1[.]traff23_com[.]useallrb_Lazada_0_crypt_aligned[.]apk

Sharing

Copy URL

Twitter E-mail

General

Target

1.traff23_com.useallrb_Lazada_0_crypt_aligned.apk
Size

1.9MB
MD5

6552b0699c6683b9a7d905d431b14403
SHA1

a40c6bb1990ce78414b64bf9a2f6225e6012ee8e
SHA256

5ebac20a82963408b103b0e53da63fc22a15404321989a090505ee8258095423
SHA512

e488030c5d39ea668f8d8e4b799ce34f54eb2ecd34d1e5c36d88293137d58997bb674533d6be880cd9703ae2c6d5622d521ca8a2194e21dbc7c112f471896834
SSDEEP

24576:MmlR3LHA9i1J6hf+SsmW+c92P4J1dMZAMm7tAme4Z/w5gNlVYRDlYqjaOB04IB3+:zLA816famWaP4yY5RZ/wytEieLRfbfV

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 8 IoCs

Processes:

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an app to access location in the background.	android.permission.ACCESS_BACKGROUND_LOCATION
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE

Files

1.traff23_com.useallrb_Lazada_0_crypt_aligned.apk
.apk android arch:arm64 arch:arm arch:x86 arch:x64

com.useallrb

com.useallrb.p054l

Activities

com.useallrb.p054l

android.intent.action.MAIN

com.useallrb.p066i

android.intent.action.SEND
android.intent.action.SENDTO

com.useallrb.PKcBnIdOoZjKeHaYzBeYlYlAzKtBhWhWyPzYhDdUoFkFnQkDm

android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW

Permissions

android.permission.ADD_VOICEMAIL
android.permission.WRITE_SETTINGS
android.permission.BATTERY_STATS
android.permission.ACCESS_WIFI_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.MANAGE_EXTERNAL_STORAGE
android.permission.SEND_SMS
android.permission.INSTALL_SHORTCUT
android.permission.READ_SMS
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS
android.permission.REQUEST_DELETE_PACKAGES
android.permission.ACCESS_BACKGROUND_LOCATION
android.permission.WRITE_SYNC_SETTINGS
android.permission.WAKE_LOCK
android.permission.REQUEST_COMPANION_RUN_IN_BACKGROUND
android.permission.RECEIVE_SMS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.USES_POLICY_FORCE_LOCK
android.permission.REORDER_TASKS
android.permission.INTERNET
android.permission.READ_PHONE_STATE
android.permission.ACCESS_NOTIFICATION_POLICY
android.permission.CALL_PHONE
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.USE_FULL_SCREEN_INTENT
android.permission.REQUEST_COMPANION_USE_DATA_IN_BACKGROUND
android.permission.ACCESS_NETWORK_STATE
android.Manifest.permission.READ_PHONE_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.READ_EXTERNAL_STORAGE
android.permission.USE_FINGERPRINT
android.permission.VIBRATE
android.permission.GET_PACKAGE_SIZE
android.permission.CLEAR_APP_CACHE
android.permission.FOREGROUND_SERVICE

Receivers

com.useallrb.p019k

android.app.action.ACTION_DEVICE_ADMIN_DISABLE_REQUESTED
android.app.action.DEVICE_ADMIN_ENABLED
android.app.action.ACTION_PASSWORD_SUCCEEDED
android.app.action.ACTION_PASSWORD_FAILED
android.provider.Telephony.SMS_RECEIVED
android.intent.action.EXTERNAL_APPLICATIONS_AVAILABLE
android.app.action.DEVICE_ADMIN_DISABLED

