59126_Video_Oynatıcı[.]apk

General

Target
59126_Video_Oynatıcı.apk
Size 2.5MB
Sample220106-q6y7aabffm
SHA256 49d69ac875a07acf7aa353a52d5ff75fac3e39401ab051f1f2804ecb2c336a0a
MD5 0bb89bd490d74428e30545a7c60e595c
SHA1 3183e82c86cfcdf77404c69ad44e689329310138
SHA512 d701b39fa209cb8ae33e7b3bf3ca1636a40f2dac855bc5244b9ccb6ba4b07e10200cc2e314a06cf9a3b5db7fdd93427dbcb6a500d4d6ff4baf902ec357819059
MD5 SHA1 SHA512

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 11 IoCs

description	ioc
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows read access to the device's phone number(s).	android.permission.READ_PHONE_NUMBERS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an app to access location in the background.	android.permission.ACCESS_BACKGROUND_LOCATION
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION

File Explorer

59126_Video_Oynatıcı.apk

.apk 2.5MB

59126_Video_Oynatıcı.apk

SHA256 49d69ac875a07acf7aa353a52d5ff75fac3e39401ab051f1f2804ecb2c336a0a
MD5 0bb89bd490d74428e30545a7c60e595c
SHA1 3183e82c86cfcdf77404c69ad44e689329310138
SHA512 d701b39fa209cb8ae33e7b3bf3ca1636a40f2dac855bc5244b9ccb6ba4b07e10200cc2e314a06cf9a3b5db7fdd93427dbcb6a500d4d6ff4baf902ec357819059
MD5 SHA1 SHA512

android

com.urge.useless

com.pond.rack.bot.HelperAdmin$MyHomeReceiver

android.app.action.DEVICE_ADMIN_ENABLED

com.pond.rack.bot.receivers.MainReceiver

android.intent.action.ACTION_POWER_CONNECTED android.intent.action.BATTERY_OKAY android.net.wifi.WIFI_STATE_CHANGED android.intent.action.SCREEN_OFF android.intent.action.DREAMING_STOPPED android.intent.action.BOOT_COMPLETED android.net.conn.CONNECTIVITY_CHANGE cn.RestartedViaAlarm android.intent.action.ACTION_POWER_DISCONNECTED android.intent.action.BATTERY_LOW android.intent.action.SCREEN_ON android.intent.action.BATTERY_CHANGED android.intent.action.REBOOT android.intent.action.EXTERNAL_APPLICATIONS_AVAILABLE

com.pond.rack.core.PeriodicJobReceiver

android.intent.action.ACTION_POWER_CONNECTED android.intent.action.BATTERY_OKAY android.net.wifi.WIFI_STATE_CHANGED android.intent.action.SCREEN_OFF android.intent.action.DREAMING_STOPPED android.intent.action.BOOT_COMPLETED android.net.conn.CONNECTIVITY_CHANGE cn.RestartedViaAlarm android.intent.action.ACTION_POWER_DISCONNECTED android.intent.action.BATTERY_LOW android.intent.action.SCREEN_ON android.intent.action.BATTERY_CHANGED android.intent.action.REBOOT android.intent.action.EXTERNAL_APPLICATIONS_AVAILABLE android.intent.action.QUICKBOOT_POWERON com.htc.intent.action.QUICKBOOT_POWERON android.intent.action.USER_PRESENT android.intent.action.PACKAGE_ADDED android.intent.action.PACKAGE_REMOVED android.provider.Telephony.SMS_RECEIVED android.intent.action.SCREEN_ON android.intent.action.EXTERNAL_APPLICATIONS_AVAILABLE android.net.conn.CONNECTIVITY_CHANGE android.net.wifi.WIFI_STATE_CHANGED android.intent.action.DREAMING_STOPPED

