brata | AntiSPAM[.]apk

General

Target

AntiSPAM.apk
Size

1.7MB
MD5

5f1563097c7d2378a10d43baf7210839
SHA1

e5fdc48e7503b97be4e44af35d1133a0b7c18c39
SHA256

d774779a1e53d5c1012ec855cd6567d6e9f779299ddf0d07e96dde6c0679f4df
SHA512

a6534634eaf47da407fd608d753b6f3263fab95448049b1998ae096210d73990a53d92a08aa4379099ee3dce0bcbf51703d4cbbbec104c9a1c9a2952663d7521
SSDEEP

49152:CcYzQroW5d4TdUP9czJeGOjSJ6w9/TdMmD:4zQrD5d4s9QJieVTSW

Score

10^/10

brata

resource	yara_rule
sample	family_brata2

Requests dangerous framework permissions 3 IoCs

Processes:

description	ioc
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE

Permissions

android.permission.VIBRATE

android.permission.INTERNET

android.permission.WAKE_LOCK

android.permission.READ_SMS

android.permission.FOREGROUND_SERVICE

android.permission.REQUEST_DELETE_PACKAGES

android.permission.READ_PHONE_STATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.ACTION_MANAGE_OVERLAY_PERMISSION

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.CALL_PHONE

android.permission.WRITE_SETTINGS