.provider.action.DEFAULT_SMS_PACKAGE_CHANGED
android.intent.action.PACKAGE_ADDED

aner.fos540.ex.mN_mDhs7qHtk_6x4VPFG

android.provider.Telephony.SMS_DELIVER

aner.fos540.ex.FcV3t5JiQPZ3VM

android.provider.Telephony.WAP_PUSH_DELIVER

aner.fos540.ex.DeviceAdminReceiver

android.app.action.DEVICE_ADMIN_ENABLED
android.app.action.PROFILE_PROVISIONING_COMPLETE
android.app.action.PROFILE_OWNER_CHANGED
android.app.action.DEVICE_OWNER_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY
android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW
android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.TIME_SET
android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.work.diagnostics.REQUEST_DIAGNOSTICS

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

Services

aner.fos540.ex.w4F8pOywTMVA

android.intent.action.RESPOND_VIA_MESSAGE

aner.fos540.ex.I_zFuY

android.accessibilityservice.AccessibilityService

aner.fos540.ex.cLX1rGuxVZ0

android.service.notification.NotificationListenerService

aner.fos540.ex.SoftKeyboardService

android.view.InputMethod

aner.fos540.ex.VpnService

android.net.VpnService

aner.fos540.ex.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

aner.fos540.ex.RemoteService

aner.fos540.ex.aidl.REMOTE_CONNECTION

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

Android Permissions

cfa37c111d5d86aa348a8411c39fe1c54034c437a5c15777a42638c6a9d03eb0_2025-01-31.apk

Permissions

com.google.android.c2dm.permission.RECEIVE

android.permission.MANAGE_ACCOUNTS

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.POST_NOTIFICATIONS

android.permission.WRITE_SECURE_SETTINGS

android.permission.GET_ACCOUNTS

android.permission.INTERNET

android.permission.ACCESS_MEDIA_LOCATION

android.permission.RECORD_AUDIO

android.permission.SEND_SMS

android.permission.WRITE_SETTINGS

android.permission.READ_PHONE_NUMBERS

android.permission.PROCESS_OUTGOING_CALLS

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.FOREGROUND_SERVICE

android.permission.MANAGE_EXTERNAL_STORAGE

android.permission.CAMERA

android.permission.READ_PHONE_STATE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.USE_FULL_SCREEN_INTENT

android.permission.READ_CONTACTS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.USE_BIOMETRIC

android.permission.USE_EXACT_ALARM

android.permission.REQUEST_DELETE_PACKAGES

android.permission.RECEIVE_SMS

android.permission.ACCESS_NETWORK_STATE

android.permission.SCHEDULE_EXACT_ALARM

android.permission.QUERY_ALL_PACKAGES

android.permission.READ_PRECISE_PHONE_STATE

android.permission.READ_CALL_LOG

android.permission.WRITE_CONTACTS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_SMS

android.permission.PACKAGE_USAGE_STATS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.WAKE_LOCK

android.permission.ACCESS_WIFI_STATE

android.permission.DISABLE_KEYGUARD

android.permission.CALL_PHONE

Resubmissions

Sharing

General

Malware Config

Signatures

Files

aner.fos540.ex

aner.fos540.ex.g3PWrQRv0cAZ1i

Activities

aner.fos540.ex.CrxlWarvBWB7f

Permissions

Receivers

aner.fos540.ex.sE4wCxj0Ev

aner.fos540.ex.mN_mDhs7qHtk_6x4VPFG

aner.fos540.ex.FcV3t5JiQPZ3VM

aner.fos540.ex.DeviceAdminReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.diagnostics.DiagnosticsReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

Services

aner.fos540.ex.w4F8pOywTMVA

aner.fos540.ex.I_zFuY

aner.fos540.ex.cLX1rGuxVZ0

aner.fos540.ex.SoftKeyboardService

aner.fos540.ex.VpnService

aner.fos540.ex.FirebaseMessagingService

aner.fos540.ex.RemoteService

com.google.firebase.messaging.FirebaseMessagingService

Android Permissions

cfa37c111d5d86aa348a8411c39fe1c54034c437a5c15777a42638c6a9d03eb0_2025-01-31.apk