com.pond.rack.bot.sms.SmsReceiver

android.provider.Telephony.SMS_DELIVER

com.pond.rack.bot.sms.MmsReceiver

android.provider.Telephony.WAP_PUSH_DELIVER

com.pond.rack.core.injects_core.CHandler

Android Permissions

59126_Video_Oynatıcı.apk

Permissions

android.permission.RECEIVE_LAUNCH_BROADCASTS

android.permission.RECEIVE_SMS

android.permission.REQUEST_DELETE_PACKAGES

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.CAPTURE_VIDEO_OUTPUT

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.READ_PHONE_NUMBERS

com.google.android.gms.permission.ACTIVITY_RECOGNITION

android.permission.READ_CONTACTS

android.permission.ACCESS_BACKGROUND_LOCATION

android.permission.CALL_PHONE

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.QUERY_ALL_PACKAGES

android.permission.INTERNET

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.WRITE_SMS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.DISABLE_KEYGUARD

android.permission.WAKE_LOCK

android.permission.SEND_SMS

android.permission.RECORD_AUDIO

android.permission.ACCESS_COARSE_LOCATION

android.permission.READ_SMS

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.REORDER_TASKS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.QUICKBOOT_POWERON

android.permission.BLUETOOTH

android.permission.ACTION_MANAGE_OVERLAY_PERMISSION

android.permission.ACCESS_FINE_LOCATION

android.permission.GET_TASKS

59126_Video_Oynatıcı.apk

com.pond.rack.MainActivity

com.pond.rack.bot.PermissionsActivity

com.pond.rack.bot.components.locker.LockerActivity

com.pond.rack.bot.components.locker.LockerActivity$DummyActivity

com.pond.rack.bot.components.screencast.ScreencastStartActivity

com.pond.rack.bot.components.screencast.UnlockActivity

com.pond.rack.bot.sms.ComposeSmsActivity

com.pond.rack.core.injects_core.Screen

com.pond.rack.bot.components.injects.system.InjAccessibilityService

com.pond.rack.bot.components.socks5.Socks5ProxyService

com.pond.rack.bot.components.screencast.ScreencastService

com.pond.rack.core.PeriodicJobService

com.pond.rack.bot.sms.HeadlessSmsSendService

com.pond.rack.core.injects_core.Worker

com.pond.rack.bot.HelperAdmin$MyHomeReceiver

com.pond.rack.bot.receivers.MainReceiver

com.pond.rack.core.PeriodicJobReceiver

com.pond.rack.bot.sms.SmsReceiver

com.pond.rack.bot.sms.MmsReceiver

com.pond.rack.core.injects_core.CHandler

android.support.v4.content.FileProvider

Sharing

General

Malware Config

Signatures

File Explorer

59126_Video_Oynatıcı.apk

com.pond.rack.MainActivity

com.pond.rack.bot.PermissionsActivity

com.pond.rack.bot.components.locker.LockerActivity

com.pond.rack.bot.components.locker.LockerActivity$DummyActivity

com.pond.rack.bot.components.screencast.ScreencastStartActivity

com.pond.rack.bot.components.screencast.UnlockActivity

com.pond.rack.bot.sms.ComposeSmsActivity

com.pond.rack.core.injects_core.Screen

com.pond.rack.bot.components.injects.system.InjAccessibilityService

com.pond.rack.bot.components.socks5.Socks5ProxyService

com.pond.rack.bot.components.screencast.ScreencastService

com.pond.rack.core.PeriodicJobService

com.pond.rack.bot.sms.HeadlessSmsSendService

com.pond.rack.core.injects_core.Worker

com.pond.rack.bot.HelperAdmin$MyHomeReceiver

com.pond.rack.bot.receivers.MainReceiver

com.pond.rack.core.PeriodicJobReceiver

com.pond.rack.bot.sms.SmsReceiver

com.pond.rack.bot.sms.MmsReceiver

com.pond.rack.core.injects_core.CHandler

android.support.v4.content.FileProvider

Android Permissions

59126_Video_Oynatıcı.apk