com.pekinihiwirede.pozoweha.fonixatapo
android.intent.action.MAIN
com.tubidutubuhivayi.vimikewo.saju.hevohokizoduta
android.intent.action.SENDTO
android.intent.action.SEND
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
0399d5868f1c7ace8585daba2b93d794a19dd354f95a2c5ae0bc870237c9eb37.apk
Resource
android-x86-arm-20220823-en
android-9-x86
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
0399d5868f1c7ace8585daba2b93d794a19dd354f95a2c5ae0bc870237c9eb37.apk
Resource
android-x64-20220823-en
android-10-x64
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
0399d5868f1c7ace8585daba2b93d794a19dd354f95a2c5ae0bc870237c9eb37.apk
Resource
android-x64-arm64-20220823-en
android-11-x64
10 signatures
150 seconds
General
-
Target
10016735019.zip
-
Size
2.5MB
-
MD5
d87cf5a16f4065c8bbd0f2a04595828b
-
SHA1
032ab09f4fe5c63bdd638a9464072b4b3c1f77ab
-
SHA256
1746fe4d9b29130f3ad84b9d81b1d20619aba6da0835ede5c9c31f95f325125c
-
SHA512
1b96f36a068b37029565f72cce5a4e8c528dce2f95f9626b554f86e349e8b1aa9cd0ab2bdab28f092a6cc55d544aafd6776ecf3aacd60fafcf011106914d0670
-
SSDEEP
49152:yCkyzKRntMd+iDMOK6FeBV8o2TBE2WBs6Vn7owoS8ZoYPRyVb37oeINSzz5fzpq:RJzstMYig6oV8ddE2Osu7uPRub3UeDzW
Score
7/10
Malware Config
Signatures
-
Requests dangerous framework permissions 15 IoCs
description ioc Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call. android.permission.CALL_PHONE Allows access to the list of accounts in the Accounts Service. android.permission.GET_ACCOUNTS Allows read access to the device's phone number(s). android.permission.READ_PHONE_NUMBERS Allows an app to access location in the background. android.permission.ACCESS_BACKGROUND_LOCATION Allows an application to read the user's call log. android.permission.READ_CALL_LOG Allows an application to receive SMS messages. android.permission.RECEIVE_SMS Required to be able to access the camera device. android.permission.CAMERA Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE Allows an application to send SMS messages. android.permission.SEND_SMS Allows an app to access approximate location. android.permission.ACCESS_COARSE_LOCATION Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE Allows an application to write the user's contacts data. android.permission.WRITE_CONTACTS Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE Allows an application to read SMS messages. android.permission.READ_SMS Allows an application to read the user's contacts data. android.permission.READ_CONTACTS
Files
-
10016735019.zip.zip
Password: infected
-
0399d5868f1c7ace8585daba2b93d794a19dd354f95a2c5ae0bc870237c9eb37.apk android
com.pekinihiwirede.pozoweha
com.pekinihiwirede.pozoweha.fonixatapo
Activities
Permissions
android.permission.WAKE_LOCK
android.permission.ACTION_MANAGE_OVERLAY_PERMISSION
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
android.permission.CALL_PHONE
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS
android.permission.QUICKBOOT_POWERON
com.anddoes.launcher.permission.UPDATE_COUNT
android.permission.GET_ACCOUNTS
android.permission.INTERNET
android.permission.WRITE_CLIPS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.READ_PHONE_NUMBERS
android.permission.ACCESS_BACKGROUND_LOCATION
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.SYSTEM_ALERT_WINDOW
android.permission.READ_CALL_LOG
android.permission.RECEIVE_SMS
android.permission.CAMERA
android.permission.READ_PHONE_STATE
android.permission.SEND_SMS
android.permission.ACCESS_COARSE_LOCATION
android.permission.QUERY_ALL_PACKAGES
android.permission.DISABLE_KEYGUARD
com.sonymobile.home.permission.PROVIDER_INSERT_BADGE
android.permission.GET_TASKS
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.WRITE_CONTACTS
android.permission.RECEIVE_LAUNCH_BROADCASTS
com.sonyericsson.home.permission.BROADCAST_BADGE
android.permission.FOREGROUND_SERVICE
android.permission.READ_EXTERNAL_STORAGE
android.permission.GET_CLIPS
android.permission.READ_CLIPS
android.permission.READ_SMS
android.permission.ACCESS_WIFI_STATE
android.permission.REQUEST_DELETE_PACKAGES
android.permission.ACCESS_NETWORK_STATE
android.permission.READ_CONTACTS
Receivers
com.tubidutubuhivayi.vimikewo.lucuse.zifetizezo
android.provider.Telephony.SMS_RECEIVED
android.intent.action.EXTERNAL_APPLICATIONS_AVAILABLE
android.app.action.DEVICE_ADMIN_DISABLED
android.app.action.DEVICE_ADMIN_ENABLED
android.app.action.ACTION_DEVICE_ADMIN_DISABLE_REQUESTED
android.app.action.ACTION_PASSWORD_FAILED
android.app.action.ACTION_PASSWORD_SUCCEEDED
com.tubidutubuhivayi.vimikewo.zasikudihovizi.dituhesapeyona
android.intent.action.BOOT_COMPLETED
android.provider.Telephony.SMS_RECEIVED
android.intent.action.QUICKBOOT_POWERON
android.intent.action.EXTERNAL_APPLICATIONS_AVAILABLE
com.htc.intent.action.QUICKBOOT_POWERON
android.intent.action.REBOOT
com.tubidutubuhivayi.vimikewo.zasikudihovizi.keboro
android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED
android.intent.action.ACTION_SHUTDOWN
android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED
android.net.conn.CONNECTIVITY_CHANGE
android.net.wifi.WIFI_STATE_CHANGED
android.intent.action.AIRPLANE_MODE
android.intent.action.SCREEN_ON
android.intent.action.SCREEN_OFF
android.intent.action.BATTERY_OKAY
android.intent.action.DATE_CHANGED
com.tubidutubuhivayi.vimikewo.saju.hivericoxalifo
android.provider.Telephony.SMS_RECEIVED
com.tubidutubuhivayi.vimikewo.saju.goho
android.provider.Telephony.WAP_PUSH_DELIVER
com.tubidutubuhivayi.vimikewo.saju.hila
android.provider.Telephony.SMS_DELIVER
androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy
android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED
androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy
android.intent.action.BATTERY_OKAY
android.intent.action.BATTERY_LOW
androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy
android.intent.action.DEVICE_STORAGE_LOW
android.intent.action.DEVICE_STORAGE_OK
androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy
android.net.conn.CONNECTIVITY_CHANGE
androidx.work.impl.background.systemalarm.RescheduleReceiver
android.intent.action.BOOT_COMPLETED
android.intent.action.TIME_SET
android.intent.action.TIMEZONE_CHANGED
androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver
androidx.work.impl.background.systemalarm.UpdateProxies
Services
com.tubidutubuhivayi.vimikewo.vefodu.lacohogasofi
android.service.notification.NotificationListenerService
com.tubidutubuhivayi.vimikewo.jomupeka.dicoxarezu
android.accessibilityservice.AccessibilityService
com.tubidutubuhivayi.vimikewo.saju.canu
android.intent.action.RESPOND_VIA_MESSAGE