Android[.]Spy[.]49_iBanking_Feb2014[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

Android.Spy.49_iBanking_Feb2014.zip
Size

1.6MB
MD5

b6734f8c013ed8e011f775a1012bbfc4
SHA1

2ec12b9f9650240a80ea674c90623bb1942f9dd6
SHA256

2c1cd1664a79187107d5861daea265ab68c2beb1671ed54da2c90035af1b5aaf
SHA512

bed19e9a037bb929d172a3380874d86f0bd8bf2a3a75bab1acfcb65cdab3fbb5484e9b4e4c85f5aca6f1deb3cef1772b02cb973b8ca7cb21c2e11e2ac8ea6b80
SSDEEP

24576:JqMk4WgZbtLUgAv+e3zab46AcvZMFbuCJDA649/N2M7DINeYUbhWB4l4ALVUgFw+:JqN4lbtLU9d6Au2vJt4dAMPKxq+4jxrH

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 9 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to record audio.	android.permission.RECORD_AUDIO

Files

Android.Spy.49_iBanking_Feb2014.zip
.zip

Password: infected
ING.apk
.apk android

com.BioTechnology.iClientsService4

com.soft360.iService.MainActivity

Activities

com.soft360.iService.MainActivity

android.intent.action.MAIN

Permissions

android.permission.READ_PHONE_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.READ_PHONE_STATE
android.permission.CALL_PHONE
android.permission.ACCESS_NETWORK_STATE
android.permission.CHANGE_NETWORK_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_NETWORK_STATE
android.permission.INTERNET
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.WRITE_SMS
android.permission.READ_SMS
android.permission.RECEIVE_SMS
android.permission.SEND_SMS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.READ_CONTACTS
android.permission.RECORD_AUDIO

Receivers

com.soft360.iService.AutoStart

android.intent.action.BOOT_COMPLETED

com.soft360.Receiver.MyPhoneReceiver

android.intent.action.PHONE_STATE

com.soft360.web.MyAdmin

android.app.action.DEVICE_ADMIN_ENABLED

Services
ING_.apk
.apk android

com.BioTechnology.iClientsService4

com.soft360.iService.MainActivity

Activities

com.soft360.iService.MainActivity

android.intent.action.MAIN

Permissions

android.permission.READ_PHONE_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.READ_PHONE_STATE
android.permission.CALL_PHONE
android.permission.ACCESS_NETWORK_STATE
android.permission.CHANGE_NETWORK_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_NETWORK_STATE
android.permission.INTERNET
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.WRITE_SMS
android.permission.READ_SMS
android.permission.RECEIVE_SMS
android.permission.SEND_SMS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.READ_CONTACTS
android.permission.RECORD_AUDIO

Receivers

com.soft360.iService.AutoStart

android.intent.action.BOOT_COMPLETED

com.soft360.Receiver.MyPhoneReceiver

android.intent.action.PHONE_STATE

com.soft360.web.MyAdmin

android.app.action.DEVICE_ADMIN_ENABLED

Services
bot.apk
.apk android

com.BioTechnology.iClientsService4

com.soft360.iService.MainActivity

Activities

com.soft360.iService.MainActivity

android.intent.action.MAIN

Permissions

android.permission.READ_PHONE_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.READ_PHONE_STATE
android.permission.CALL_PHONE
android.permission.ACCESS_NETWORK_STATE
android.permission.CHANGE_NETWORK_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_NETWORK_STATE
android.permission.INTERNET
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.WRITE_SMS
android.permission.READ_SMS
android.permission.RECEIVE_SMS
android.permission.SEND_SMS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.READ_CONTACTS
android.permission.RECORD_AUDIO

Receivers

com.soft360.iService.AutoStart

android.intent.action.BOOT_COMPLETED

com.soft360.Receiver.MyPhoneReceiver

android.intent.action.PHONE_STATE

com.soft360.web.MyAdmin

android.app.action.DEVICE_ADMIN_ENABLED

Services

Sharing

General

Malware Config

Signatures

Files

Password: infected

com.BioTechnology.iClientsService4

com.soft360.iService.MainActivity

Activities

com.soft360.iService.MainActivity

Permissions

Receivers

com.soft360.iService.AutoStart

com.soft360.Receiver.MyPhoneReceiver

com.soft360.web.MyAdmin

Services

com.BioTechnology.iClientsService4

com.soft360.iService.MainActivity

Activities

com.soft360.iService.MainActivity

Permissions

Receivers

com.soft360.iService.AutoStart

com.soft360.Receiver.MyPhoneReceiver

com.soft360.web.MyAdmin

Services

com.BioTechnology.iClientsService4

com.soft360.iService.MainActivity

Activities

com.soft360.iService.MainActivity

Permissions

Receivers

com.soft360.iService.AutoStart

com.soft360.Receiver.MyPhoneReceiver

com.soft360.web.MyAdmin

Services