Managed XDR

tmp-8ea4af1d-1689-4038...b630d72a-inatboxtv.apk — malware analysis report

File info

Filename
tmp-8ea4af1d-1689-4038-a631-ebebb630d72a-inatboxtv.apk
File type
Zip archive data, at least v1.0 to extract
File size
4.6 MB
First seen
Last seen

Environment

droid7/x86 ru

Hashes

SHA1
fa16b919b3c385e9a39cd59b5e84b91b648b612b
SHA256
cbc0f3e37209987370ebd8efc9b62cbeeb367bdc6a3e4d5b07d69bce83da41f8
MD5
42183e8a7e3ae8e89161e27f7e5a5cd2

Signatures

Other

coper: Coper banking trojan
dexclassloader: Uses class loader to executre dynamic code
is_device_admin: Check accessibility - device admin
dynamic_load: Uses undocumented methods to load apk/dex/classes
acquire: Acquires the wake lock
skip_main_activity: Abort loading MainActivity
get_line1_num: Gets phone number
wake_lock: Creates a new wake lock
telephony_getsimcountryiso: Access country code of SIM
dex_elements: Modifies classes path (possibly, dynamic code loading)
reflection: Uses reflection
framework_check: Checks frida/xposed/substrate
sim_operator_name: Fetches SIM-SPN
register_receiver: Registers broadcast receiver
read_or_write_global_settings: Read or write global settings
shared_prefs: Uses shared preferences
trowable: Throwable exceptions
start_activity: Starts activity
load_jni_lib: Loads native library
start_service: Starts service
keyguard_manager: Interaction with Keyguard Manager
alarm_manager: Sets a timer
get_runtime: Gets Runtime class
connect: Opening a connection
read_or_write_secure_settings: Read or write secure settings