Managed XDR

youtube-1-_enstr.apk — отчёт о динамическом анализе вредоносного файла

Информация о файле

Имя файла
youtube-1-_enstr.apk
Тип файла
Zip archive data, at least v2.0 to extract
Размер файла
6.2 MB
Первое обнаружение
Последнее обнаружение

Окружение

droid7/x86 ru

Хеши

SHA1
e7291d7feada5b74bc96240c62e4c5175a5d9e54
SHA256
be923dbcbf8dffcf0963445afb2b4a2d89c97c57f79acc679f181a8a07a70568
MD5
d2ed144b39ddca8148612299860d1a3a

Сигнатуры

Other

device_admin: Asks for device admin rights
metrics: Be used to get information from the screen
is_device_admin: Check accessibility - device admin
dynamic_load: Uses undocumented methods to load apk/dex/classes
acquire: Acquires the wake lock
accessibility_event: Intercepting Accessibility Events
super_user: Checks root access
wake_lock: Creates a new wake lock
telephony_getsimcountryiso: Access country code of SIM
ignoring_battery: Checks accessibility - unlimeted access to power options
power_vendor: Unlimited access to individual vendor power settings
reflection: Uses reflection
wifi_info: Gets wifi connections data
media_recorder: Using the MediaRecorder
register_receiver: Registers broadcast receiver
browsed_history: Reads web browser history
network: Checks internet connection
exit_system: Terminates current Java VM
read_or_write_global_settings: Read or write global settings
shared_prefs: Uses shared preferences
change_state_wifi_signature: Changes the state of Wi-Fi connection
read_or_write_system_settings: Read or write system settings
start_activity: Starts activity
load_jni_lib: Loads native library
start_service: Starts service
connect: Opening a connection
access_network_state: Network state access
suricata_alert: Malicious traffic detected
read_or_write_secure_settings: Read or write secure settings
change_screen_status: Display status is changed
notify: Attempts to create a notification