Smartscreen[.]zip | Triage

Sharing

General

Target

Smartscreen.zip
Size

1.9MB
MD5

964b53aa06685a9f0e6471d224a9f519
SHA1

ecc85294f67843b613bd905fda237186888042fa
SHA256

abdd21fe6154015ca0ccf383772d2e6932e4b721c4ac133a6ee2fa34dbe0be39
SHA512

6b88acbf46244753c9b01623223766f32061973c2ed3619a98994daaa00695d6776b000e5bbb5e65a59ac0c0c7c8dd4cd9c854ac58237dca092eada7e28db458
SSDEEP

49152:nxzOl+SX/jJB/JjYxCRVOZ5AzxyYA09I1jMDqJ335OvPd1fwh4r+O6IBu0C:n1OH1YEVG5AzEzH1jM+33obfwh4rj6IQ

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 4 IoCs

description	ioc
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS

Files

Smartscreen.zip
.zip

Password: infected
087fb94dc34cb66d30105933b33ab6517996e8dfd07fac4fa17e47900d3cd33c.apk
.apk android

com.drnull.fcm

com.drnull.fcm.MainActivity

Activities

com.drnull.fcm.MainActivity

android.intent.action.MAIN

Permissions

android.permission.INTERNET
android.permission.POST_NOTIFICATIONS
android.permission.FOREGROUND_SERVICE
android.permission.ACCESS_NETWORK_STATE
android.permission.SEND_SMS
android.permission.RECEIVE_SMS
android.permission.READ_SMS
android.permission.MANAGE_NETWORK_POLICY
android.permission.WAKE_LOCK
com.google.android.c2dm.permission.RECEIVE

Receivers

com.drnull.fcm.smsReceiver

android.provider.Telephony.SMS_RECEIVED

com.drnull.fcm.Firebase

com.google.android.c2dm.intent.RECEIVE

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

Services

com.drnull.fcm.fm

com.google.firebase.MESSAGING_EVENT

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT