b6ff1b93d1effc80453fcae9911e85d52ce528bead358a88a0d5b907576b0e8f

General

Target

b6ff1b93d1effc80453fcae9911e85d52ce528bead358a88a0d5b907576b0e8f
Size

470KB
MD5

84e2ef97e315e1bc2fdcf8d815a3e256
SHA1

8e51c4ee9f0521dc85c1dfb95869b5ffd8f0a421
SHA256

b6ff1b93d1effc80453fcae9911e85d52ce528bead358a88a0d5b907576b0e8f
SHA512

ccf492cf1d0dc71ebc0b7f19ef446b34ea615c3ca312caa7d2319dd3c404f86ed53613b9181226e36f029538e9c3c638aed9d9c424a7fbbf89d1ae6d61e730ea
SSDEEP

12288:9889dMCZlKhweGM638LXqbLqbfqbEqbaqbyFMFwFNFB:988TMyrX38LOaGbRyW6Pb

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 7 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS

Files

b6ff1b93d1effc80453fcae9911e85d52ce528bead358a88a0d5b907576b0e8f
.apk android

exxrrbljphj.btwtla

.wibmdifeuy

Activities

.wibmdifeuy

android.intent.action.MAIN

rscom.rsantivirus.RSAVEMainActivity

android.intent.action.MAIN

rscom.rsantivirus.RSAVEInstalledActivity

android.intent.action.MAIN

rscom.rsantivirus.RSAVEUpdaterActivity

android.intent.action.MAIN

Permissions

android.permission.ACCESS_NETWORK_STATE
android.permission.CHANGE_NETWORK_STATE
com.android.launcher.permission.INSTALL_SHORTCUT
com.android.launcher.permission.UNINSTALL_SHORTCUT
android.permission.ACCESS_NETWORK_STATE
android.permission.RECEIVE_BOOT_COMPLETED
com.android.alarm.permission.SET_ALARM
android.permission.SYSTEM_ALERT_WINDOW
android.permission.WRITE_SETTINGS
android.permission.WRITE_SECURE_SETTINGS
android.permission.ACCESS_WIFI_STATE
android.permission.UPDATE_DEVICE_STATS
android.permission.CHANGE_WIFI_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.INTERNET
android.permission.READ_PHONE_STATE
android.permission.READ_SMS
android.permission.SEND_SMS
android.permission.RECEIVE_SMS
android.permission.READ_CONTACTS
android.permission.DELETE_PACKAGES
android.permission.GET_PACKAGE_SIZE
android.permission.INSTALL_PACKAGES
android.permission.MANAGE_APP_TOKENS
android.permission.PERSISTENT_ACTIVITY
android.permission.GET_ACCOUNTS
android.permission.WAKE_LOCK
android.permission.WAKE_LOCK

Receivers

.ninuui

android.intent.action.AIRPLANE_MODE

ebgeiypsbsb.rscesiot.qrybmroacli

android.provider.Telephony.SMS_RECEIVED

.avqbocca

android.intent.action.BOOT_COMPLETED

.kmedsbtab

exxrrbljphj.btwtla.action.delayed.sms

rscom.rsantivirus.RSAVENotifierTimerReceiver

wssmslistener.action.autoupdate

rscom.rsantivirus.RSAVECheckAvReceiver

rscom.rsantivirus.action.sendav

rscom.rsantivirus.RSAVEFullScanTimerReceiver

wssmslistener.action.fullscan

rscom.rsantivirus.RSAVEStartupReceiver

android.intent.action.BOOT_COMPLETED

rscom.rsantivirus.RSAVEInstallReceiver

android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_INSTALL
android.intent.action.INSTALL_PACKAGE

rscom.rsantivirus.RSAVEUninstallReceiver

android.intent.action.PACKAGE_REMOVED
android.intent.action.UNINSTALL_PACKAGE

Services

ebgeiypsbsb.rscesiot.cshegblocc

ebgeiypsbsb.rscesiot.cshegbloccStart76
android.intent.action.MAIN

rscom.rsantivirus.RSAVENotifierService

android.intent.action.MAIN

Android Permissions

b6ff1b93d1effc80453fcae9911e85d52ce528bead358a88a0d5b907576b0e8f

Permissions

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_NETWORK_STATE

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.UNINSTALL_SHORTCUT

android.permission.ACCESS_NETWORK_STATE

android.permission.RECEIVE_BOOT_COMPLETED

com.android.alarm.permission.SET_ALARM

android.permission.SYSTEM_ALERT_WINDOW

android.permission.WRITE_SETTINGS

android.permission.WRITE_SECURE_SETTINGS

android.permission.ACCESS_WIFI_STATE

android.permission.UPDATE_DEVICE_STATS

android.permission.CHANGE_WIFI_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.RECEIVE_SMS

android.permission.READ_CONTACTS

android.permission.DELETE_PACKAGES

android.permission.GET_PACKAGE_SIZE

android.permission.INSTALL_PACKAGES

android.permission.MANAGE_APP_TOKENS

android.permission.PERSISTENT_ACTIVITY

android.permission.GET_ACCOUNTS

android.permission.WAKE_LOCK

Sharing

General

Malware Config

Signatures

Files

exxrrbljphj.btwtla

.wibmdifeuy

Activities

.wibmdifeuy

rscom.rsantivirus.RSAVEMainActivity

rscom.rsantivirus.RSAVEInstalledActivity

rscom.rsantivirus.RSAVEUpdaterActivity

Permissions

Receivers

.ninuui

ebgeiypsbsb.rscesiot.qrybmroacli

.avqbocca

.kmedsbtab

rscom.rsantivirus.RSAVENotifierTimerReceiver

rscom.rsantivirus.RSAVECheckAvReceiver

rscom.rsantivirus.RSAVEFullScanTimerReceiver

rscom.rsantivirus.RSAVEStartupReceiver

rscom.rsantivirus.RSAVEInstallReceiver

rscom.rsantivirus.RSAVEUninstallReceiver

Services

ebgeiypsbsb.rscesiot.cshegblocc

rscom.rsantivirus.RSAVENotifierService

Android Permissions

b6ff1b93d1effc80453fcae9911e85d52ce528bead358a88a0d5b907576b0e8f