TR_DEV_PORNO[.]apk | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
TR_DEV_PORNO.apk
Size 2.8MB
Sample211011-27d4aaadcm
SHA256 c5888a824cba71e4c6ebca35aad174120f8b681e48af867dfa95ef6a4ba0dc25
MD5 f8106603bfede22394a73d2fb0a082f0
SHA1 628f5fc3a684aeffb6eef6b8e7cd83c916776ca7
SHA512 52d77a5f9f5d8099d7c2129e5de00073b49d5e8a4fd62dbc7a39a91ab92ae59c2f0e139b4e966cbd38f5d883534a15a6091735b0aaf8b4b359e40c5235b18021
MD5 SHA1 SHA512

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 7 IoCs

description	ioc
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows read access to the device's phone number(s).	android.permission.READ_PHONE_NUMBERS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE

File Explorer

TR_DEV_PORNO.apk

.apk 2.8MB

TR_DEV_PORNO.apk

SHA256 c5888a824cba71e4c6ebca35aad174120f8b681e48af867dfa95ef6a4ba0dc25
MD5 f8106603bfede22394a73d2fb0a082f0
SHA1 628f5fc3a684aeffb6eef6b8e7cd83c916776ca7
SHA512 52d77a5f9f5d8099d7c2129e5de00073b49d5e8a4fd62dbc7a39a91ab92ae59c2f0e139b4e966cbd38f5d883534a15a6091735b0aaf8b4b359e40c5235b18021
MD5 SHA1 SHA512

android

com.run.dance

com.open.stove.CXxCrYkXlSpGpTdFsZfHcSuIdMyGrIu

com.open.stove.qvshcdxauijejgy.lygg

com.open.stove.SHcSpRoHpWj

com.open.stove.QWcBpKu

com.open.stove.QRjFwTgBuNsMwWzTfTtRqGlJb

com.google.android.gms.common.api.GoogleApiActivity

com.open.stove.AYlCkPpAgCcSzLzCkUiHuTxPnEkHcUhHhEmGrPmXaGbXxMpPmDzGeCw

com.open.stove.KRqBdIfQzCzStHxUoEf

com.open.stove.nhypkuiyuezvtdf.uslvznrqnjnd

com.open.stove.NBwWsLjOwJwJaTp

com.open.stove.QZnUmYbTbIyOnYcOzAkQoFfRxFnAkIlIqEbQtIbIjFaWuFgJb

com.open.stove.udzxftli

android.intent.action.SENDTO android.intent.action.SEND

com.open.stove.SUhLiZzWpPcKjDdMiTkQjSuCqEkOwLtOlJoKlNwJyUeZlXkHs

com.open.stove.SEeLqQeXuZwTzPuSiAwEuGuLmUrQcJgUgArNbAb

com.open.stove.EPhZuEkDyTiWeEoFbApNsZfTqCuRwZuEzGbDqFq

com.open.stove.UOeMoJjNyYa

com.open.stove.qvshcdxauijejgy.qyqkbrad

com.open.stove.EOeNiGqYpKqZxOeJrAlPh

com.open.stove.qvshcdxauijejgy.pngbax

com.open.stove.UXhEqEnSqZhKkWgWrBlDrArAw

com.open.stove.AWuStBoWhQtGdKbTk

com.open.stove.bgjpnkkdeav

android.intent.action.MAIN

com.open.stove.YDyNuTt

com.open.stove.ITmXlKtZaShTxNxDtSdMcEnOfBxTgOpExUaNeJl

com.open.stove.qvshcdxauijejgy.bwnmxqm

com.open.stove.FRkFiBxPcTcIkHn

com.open.stove.qvshcdxauijejgy.qkxbslsyyqk

com.open.stove.PDlSqNtSzUxNwPeDsOa

com.open.stove.LNxQjEqDhWoQoYtXdTdLoXnBlXyHaBuLbUtAiMjKyQlFt

com.open.stove.CRpOcKjPfTeWcPxFkQqPrJqEhSxJySqFtRzLeMh

com.open.stove.SRgUfLlOyUlQrSfHkRuEn

com.open.stove.QSgGoGiAcKlXm

com.open.stove.BHjFdOcOkHmPzSyCtOo

Android Permissions

TR_DEV_PORNO.apk

Permissions

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.RECEIVE_SMS

android.permission.WAKE_LOCK

android.permission.GET_TASKS

android.permission.DISABLE_KEYGUARD

android.permission.ACCESS_WIFI_STATE

android.permission.QUICKBOOT_POWERON

android.permission.SEND_SMS

android.permission.RECEIVE_LAUNCH_BROADCASTS

android.permission.READ_CONTACTS

android.permission.ACTION_MANAGE_OVERLAY_PERMISSION

android.permission.READ_PHONE_NUMBERS

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_SMS

android.permission.QUERY_ALL_PACKAGES

android.permission.CALL_PHONE

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.REQUEST_DELETE_PACKAGES

android.permission.REQUEST_INSTALL_PACKAGES