111cfd455f836794e40c6b088ab8e73f8e673a79c18e559adcffa89630a51042

General

Target

111cfd455f836794e40c6b088ab8e73f8e673a79c18e559adcffa89630a51042
Size

9.6MB
MD5

7d56ecfd936eb03a020c9fc5c4ada352
SHA1

93fc21384378cb86a4641eddc82e25abeb6360bb
SHA256

111cfd455f836794e40c6b088ab8e73f8e673a79c18e559adcffa89630a51042
SHA512

e3bd22cf3a0d5f4645a7e8791ed78b13cb9fa7f6e4d1d4d291b8653da875462104958f2929fdf8b5305b695a455017eb563acd4a291d13368e8183471b79ba4e
SSDEEP

196608:/yIkOcHIcF+aZ0I+jzc5auyhmhy5k7PmoWVWtveXsLVNPDVfh:wOkIc0aZ1+jzOaJmhleomWFweB

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 11 IoCs

Processes:

description	ioc
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether.	android.permission.PROCESS_OUTGOING_CALLS
Allows an application to read the user's call log.	android.permission.READ_CALL_LOG
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows an application to write (but not read) the user's call log data.	android.permission.WRITE_CALL_LOG
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows the app to answer an incoming phone call.	android.permission.ANSWER_PHONE_CALLS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS

Files

111cfd455f836794e40c6b088ab8e73f8e673a79c18e559adcffa89630a51042
.apk android

com.red.rainbow

com.demo.prometheus.activity.MainActivity

Activities

com.demo.prometheus.activity.MainActivity

android.intent.action.MAIN

com.demo.prometheus.phonecallui.CallActivity

android.intent.action.DIAL
android.intent.action.VIEW
android.intent.action.DIAL

Permissions

android.permission.KILL_BACKGROUND_PROCESSES
android.permission.AUTHENTICATE_ACCOUNTS
android.permission.GET_ACCOUNTS
android.permission.WRITE_SYNC_SETTINGS
android.permission.CHANGE_WIFI_STATE
android.permission.GET_TASKS
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.PROCESS_OUTGOING_CALLS
android.permission.READ_CALL_LOG
android.permission.READ_CONTACTS
android.permission.WRITE_CONTACTS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.WRITE_CALL_LOG
android.permission.CALL_PHONE
android.permission.READ_PHONE_STATE
android.permission.MODIFY_PHONE_STATE
android.permission.ANSWER_PHONE_CALLS
android.permission.SYSTEM_ALERT_WINDOW
android.permission.WAKE_LOCK
android.permission.DISABLE_KEYGUARD
android.permission.READ_SMS
android.permission.RECEIVE_SMS
android.permission.REORDER_TASKS
android.permission.EXPAND_STATUS_BAR
android.permission.READ_LOGS

Receivers

com.demo.prometheus.receiver.ShowBr

android.intent.action.NEW_OUTGOING_CALL
android.intent.action.PHONE_STATE

com.demo.prometheus.receiver.MessageBr

android.provider.Telephony.SMS_RECEIVED

com.demo.prometheus.app.KeyboardBr

android.intent.action.CLOSE_SYSTEM_DIALOGS

com.demo.prometheus.phonecallui.CallPromptWindow$NotificationReceiver

com.red.rainbow.call_action

Services

com.demo.prometheus.phonecallui.PhoneCallService

android.telecom.InCallService

Android Permissions

111cfd455f836794e40c6b088ab8e73f8e673a79c18e559adcffa89630a51042

Permissions

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.AUTHENTICATE_ACCOUNTS

android.permission.GET_ACCOUNTS

android.permission.WRITE_SYNC_SETTINGS

android.permission.CHANGE_WIFI_STATE

android.permission.GET_TASKS

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.PROCESS_OUTGOING_CALLS

android.permission.READ_CALL_LOG

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WRITE_CALL_LOG

android.permission.CALL_PHONE

android.permission.READ_PHONE_STATE

android.permission.MODIFY_PHONE_STATE

android.permission.ANSWER_PHONE_CALLS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.WAKE_LOCK

android.permission.DISABLE_KEYGUARD

android.permission.READ_SMS

android.permission.RECEIVE_SMS

android.permission.REORDER_TASKS

android.permission.EXPAND_STATUS_BAR

android.permission.READ_LOGS

Sharing

General

Malware Config

Signatures

Files

com.red.rainbow

com.demo.prometheus.activity.MainActivity

Activities

com.demo.prometheus.activity.MainActivity

com.demo.prometheus.phonecallui.CallActivity

Permissions

Receivers

com.demo.prometheus.receiver.ShowBr

com.demo.prometheus.receiver.MessageBr

com.demo.prometheus.app.KeyboardBr

com.demo.prometheus.phonecallui.CallPromptWindow$NotificationReceiver

Services

com.demo.prometheus.phonecallui.PhoneCallService

Android Permissions

111cfd455f836794e40c6b088ab8e73f8e673a79c18e559adcffa89630a51042