62a7a7f546d7003809b9d3b183d9bb15ec74358e726dda8e172c94e773e20045[.]zip

General

Target

62a7a7f546d7003809b9d3b183d9bb15ec74358e726dda8e172c94e773e20045.zip
Size

96KB
MD5

a40a9741951346691e8933e3aa7f7a78
SHA1

80d3ec73c7bb11e469f6a8482788d60efe8387d8
SHA256

371ed1f6c084a4c002a947cf352acf7a9bb89e847e0fffecdc4bb3f6e025008a
SHA512

52c4eb72d314426ddbae88c005470ebfd4bbfcdd0f317580306181aa86ace01f8808252bb0c7fd2d9edfc90c5c96e758fc367818a17ab3b16a85be29090e9a19
SSDEEP

1536:peXfzTq8kIFhL4HqAkdatUJNxXO8Qkalx1LyiCRQcm1KG7ujOlLyg8K/3M21RxlL:p0z2kFhgdUls9G67uhgFJRxJBHTUiF

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 6 IoCs

description	ioc
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS

Files

62a7a7f546d7003809b9d3b183d9bb15ec74358e726dda8e172c94e773e20045.zip
.zip

Password: infected
62a7a7f546d7003809b9d3b183d9bb15ec74358e726dda8e172c94e773e20045.apk
.apk android

com.anekprdmjzx.lqxebidaov

com.anekprdmjzx.lqxebidaov.pamcfajv

Activities

com.anekprdmjzx.lqxebidaov.jmlajrrnyrrjdi

android.intent.action.SENDTO
android.intent.action.SEND

com.anekprdmjzx.lqxebidaov.pamcfajv

android.intent.action.MAIN

Permissions

android.permission.INTERNET
android.permission.CALL_PHONE
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.READ_PHONE_STATE
android.permission.REQUEST_DELETE_PACKAGES
android.permission.RECEIVE_SMS
android.permission.READ_SMS
android.permission.SEND_SMS
android.permission.READ_CONTACTS
android.permission.WAKE_LOCK

Receivers

com.anekprdmjzx.lqxebidaov.kmbdtxmwujpd.odrehy

android.app.action.DEVICE_ADMIN_DISABLED
android.app.action.ACTION_DEVICE_ADMIN_DISABLE_REQUESTED
android.app.action.DEVICE_ADMIN_ENABLED

com.anekprdmjzx.lqxebidaov.thvsrpuax

android.provider.Telephony.WAP_PUSH_DELIVER

com.anekprdmjzx.lqxebidaov.ruwrcbuhkdno.opfsomewmgq

android.intent.action.BOOT_COMPLETED
android.intent.action.QUICKBOOT_POWERON
android.provider.Telephony.SMS_RECEIVED
com.htc.intent.action.QUICKBOOT_POWERON
android.intent.action.USER_PRESENT
android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED
android.provider.Telephony.SMS_DELIVER

Services

com.anekprdmjzx.lqxebidaov.uyvisn

android.intent.action.RESPOND_VIA_MESSAGE

com.anekprdmjzx.lqxebidaov.pky.dvwej

android.accessibilityservice.AccessibilityService

Sharing

General

Malware Config

Signatures

Files

Password: infected

com.anekprdmjzx.lqxebidaov

com.anekprdmjzx.lqxebidaov.pamcfajv

Activities

com.anekprdmjzx.lqxebidaov.jmlajrrnyrrjdi

com.anekprdmjzx.lqxebidaov.pamcfajv

Permissions

Receivers

com.anekprdmjzx.lqxebidaov.kmbdtxmwujpd.odrehy

com.anekprdmjzx.lqxebidaov.thvsrpuax

com.anekprdmjzx.lqxebidaov.ruwrcbuhkdno.opfsomewmgq

Services

com.anekprdmjzx.lqxebidaov.uyvisn

com.anekprdmjzx.lqxebidaov.pky.dvwej