c3jn21.apk
- SHA256 9aadd8fb01918d7ecbb9b2613d1a7551a51d69db97e51a056963adfa38b08370
com.cloudwave.service
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
c3jn21.apk
Resource
android-x86-arm-20250917-en
android-9-x86
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
c3jn21.apk
Resource
android-x64-20250917-en
android-10-x64
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
c3jn21.apk
Resource
android-x64-arm64-20250917-en
android-11-x64
1 signatures
150 seconds
Behavioral task
behavioral4
Sample
childapp.apk
Resource
android-x86-arm-20250917-en
android-9-x86
4 signatures
150 seconds
Behavioral task
behavioral5
Sample
childapp.apk
Resource
android-x64-20250917-en
android-10-x64
10 signatures
150 seconds
Behavioral task
behavioral6
Sample
childapp.apk
Resource
android-x64-arm64-20250917-en
android-11-x64
8 signatures
150 seconds
General
- Target c3jn21.apk
- Size 5.9MB
- Sample251004-e7d2ysysfx
- SHA256 9aadd8fb01918d7ecbb9b2613d1a7551a51d69db97e51a056963adfa38b08370
- MD5 3f0f9641b3ff9bbea02d77339f5015ef
- SHA1 5f896e6d4fe65f9a856f2f0ec9f0b86cb2c4d087
- SHA512 96a596c4c75960c657fbe9e11f258d98b61f336bd75df00310cf7bd51e8638e3ebf3baa762df0d950142d661614d3e609b05f1170cdff7faf3021de1975489ff
- SSDEEP 98304:I2Rw8qYiM9DjyFDXs4gHD73eRlE+ga5e3BWzjO0qMmIXi5xgNi3Zym95r2C0yMJR:I2BBBeFcHDSDD5e3BWPO00pZ9I2w23xE
- MD5 SHA1 SHA512 SSDEEP
Score
6/10
Malware Config
Signatures
- Attempts to obfuscate APK file format
Applies obfuscation techniques to the APK format in order to hinder analysis
- Declares broadcast receivers with permission to handle system events 1 IoCs
description ioc Required by device admin receivers to bind with the system. Allows apps to manage device administration features. android.permission.BIND_DEVICE_ADMIN - Declares services with permission to bind to the system 3 IoCs
description ioc Required by accessibility services to bind with the system. Allows apps to access accessibility features. android.permission.BIND_ACCESSIBILITY_SERVICE Required by VPN services to bind with the system. Allows apps to provision VPN services. android.permission.BIND_VPN_SERVICE Required by input method services to bind with the system. Allows apps to provide custom input methods (keyboards). android.permission.BIND_INPUT_METHOD - Requests dangerous framework permissions 3 IoCs
description ioc Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE Allows an application to request installing packages. android.permission.REQUEST_INSTALL_PACKAGES
File Explorer
-
c3jn21.apk.apk 5.9MB
-
childapp.apk.apk 3.8MB
childapp.apk
- SHA256 c90465f25b077da1b0cffa5e48730375b17ac520eed6ca0a22ae730f4fd43e12
- MD5 dcf3d6f73814edc8a56b79b252311028
- SHA1 1891956e8e6284bb00bc2a911069f32cb60dba8c
- SHA512 3c992fbe5e1f5353de626993d15efbb0c3a981ef57326f5a206d7c77530a247912b87f02e8b9773b67380088c8562ac252c535250f617c84eecc4de6c39eff16
- SSDEEP 98304:dDE5UijKdFaCWRUU5sh9l60IbcMJ/KiDyqvYimKyU:dDE6NCAI/KiDyqveKr
- MD5 SHA1 SHA512 SSDEEP
ocean.placed.player
ocean.placed.fuycyyacmzpsxvplfmwwmqnmxaqyjamrzgrtbuuaqaiatuelou2.gdslcwazgulecbvwbtjegoxraskookmxlqrlltvheyzqfwlzfw6SJTMB87
