brata | AntiSPAM (6)[.]apk

General

Target

AntiSPAM (6).apk
Size

1.7MB
MD5

46914beee72d9ea47a905cc4d01db13e
SHA1

07e4bd0d66a87268202fb634956b6fbf17063d5d
SHA256

37a0f317b897f23f5a6ba4a6b1c5e03a80333ff81bc8c1fadc09eb4c1914797d
SHA512

df39d253d986b53152c4249cad2bb2a66510200f10b949a59aaff56352cd307d579d095230860ed9c9e3f21fe09d44ff3735350f38206ab90add79696af22510
SSDEEP

49152:aWHVnwqKSpXgIUkSA60Jibi+smwGhHxb9Euk1R7eyYCoX/DVMKZ:dHtwqXgIBj60I/weR+eyYbPDac

Score

10^/10

brata

resource	yara_rule
sample	family_brata2

Requests dangerous framework permissions 3 IoCs

Processes:

description	ioc
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE

Permissions

android.permission.VIBRATE

android.permission.INTERNET

android.permission.WAKE_LOCK

android.permission.READ_SMS

android.permission.FOREGROUND_SERVICE

android.permission.REQUEST_DELETE_PACKAGES

android.permission.READ_PHONE_STATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.ACTION_MANAGE_OVERLAY_PERMISSION

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.CALL_PHONE

android.permission.WRITE_SETTINGS