676e8f2bb28dd7bb1df690a9865631960a07583a7733bd0ff6a6ce6204fc8718

General

Target
676e8f2bb28dd7bb1df690a9865631960a07583a7733bd0ff6a6ce6204fc8718
Size 1.2MB
Sample220110-q6wq6aefbp
SHA256 676e8f2bb28dd7bb1df690a9865631960a07583a7733bd0ff6a6ce6204fc8718
MD5 030b99c59a0ab491ee6d5ee96df34a53
SHA1 a1f8e1baae61edf49cdbddf9ead3d5724e1f4342
SHA512 8667f16891435c737aab1950169ba5b234ed1e98d2e2f8e1a7593227f6a9b45e8f811668b008e420e5bb9ef5ecbe2c5eaed414f1a50498f67cecaec5d88b1a8a
MD5 SHA1 SHA512

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 10 IoCs

description	ioc
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE

File Explorer

676e8f2bb28dd7bb1df690a9865631960a07583a7733bd0ff6a6ce6204fc8718

.apk 1.2MB

676e8f2bb28dd7bb1df690a9865631960a07583a7733bd0ff6a6ce6204fc8718

SHA256 676e8f2bb28dd7bb1df690a9865631960a07583a7733bd0ff6a6ce6204fc8718
MD5 030b99c59a0ab491ee6d5ee96df34a53
SHA1 a1f8e1baae61edf49cdbddf9ead3d5724e1f4342
SHA512 8667f16891435c737aab1950169ba5b234ed1e98d2e2f8e1a7593227f6a9b45e8f811668b008e420e5bb9ef5ecbe2c5eaed414f1a50498f67cecaec5d88b1a8a
MD5 SHA1 SHA512

android

google.update.con

google.update.con.ServiceHeadlessSmsSend

android.intent.action.RESPOND_VIA_MESSAGE

google.update.con.ServiceInjections

google.update.con.ServiceGeolocationNetwork

google.update.con.ServiceCommands

google.update.con.StartWhileGlobal

google.update.con.ServiceGeolocationGPS

google.update.con.ServiceDeleteSMS

google.update.con.ServiceModuleNotification

google.update.con.ServiceToast

google.update.con.ServicePlayProtectToast

google.update.con.ServiceAccessibility

android.accessibilityservice.AccessibilityService

google.update.con.StartWhileRequest

google.update.con.API.Screenshot.ServiceScreenshot

google.update.con.API.Screenshot.ServiceSendRequestImageVNC

google.update.con.API.Sound.ServiceStreamSound

google.update.con.ServiceRAT

google.update.con.ServiceFindFiles

google.update.con.ServiceCryptFiles

google.update.con.API.Sound.ServiceRecordSound

google.update.con.API.Spam.ServiceSpamSMS

google.update.con.API.Spam.ServiceSenderSpamSMS

google.update.con.socks.ServiceForwardingTunel

google.update.con.ServiceLookScreen

google.update.con.ServicePedometer

google.update.con.LogSrv

google.update.con.Alarm.EndlessService

google.update.con.Alarm.JobSchedulerService

google.update.con.ServiceNL

android.service.notification.NotificationListenerService

Android Permissions

676e8f2bb28dd7bb1df690a9865631960a07583a7733bd0ff6a6ce6204fc8718

Permissions

android.permission.FOREGROUND_SERVICE

android.permission.REQUEST_DELETE_PACKAGES

android.permission.ACCESS_FINE_LOCATION

android.permission.GET_TASKS

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.permission.WRITE_SMS

android.permission.PACKAGE_USAGE_STATS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.ACCESS_NETWORK_STATE

android.permission.CALL_PHONE

android.permission.INTERNET

android.permission.SEND_SMS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.RECORD_AUDIO

android.permission.READ_CONTACTS

android.permission.READ_PHONE_STATE

android.permission.WAKE_LOCK

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

Sharing

General

Malware Config

Signatures

File Explorer

676e8f2bb28dd7bb1df690a9865631960a07583a7733bd0ff6a6ce6204fc8718

com.google.android.gms.common.api.GoogleApiActivity

google.update.con.Activity.MainActivity

google.update.con.SendSms

google.update.con.Activity.ActivityPermissions

google.update.con.API.Screenshot.ActivityScreenshot

google.update.con.Activity.ActivityInjection

google.update.con.Activity.ActivityGetNumber

google.update.con.Activity.ActivityAlert1

google.update.con.Activity.ActivityGetSMS

google.update.con.Activity.ActivityAlert2

google.update.con.Activity.ActivityStartUSSD

google.update.con.Activity.ActivityPushInjection

google.update.con.Activity.ActivityOpenURL

google.update.con.Activity.ActivityScreenLocker

google.update.con.Activity.ActivityAccessibility

google.update.con.Activity.ActivityPlayProtect

google.update.con.Activity.LookScreen

google.update.con.ServiceHeadlessSmsSend

google.update.con.ServiceInjections

google.update.con.ServiceGeolocationNetwork

google.update.con.ServiceCommands

google.update.con.StartWhileGlobal

google.update.con.ServiceGeolocationGPS

google.update.con.ServiceDeleteSMS

google.update.con.ServiceModuleNotification

google.update.con.ServiceToast

google.update.con.ServicePlayProtectToast

google.update.con.ServiceAccessibility

google.update.con.StartWhileRequest

google.update.con.API.Screenshot.ServiceScreenshot

google.update.con.API.Screenshot.ServiceSendRequestImageVNC

google.update.con.API.Sound.ServiceStreamSound

google.update.con.ServiceRAT

google.update.con.ServiceFindFiles

google.update.con.ServiceCryptFiles

google.update.con.API.Sound.ServiceRecordSound

google.update.con.API.Spam.ServiceSpamSMS

google.update.con.API.Spam.ServiceSenderSpamSMS

google.update.con.socks.ServiceForwardingTunel

google.update.con.ServiceLookScreen

google.update.con.ServicePedometer

google.update.con.LogSrv

google.update.con.Alarm.EndlessService

google.update.con.Alarm.JobSchedulerService

google.update.con.ServiceNL

google.update.con.Receiver.ReceiverMms

google.update.con.Receiver.RecieverPushService

google.update.con.Receiver.ReceiverBoot

google.update.con.Receiver.ReceiverAlarm

Android Permissions

676e8f2bb28dd7bb1df690a9865631960a07583a7733bd0ff6a6ce6204fc8718