android.permission.SEND_SMS
android.permission.SET_WALLPAPER
android.permission.READ_SMS
android.permission.READ_CALL_LOG
android.permission.READ_CONTACTS
android.permission.GET_ACCOUNTS
android.permission.CAMERA
android.permission.RECORD_AUDIO
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.CALL_PHONE
android.permission.DISABLE_KEYGUARD
android.permission.FOREGROUND_SERVICE
android.permission.READ_EXTERNAL_STORAGE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.RECEIVE_BOOT_COMPLETED
oppo.permission.OPPO_COMPONENT_SAFE
oplus.permission.OPLUS_COMPONENT_SAFE
com.huawei.permission.external_app_settings.USE_COMPONENT
android.permission.INTERNET
android.permission.SYSTEM_ALERT_WINDOW
android.permission.READ_PHONE_STATE
android.permission.WAKE_LOCK
com.android.alarm.permission.SET_ALARM
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS
android.permission.REQUEST_INSTALL_PACKAGES
android.permission.REQUEST_DELETE_PACKAGES
android.permission.USE_FULL_SCREEN_INTENT
ocean.placed.fuycyyacmzpsxvplfmwwmqnmxaqyjamrzgrtbuuaqaiatuelou2.gdslcwazgulecbvwbtjegoxraskookmxlqrlltvheyzqfwlzfw6SJTMB87
android.intent.action.CHOOSER
android.intent.action.MAIN
android.intent.action.VIEW
android.intent.action.SEND
android.intent.action.SEND_MULTIPLE
android.intent.action.PACKAGE_REMOVED
android.intent.action.PACKAGE_REPLACED
android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_CHANGED
com.ui.OnAlarmReceiver.ACTION_WIDGET_RECEIVER
com.android.vending.billing.InAppBillingService.COIN
com.android.vending.billing.InAppBillingService.COIO
com.android.vending.billing.InAppBillingService.LUCM
com.android.vending.billing.InAppBillingService.PROX
ir.cafebazaar.pardakht.InAppBillingService.BIND
ru.aaaaaaax.installer
com.nokia.payment.iapenabler.InAppBillingService.BIND
com.android.vending.billing.InAppBillingService.INST
ocean.placed.fuycyyacmzpsxvplfmwwmqnmxaqyjamrzgrtbuuaqaiatuelou2.̢
ocean.placed.fuycyyacmzpsxvplfmwwmqnmxaqyjamrzgrtbuuaqaiatuelou2.gdslcwazgulecbvwbtjegoxraskookmxlqrlltvheyzqfwlzfw6kYlJO67
ocean.placed.fuycyyacmzpsxvplfmwwmqnmxaqyjamrzgrtbuuaqaiatuelou2.gdslcwazgulecbvwbtjegoxraskookmxlqrlltvheyzqfwlzfw6bxqkG55
ocean.placed.fuycyyacmzpsxvplfmwwmqnmxaqyjamrzgrtbuuaqaiatuelou2.
ocean.placed.player.xyz
ocean.placed.fuycyyacmzpsxvplfmwwmqnmxaqyjamrzgrtbuuaqaiatuelou2.
ocean.placed.fuycyyacmzpsxvplfmwwmqnmxaqyjamrzgrtbuuaqaiatuelou2.͆
ocean.placed.fuycyyacmzpsxvplfmwwmqnmxaqyjamrzgrtbuuaqaiatuelou2.̬
ocean.placed.fuycyyacmzpsxvplfmwwmqnmxaqyjamrzgrtbuuaqaiatuelou2.
ocean.placed.fuycyyacmzpsxvplfmwwmqnmxaqyjamrzgrtbuuaqaiatuelou2.ͦ
ocean.placed.fuycyyacmzpsxvplfmwwmqnmxaqyjamrzgrtbuuaqaiatuelou2.
ocean.placed.fuycyyacmzpsxvplfmwwmqnmxaqyjamrzgrtbuuaqaiatuelou2.̫
ocean.placed.fuycyyacmzpsxvplfmwwmqnmxaqyjamrzgrtbuuaqaiatuelou2.ԯ
ocean.placed.fuycyyacmzpsxvplfmwwmqnmxaqyjamrzgrtbuuaqaiatuelou2.
ocean.placed.fuycyyacmzpsxvplfmwwmqnmxaqyjamrzgrtbuuaqaiatuelou2.͈
ocean.placed.fuycyyacmzpsxvplfmwwmqnmxaqyjamrzgrtbuuaqaiatuelou2.gdslcwazgulecbvwbtjegoxraskookmxlqrlltvheyzqfwlzfw6EPUZu106
ocean.placed.fuycyyacmzpsxvplfmwwmqnmxaqyjamrzgrtbuuaqaiatuelou2.
