Agent[.]apk | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Agent.apk
Size

17KB
MD5

93ef7f54e9dc38f33e862237ea786bca
SHA1

0c791b97cf4cc4c4897f610364f0bd4ee2e4202f
SHA256

8ad819000b48171d50239d0b286b6b58acb6b2f9225eca6beb5d2506bc40f726
SHA512

d02bbbf564762d7dcdf5141dc038fb9d07e17329020995e36cc817b0e15558ec08082bb9b505a3a44f3da0c79b9423ab4921916e3b109ab02b8d4535a5f0540d
SSDEEP

384:b6XmK/O+dRDxREjAkbfvtHwH2bkHS7g4h6KVcksVM4zIL:2XDbxRrk7mH3HSdh6KeVMP

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 3 IoCs

description	ioc
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE

Files

Agent.apk
.apk android

com.google.smshandler

Permissions

android.permission.RECEIVE_SMS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.SEND_SMS
android.permission.READ_PHONE_STATE

Receivers

BootUpReceiver

android.intent.action.BOOT_COMPLETED

InstallReceiver

android.intent.action.PACKAGE_INSTALL
android.intent.action.PACKAGE_ADDED

Services

Android Permissions

Agent.apk

Permissions

android.permission.RECEIVE_SMS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.SEND_SMS

android.permission.READ_PHONE_STATE