48eaa25ffccc333c618ebbce490ec1f52a9b2bbdfb557467640b222e24c6f1b6

General

Target

48eaa25ffccc333c618ebbce490ec1f52a9b2bbdfb557467640b222e24c6f1b6
Size

2.4MB
MD5

c557b40a0481dfd4a3c10641c22393ac
SHA1

d721d9b62ee0deac789e3c76981ed65468441ac3
SHA256

48eaa25ffccc333c618ebbce490ec1f52a9b2bbdfb557467640b222e24c6f1b6
SHA512

052cbb7e520347637893171cde62490dc461b3b541256d9535fa56dbab39300f15860874ff56290f228621f361411a729b7e664976cd2494c405ba6acd4d4848
SSDEEP

49152:0DLGYvFXQmkU/S+h1PEWESNzpUN96Ofy+DuxhaJl8EpV0EZji3oDn:0DLzdVR/SGfkAMIxhaJl8En0E5i3oDn

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 20 IoCs

description	ioc
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether.	android.permission.PROCESS_OUTGOING_CALLS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether.	android.permission.PROCESS_OUTGOING_CALLS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to monitor incoming MMS messages.	android.permission.RECEIVE_MMS
Allows an application to receive WAP push messages.	android.permission.RECEIVE_WAP_PUSH
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS

Files

48eaa25ffccc333c618ebbce490ec1f52a9b2bbdfb557467640b222e24c6f1b6
.apk android arch:arm

ro.ambngtgqlzi.nxhvppmqru.s5492.m0fb0811ea1f1

.AysaxaqmActivity

Activities

.AysaxaqmActivity

android.intent.action.MAIN

.UbooevvfjrkpvwActivity

ro.ambngtgqlzi.nxhvppmqru.s5492.m0fb0811ea1f1.JGJEICNNC

Permissions

android.permission.READ_SMS
android.permission.INTERNET
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.DISABLE_KEYGUARD
android.permission.READ_PHONE_STATE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.RECEIVE_SMS
android.permission.READ_PHONE_STATE
android.permission.PROCESS_OUTGOING_CALLS
android.permission.GET_TASKS
android.permission.CALL_PHONE
com.android.launcher.permission.INSTALL_SHORTCUT
android.permission.INTERNET
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.INSTALL_PACKAGES
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.ACCESS_NETWORK_STATE
android.permission.PROCESS_OUTGOING_CALLS
android.permission.GET_TASKS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.CHANGE_NETWORK_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.READ_PHONE_STATE
android.permission.SEND_SMS
android.permission.VIBRATE
android.permission.GET_TASKS
android.permission.INTERNET
android.permission.DISABLE_KEYGUARD
android.permission.ACCESS_WIFI_STATE
android.permission.READ_SMS
android.permission.RECEIVE_SMS
android.permission.WRITE_SMS
android.permission.SEND_SMS
android.permission.RECEIVE_SMS
android.permission.RECEIVE_MMS
android.permission.RECEIVE_WAP_PUSH
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.SEND_SMS
android.permission.RECEIVE_SMS

Receivers

.JpzmfusovuReceiver

android.net.conn.CONNECTIVITY_CHANGE

.VbregiyyReceiver

android.intent.action.BOOT_COMPLETED
android.provider.Telephony.SMS_RECEIVED
android.intent.action.PHONE_STATE
android.intent.action.NEW_OUTGOING_CALL

.TqcmdlbyReceiver

android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED

.PnimjxkejhhrReceiver

android.intent.action.DATA_SMS_RECEIVED
android.provider.Telephony.WAP_PUSH_RECEIVED
android.provider.Telephony.SMS_RECEIVED

.CllrtygyReceiver

android.intent.action.BATTERY_CHANGED
android.intent.action.SIM_STATE_CHANGED
android.intent.action.NOTIFICATION_ADD
android.intent.action.SERVICE_STATE
android.intent.action.NOTIFICATION_REMOVE
android.intent.action.NOTIFICATION_UPDATE
android.bluetooth.adapter.action.STATE_CHANGED
android.net.wifi.WIFI_STATE_CHANGED
android.intent.action.ANY_DATA_STATE
android.net.wifi.STATE_CHANGE
android.intent.action.BOOT_COMPLETED
android.intent.action.SCREEN_ON
android.intent.action.USER_PRESENT

.HldzwpdnmcReceiver

android.net.conn.CONNECTIVITY_CHANGE

Services

.BirtgService

ro.ambngtgqlzi.nxhvppmqru.s5492.m0fb0811ea1f1.ANPLE

.CmterService

ro.ambngtgqlzi.nxhvppmqru.s5492.m0fb0811ea1f1.RWSCKXH

.LlmkujpwpgvService

ro.ambngtgqlzi.nxhvppmqru.s5492.m0fb0811ea1f1.VLNRU

.IpgonjegrService

ro.ambngtgqlzi.nxhvppmqru.s5492.m0fb0811ea1f1.UPEYYVPCMKV

.AygbofgvgService

ro.ambngtgqlzi.nxhvppmqru.s5492.m0fb0811ea1f1.VKYODGC

Android Permissions

48eaa25ffccc333c618ebbce490ec1f52a9b2bbdfb557467640b222e24c6f1b6

Permissions

android.permission.READ_SMS

android.permission.INTERNET

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.DISABLE_KEYGUARD

android.permission.READ_PHONE_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.RECEIVE_SMS

android.permission.READ_PHONE_STATE

android.permission.PROCESS_OUTGOING_CALLS

android.permission.GET_TASKS

android.permission.CALL_PHONE

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.INTERNET

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INSTALL_PACKAGES

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.ACCESS_NETWORK_STATE

android.permission.PROCESS_OUTGOING_CALLS

android.permission.GET_TASKS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.CHANGE_NETWORK_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.SEND_SMS

android.permission.VIBRATE

android.permission.GET_TASKS

android.permission.INTERNET

android.permission.DISABLE_KEYGUARD

android.permission.ACCESS_WIFI_STATE

android.permission.READ_SMS

android.permission.RECEIVE_SMS

android.permission.WRITE_SMS

android.permission.SEND_SMS

android.permission.RECEIVE_SMS

android.permission.RECEIVE_MMS

android.permission.RECEIVE_WAP_PUSH

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.SEND_SMS

android.permission.RECEIVE_SMS

Sharing

General

Malware Config

Signatures

Files

ro.ambngtgqlzi.nxhvppmqru.s5492.m0fb0811ea1f1

.AysaxaqmActivity

Activities

.AysaxaqmActivity

.UbooevvfjrkpvwActivity

Permissions

Receivers

.JpzmfusovuReceiver

.VbregiyyReceiver

.TqcmdlbyReceiver

.PnimjxkejhhrReceiver

.CllrtygyReceiver

.HldzwpdnmcReceiver

Services

.BirtgService

.CmterService

.LlmkujpwpgvService

.IpgonjegrService

.AygbofgvgService

Android Permissions

48eaa25ffccc333c618ebbce490ec1f52a9b2bbdfb557467640b222e24c6f1b6