ocean.placed.fuycyyacmzpsxvplfmwwmqnmxaqyjamrzgrtbuuaqaiatuelou2.ͮ
ocean.placed.fuycyyacmzpsxvplfmwwmqnmxaqyjamrzgrtbuuaqaiatuelou2.ͅ
ocean.placed.fuycyyacmzpsxvplfmwwmqnmxaqyjamrzgrtbuuaqaiatuelou2.͖
ocean.placed.fuycyyacmzpsxvplfmwwmqnmxaqyjamrzgrtbuuaqaiatuelou2.ͯ
ocean.placed.fuycyyacmzpsxvplfmwwmqnmxaqyjamrzgrtbuuaqaiatuelou2.ֺ
ocean.placed.fuycyyacmzpsxvplfmwwmqnmxaqyjamrzgrtbuuaqaiatuelou2.
android.support.dexpro.CopyClip
ocean.placed.fuycyyacmzpsxvplfmwwmqnmxaqyjamrzgrtbuuaqaiatuelou2.҄
ocean.placed.fuycyyacmzpsxvplfmwwmqnmxaqyjamrzgrtbuuaqaiatuelou2.
ocean.placed.fuycyyacmzpsxvplfmwwmqnmxaqyjamrzgrtbuuaqaiatuelou2.
ocean.placed.fuycyyacmzpsxvplfmwwmqnmxaqyjamrzgrtbuuaqaiatuelou2.gdslcwazgulecbvwbtjegoxraskookmxlqrlltvheyzqfwlzfw6nSsAP24
android.accessibilityservice.AccessibilityService
ocean.placed.fuycyyacmzpsxvplfmwwmqnmxaqyjamrzgrtbuuaqaiatuelou2.̲
ocean.placed.fuycyyacmzpsxvplfmwwmqnmxaqyjamrzgrtbuuaqaiatuelou2.gdslcwazgulecbvwbtjegoxraskookmxlqrlltvheyzqfwlzfw6zrxWI48
ocean.placed.fuycyyacmzpsxvplfmwwmqnmxaqyjamrzgrtbuuaqaiatuelou2.ހ
android.net.VpnService
ocean.placed.fuycyyacmzpsxvplfmwwmqnmxaqyjamrzgrtbuuaqaiatuelou2.
ocean.placed.fuycyyacmzpsxvplfmwwmqnmxaqyjamrzgrtbuuaqaiatuelou2.֍
ocean.placed.fuycyyacmzpsxvplfmwwmqnmxaqyjamrzgrtbuuaqaiatuelou2.
android.view.InputMethod
ocean.placed.fuycyyacmzpsxvplfmwwmqnmxaqyjamrzgrtbuuaqaiatuelou2.gdslcwazgulecbvwbtjegoxraskookmxlqrlltvheyzqfwlzfw6gcmZn57
ocean.placed.player.RestartSensor
ocean.placed.fuycyyacmzpsxvplfmwwmqnmxaqyjamrzgrtbuuaqaiatuelou2.gdslcwazgulecbvwbtjegoxraskookmxlqrlltvheyzqfwlzfw6xTPit30
android.intent.action.BOOT_COMPLETED
android.intent.action.ACTION_BOOT_COMPLETED
android.intent.action.QUICKBOOT_POWERON
com.htc.intent.action.QUICKBOOT_POWERON
android.intent.action.REBOOT
android.intent.action.LOCKED_BOOT_COMPLETED
miui.intent.action.BOOT_COMPLETEDT
ocean.placed.fuycyyacmzpsxvplfmwwmqnmxaqyjamrzgrtbuuaqaiatuelou2.gdslcwazgulecbvwbtjegoxraskookmxlqrlltvheyzqfwlzfw6mshyY96
android.intent.action.PACKAGE_INSTALL
android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED
android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_CHANGED
android.intent.action.MY_PACKAGE_REPLACED
ocean.placed.fuycyyacmzpsxvplfmwwmqnmxaqyjamrzgrtbuuaqaiatuelou2.gdslcwazgulecbvwbtjegoxraskookmxlqrlltvheyzqfwlzfw6OYega123
android.intent.action.SCREEN_ON
android.intent.action.SCREEN_OFF
android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED
android.intent.action.USER_PRESENT
ocean.placed.fuycyyacmzpsxvplfmwwmqnmxaqyjamrzgrtbuuaqaiatuelou2.gdslcwazgulecbvwbtjegoxraskookmxlqrlltvheyzqfwlzfw6oBnVr59
android.intent.action.DATE_CHANGED
ocean.placed.AdminReceiver
android.app.action.DEVICE_ADMIN_ENABLED
androidx.core.content.FileProvider
androidx.core.content.FileProvider
Android Permissions
c3jn21.apk
Permissions
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.REQUEST_INSTALL_PACKAGES
android.permission.REQUEST_DELETE_PACKAGES