0da75ac97f4ec8954a961c270bcbe75bd2671c65cf25db45540b70f1ff403e31[.]zip

General

Target

0da75ac97f4ec8954a961c270bcbe75bd2671c65cf25db45540b70f1ff403e31.zip
Size

3.5MB
MD5

125cebbdbaf30dcb12d130a13da20529
SHA1

093013da9bd008240fdf314cd45a9dc80bf2f157
SHA256

8a3cb0110d45d71f335ae9c07afb38d9e4a57b46529ff045f8ec3de1e6926d0c
SHA512

9f8e2af8e977f44c238ef42128f45990f0923dc0059d3f397f322aea400895b6f0bbc063916646b219a43d2370abc1b5597b62f7c58a77f7f350fd5ce358e98c
SSDEEP

49152:kqQXFxqo8g842El7p8N7sBg6AXA8JX8mrfiNZkdvEtHJ7qe9X0Nw5iu5KTARFg:gFxa47p8N1Nw858mj+ZrtHJxyuUiFg

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 10 IoCs

Processes:

description	ioc
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to record audio.	android.permission.RECORD_AUDIO

Files

0da75ac97f4ec8954a961c270bcbe75bd2671c65cf25db45540b70f1ff403e31.zip
.zip

Password: infected
0da75ac97f4ec8954a961c270bcbe75bd2671c65cf25db45540b70f1ff403e31
.apk android

teach.report.crane

opinion.acquire.alert.kab

Activities

opinion.acquire.alert.hsryvt

android.intent.action.SEND
android.intent.action.SENDTO

opinion.acquire.alert.kab

android.intent.action.MAIN

Permissions

android.permission.INTERNET
android.permission.READ_SMS
android.permission.WAKE_LOCK
android.permission.READ_EXTERNAL_STORAGE
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS
android.permission.READ_PHONE_STATE
android.permission.CALL_PHONE
android.permission.SEND_SMS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.REQUEST_DELETE_PACKAGES
android.permission.ACCESS_NETWORK_STATE
android.permission.USE_FULL_SCREEN_INTENT
android.permission.REQUEST_COMPANION_USE_DATA_IN_BACKGROUND
android.permission.GET_ACCOUNTS
android.permission.RECEIVE_SMS
android.permission.ACCESS_NOTIFICATION_POLICY
android.permission.READ_CONTACTS
android.permission.FOREGROUND_SERVICE
android.permission.RECORD_AUDIO

Receivers

opinion.acquire.alert.ntniaogwdtvajns

android.provider.Telephony.WAP_PUSH_DELIVER

opinion.acquire.alert.fpzaguuovqa

android.app.action.DEVICE_ADMIN_DISABLED
android.app.action.ACTION_DEVICE_ADMIN_DISABLE_REQUESTED
android.app.action.DEVICE_ADMIN_ENABLED

opinion.acquire.alert.mlp

android.intent.action.BOOT_COMPLETED
android.intent.action.QUICKBOOT_POWERON
android.provider.Telephony.SMS_RECEIVED
com.htc.intent.action.QUICKBOOT_POWERON
android.intent.action.USER_PRESENT
android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED
android.provider.Telephony.SMS_DELIVER

Services

opinion.acquire.alert.pjescdyztkrl

android.service.notification.NotificationListenerService

opinion.acquire.alert.ncpwheytsjng

android.intent.action.RESPOND_VIA_MESSAGE

opinion.acquire.alert.arpewyiefnzkf

android.accessibilityservice.AccessibilityService

Sharing

General

Malware Config

Signatures

Files

Password: infected

teach.report.crane

opinion.acquire.alert.kab

Activities

opinion.acquire.alert.hsryvt

opinion.acquire.alert.kab

Permissions

Receivers

opinion.acquire.alert.ntniaogwdtvajns

opinion.acquire.alert.fpzaguuovqa

opinion.acquire.alert.mlp

Services

opinion.acquire.alert.pjescdyztkrl

opinion.acquire.alert.ncpwheytsjng

opinion.acquire.alert.arpewyiefnzkf