flyingeagle | familife[.]apk

General

Target
familife.apk
Size 9.6MB
Sample260919-ar22mavvct
SHA256 27fcced2ba652576842ef3838e15cfac975b0e24c61ee858f948168cc32aaa7d
MD5 f49c6eeda2b37b037d70474eb46824ae
SHA1 c7c509d6335dd28198ab0eab8d0ffa6c65638fee
SHA512 b59632ade0b036b0a71622b40540c924a5e34207be50c4bb9472d31de352405398085a81f6682e4b4d65a6ecc74c7d636b79b6ac15305d0410317c958b7be71e
SSDEEP 196608:yGADpjGf3df400NUltI6TI82RGut9GQZmQYCB3:yGaqfNgxU1F2ZOTRCB
TLSH
T113A6018BFB48A85AC4F743B24539536191474C668B83D7C36D48723C19BBAE03F5ABC9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

rat flyingeagle

Malware Config

Extracted

Family

flyingeagle

C2

linebotlogin.life

Signatures

Family: FlyingEagle
FlyingEagle is an Android RAT first seen in 2026.
rat flyingeagle

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE

Requests dangerous framework permissions 10 IoCs

description	ioc
Allows applications to use exact alarm APIs.	android.permission.SCHEDULE_EXACT_ALARM
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an application a broad access to external storage in scoped storage.	android.permission.MANAGE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to record audio.	android.permission.RECORD_AUDIO

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
familife.apk

File Explorer

familife.apk

.apk 9.6MB

familife.apk

SHA256 27fcced2ba652576842ef3838e15cfac975b0e24c61ee858f948168cc32aaa7d
MD5 f49c6eeda2b37b037d70474eb46824ae
SHA1 c7c509d6335dd28198ab0eab8d0ffa6c65638fee
SHA512 b59632ade0b036b0a71622b40540c924a5e34207be50c4bb9472d31de352405398085a81f6682e4b4d65a6ecc74c7d636b79b6ac15305d0410317c958b7be71e
SSDEEP 196608:yGADpjGf3df400NUltI6TI82RGut9GQZmQYCB3:yGaqfNgxU1F2ZOTRCB
TLSH
T113A6018BFB48A85AC4F743B24539536191474C668B83D7C36D48723C19BBAE03F5ABC9
MD5 SHA1 SHA512 SSDEEP TLSH

android

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

17e8cceceb0d3d591fdb8383682e96158d02029390673a61302c2134e50e94cc

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=APK Builder,OU=Dev,O=Company,L=City,ST=State,C=CN

com.wqlxqjka.dsbbig

com.wqlxqjka.dsbbig.BootReceiver

android.intent.action.BOOT_COMPLETED android.intent.action.QUICKBOOT_POWERON com.htc.intent.action.QUICKBOOT_POWERON android.intent.action.REBOOT

com.wqlxqjka.dsbbig.ResetServices

android.intent.action.AIRPLANE_MODE android.intent.action.BATTERY_LOW android.intent.action.BATTERY_OKAY android.intent.action.LOCALE_CHANGED android.intent.action.TIMEZONE_CHANGED android.intent.action.TIME_TICK android.intent.action.DEVICE_STORAGE_LOW android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED android.intent.action.TIME_SET android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.work.diagnostics.REQUEST_DIAGNOSTICS

Android Permissions

familife.apk

Permissions

android.permission.FOREGROUND_SERVICE

android.permission.FOREGROUND_SERVICE_MEDIA_PROJECTION

android.permission.FOREGROUND_SERVICE_SPECIAL_USE

android.permission.SCHEDULE_EXACT_ALARM

android.permission.USE_EXACT_ALARM

android.permission.SYSTEM_ALERT_WINDOW

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WAKE_LOCK

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.REQUEST_DELETE_PACKAGES

android.permission.POST_NOTIFICATIONS

android.permission.MANAGE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_SMS

android.permission.READ_CONTACTS

android.permission.CAMERA

android.permission.RECORD_AUDIO

com.wqlxqjka.dsbbig.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

familife.apk

File Signature issue

com.wqlxqjka.dsbbig.ActivMain

com.wqlxqjka.dsbbig.MuteActivity

com.wqlxqjka.dsbbig.AlertActivity

com.wqlxqjka.dsbbig.BrodcastActivity

com.wqlxqjka.dsbbig.Webjector

com.wqlxqjka.dsbbig.RecordPayPassWord

com.wqlxqjka.dsbbig.MuteUninstall

com.wqlxqjka.dsbbig.PermissionsActivity

com.wqlxqjka.dsbbig.AccessibilityActivity

com.wqlxqjka.dsbbig.ActivityCaptureScreen

com.wqlxqjka.dsbbig.LockActivity

com.wqlxqjka.dsbbig.TransparentActivity

com.wqlxqjka.dsbbig.HiddenActivity

com.wqlxqjka.dsbbig.WorkServices

com.wqlxqjka.dsbbig.LocationMonitor

com.wqlxqjka.dsbbig.CameraCap

com.wqlxqjka.dsbbig.LiveKeysStrok

com.wqlxqjka.dsbbig.LiveChat

com.wqlxqjka.dsbbig.EngineWorker

com.wqlxqjka.dsbbig.MyJobService

com.wqlxqjka.dsbbig.ScreenCaps

com.wqlxqjka.dsbbig.AccessServices

androidx.work.impl.background.systemalarm.SystemAlarmService

androidx.work.impl.background.systemjob.SystemJobService

androidx.work.impl.foreground.SystemForegroundService

androidx.room.MultiInstanceInvalidationService

com.wqlxqjka.dsbbig.BootReceiver

com.wqlxqjka.dsbbig.ResetServices

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.core.content.FileProvider

androidx.startup.InitializationProvider

Sharing

General

Malware Config

Extracted

Signatures

File Explorer

familife.apk

File Signature issue

com.wqlxqjka.dsbbig.ActivMain

com.wqlxqjka.dsbbig.MuteActivity

com.wqlxqjka.dsbbig.AlertActivity

com.wqlxqjka.dsbbig.BrodcastActivity

com.wqlxqjka.dsbbig.Webjector

com.wqlxqjka.dsbbig.RecordPayPassWord

com.wqlxqjka.dsbbig.MuteUninstall

com.wqlxqjka.dsbbig.PermissionsActivity

com.wqlxqjka.dsbbig.AccessibilityActivity

com.wqlxqjka.dsbbig.ActivityCaptureScreen

com.wqlxqjka.dsbbig.LockActivity

com.wqlxqjka.dsbbig.TransparentActivity

com.wqlxqjka.dsbbig.HiddenActivity

com.wqlxqjka.dsbbig.WorkServices

com.wqlxqjka.dsbbig.LocationMonitor

com.wqlxqjka.dsbbig.CameraCap

com.wqlxqjka.dsbbig.LiveKeysStrok

com.wqlxqjka.dsbbig.LiveChat

com.wqlxqjka.dsbbig.EngineWorker

com.wqlxqjka.dsbbig.MyJobService

com.wqlxqjka.dsbbig.ScreenCaps

com.wqlxqjka.dsbbig.AccessServices

androidx.work.impl.background.systemalarm.SystemAlarmService

androidx.work.impl.background.systemjob.SystemJobService

androidx.work.impl.foreground.SystemForegroundService

androidx.room.MultiInstanceInvalidationService

com.wqlxqjka.dsbbig.BootReceiver

com.wqlxqjka.dsbbig.ResetServices

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.core.content.FileProvider

androidx.startup.InitializationProvider

Android Permissions

familife.apk