18cf15c4b963be0217f9608b652107e80afba0e8723ca2148832b2e407ac5209

General

Target

18cf15c4b963be0217f9608b652107e80afba0e8723ca2148832b2e407ac5209
Size

6.2MB
MD5

06085183f0f0d17645277d5dd4741349
SHA1

fcc7a20524ec8923f9c059e2c49f6a1ab9924225
SHA256

18cf15c4b963be0217f9608b652107e80afba0e8723ca2148832b2e407ac5209
SHA512

955b6cd67ced46474f44e5630d716f248c9e3960b7e9e3fbda6106f4994e5cacfe4d80fa4322eea293d315fd20c4352f281f8e1d0f60e865fa6a57d7adaa029c
SSDEEP

98304:3S0mPqRXsTwNFluCYs2mSWM0BarNee6fveHii6POPpE6Xl7JLLNs9dFJZhgM5Y:iyRXsTErHY3uAN7Ue5nu6XlNLN2XY

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 14 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to read the user's call log.	android.permission.READ_CALL_LOG
Allows an application to write (but not read) the user's call log data.	android.permission.WRITE_CALL_LOG
Allows an app to access location in the background.	android.permission.ACCESS_BACKGROUND_LOCATION

Files

18cf15c4b963be0217f9608b652107e80afba0e8723ca2148832b2e407ac5209
.apk android

com.ots.remotesecurity

com.ots.remotesecurity.activities.MainActivity

Activities

com.ots.remotesecurity.activities.MainActivity

android.intent.action.MAIN
android.intent.action.SEND

Permissions

android.permission.ACCESS_NOTIFICATION_POLICY
android.permission.INTERNET
android.permission.READ_PHONE_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.READ_PRIVILEGED_PHONE_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_EXTERNAL_STORAGE
android.permission.VIBRATE
android.permission.CAMERA
android.permission.READ_SMS
android.permission.RECEIVE_SMS
android.permission.READ_CONTACTS
android.permission.WRITE_CONTACTS
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.WAKE_LOCK
android.permission.DISABLE_KEYGUARD
android.permission.REORDER_TASKS
android.permission.SYSTEM_ALERT_WINDOW
android.permission.FOREGROUND_SERVICE
android.permission.SEND_SMS
android.permission.READ_CALL_LOG
android.permission.WRITE_CALL_LOG
android.permission.MANAGE_EXTERNAL_STORAGE
android.permission.ACTION_MANAGE_ALL_FILES_ACCESS_PERMISSION
android.permission.ACCESS_BACKGROUND_LOCATION
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS
android.permission.ACTION_MANAGE_OVERLAY_PERMISSION
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
com.google.android.c2dm.permission.RECEIVE

Receivers

com.ots.remotesecurity.recievers.MyBatteryReceiver

android.intent.action.BATTERY_LOW

com.ots.remotesecurity.recievers.MySMSReceiver

android.provider.Telephony.SMS_RECEIVED
android.provider.Telephony.SMS_DELIVER

com.ots.remotesecurity.recievers.RemoteAdminReceiver

android.app.action.DEVICE_ADMIN_ENABLED
android.app.action.DEVICE_ADMIN_DISABLE_REQUESTED

com.ots.remotesecurity.recievers.MyBootReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.REBOOT
android.intent.action.QUICKBOOT_POWERON
com.htc.intent.action.QUICKBOOT_POWERON
com.huawei.intent.action.QUICKBOOT_POWERON

com.google.android.gms.measurement.AppMeasurementInstallReferrerReceiver

com.android.vending.INSTALL_REFERRER

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

Services

com.ots.remotesecurity.Services.JobDispatcherRS

com.firebase.jobdispatcher.ACTION_EXECUTE

com.ots.remotesecurity.Services.MyFirebaseMessagingServiceRS

com.google.firebase.MESSAGING_EVENT

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

com.google.firebase.iid.FirebaseInstanceIdService

com.google.firebase.INSTANCE_ID_EVENT

com.firebase.jobdispatcher.GooglePlayReceiver

com.google.android.gms.gcm.ACTION_TASK_READY

Android Permissions

18cf15c4b963be0217f9608b652107e80afba0e8723ca2148832b2e407ac5209

Permissions

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_PRIVILEGED_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.VIBRATE

android.permission.CAMERA

android.permission.READ_SMS

android.permission.RECEIVE_SMS

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WAKE_LOCK

android.permission.DISABLE_KEYGUARD

android.permission.REORDER_TASKS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.FOREGROUND_SERVICE

android.permission.SEND_SMS

android.permission.READ_CALL_LOG

android.permission.WRITE_CALL_LOG

android.permission.MANAGE_EXTERNAL_STORAGE

android.permission.ACTION_MANAGE_ALL_FILES_ACCESS_PERMISSION

android.permission.ACCESS_BACKGROUND_LOCATION

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.ACTION_MANAGE_OVERLAY_PERMISSION

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

com.google.android.c2dm.permission.RECEIVE

Sharing

General

Malware Config

Signatures

Files

com.ots.remotesecurity

com.ots.remotesecurity.activities.MainActivity

Activities

com.ots.remotesecurity.activities.MainActivity

Permissions

Receivers

com.ots.remotesecurity.recievers.MyBatteryReceiver

com.ots.remotesecurity.recievers.MySMSReceiver

com.ots.remotesecurity.recievers.RemoteAdminReceiver

com.ots.remotesecurity.recievers.MyBootReceiver

com.google.android.gms.measurement.AppMeasurementInstallReferrerReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

Services

com.ots.remotesecurity.Services.JobDispatcherRS

com.ots.remotesecurity.Services.MyFirebaseMessagingServiceRS

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.iid.FirebaseInstanceIdService

com.firebase.jobdispatcher.GooglePlayReceiver

Android Permissions

18cf15c4b963be0217f9608b652107e80afba0e8723ca2148832b2e407ac5209