com.useallrb.p069g

android.provider.Telephony.SMS_RECEIVED

com.useallrb.p019z

android.provider.Telephony.SMS_DELIVER

com.useallrb.p033e

android.provider.Telephony.WAP_PUSH_DELIVER

com.useallrb.p081x

android.intent.action.ACTION_POWER_DISCONNECTED
android.intent.action.BOOT_COMPLETED
android.intent.action.DATE_CHANGED
android.intent.action.AIRPLANE_MODE
android.intent.action.ACTION_SHUTDOWN
android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.BATTERY_OKAY
android.provider.Telephony.SMS_RECEIVED
android.intent.action.QUICKBOOT_POWERON
android.intent.action.EXTERNAL_APPLICATIONS_AVAILABLE
android.intent.action.USER_PRESENT
android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED
android.provider.Telephony.SMS_RECEIVED
android.intent.action.SCREEN_ON
android.intent.action.SCREEN_OFF
android.intent.action.EXTERNAL_APPLICATIONS_AVAILABLE
android.net.conn.CONNECTIVITY_CHANGE
android.net.wifi.WIFI_STATE_CHANGED
android.intent.action.DREAMING_STOPPED

Services

com.useallrb.p038i

android.intent.action.RESPOND_VIA_MESSAGE

com.useallrb.p028k

android.accessibilityservice.AccessibilityService

com.useallrb.p066u

android.service.notification.NotificationListenerService
1f414.png
1f417.png
1f419.png
1f423.png
1f424.png
1f425.png
1f426.png
1f427.png
1f428.png
1f430.png
1f431.png
1f434.png
1f435.png
1f436.png
1f437.png
1f438.png
1f439.png
AlphaPresentForms.js
BoxDrawing.js
CombDiactForSymbols.js
ControlPictures.js
CurrencySymbols.js
Cyrillic.js
EnclosedAlphanum.js
FmDsJ.json
GeneralPunctuation.js
GreekAndCoptic.js
GreekItalic.js
IPAExtensions.js
KaTeX_Fraktur-Bold.woff
KaTeX_Fraktur-Bold.woff2
Latin1Supplement.js
LatinExtendedA.js
LatinExtendedAdditional.js
LatinExtendedB.js
LetterlikeSymbols.js
Main.js
MathItalic.js
MathOperators.js
MathSSItalic.js
MathScript.js
SpacingModLetters.js
bird_01-hd.png
bird_01.png
bird_02-hd.png
bird_02.png
bird_03-hd.png
bird_03.png
bird_04-hd.png
bird_04.png
bird_05-hd.png
bird_05.png
config.js
ij.js
jax.js
.js
youtube_sans_light.xml
.xml

Android Permissions

1.traff23_com.useallrb_Lazada_0_crypt_aligned.apk

Permissions

android.permission.ADD_VOICEMAIL

android.permission.WRITE_SETTINGS

android.permission.BATTERY_STATS

android.permission.ACCESS_WIFI_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MANAGE_EXTERNAL_STORAGE

android.permission.SEND_SMS

android.permission.INSTALL_SHORTCUT

android.permission.READ_SMS

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.REQUEST_DELETE_PACKAGES

android.permission.ACCESS_BACKGROUND_LOCATION

android.permission.WRITE_SYNC_SETTINGS

android.permission.WAKE_LOCK

android.permission.REQUEST_COMPANION_RUN_IN_BACKGROUND

android.permission.RECEIVE_SMS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.USES_POLICY_FORCE_LOCK

android.permission.REORDER_TASKS

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.CALL_PHONE

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.USE_FULL_SCREEN_INTENT

android.permission.REQUEST_COMPANION_USE_DATA_IN_BACKGROUND

android.permission.ACCESS_NETWORK_STATE

android.Manifest.permission.READ_PHONE_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.USE_FINGERPRINT

android.permission.VIBRATE

android.permission.GET_PACKAGE_SIZE

android.permission.CLEAR_APP_CACHE

android.permission.FOREGROUND_SERVICE

Sharing

General

Malware Config

Signatures

Files

com.useallrb

com.useallrb.p054l

Activities

com.useallrb.p054l

com.useallrb.p066i

com.useallrb.PKcBnIdOoZjKeHaYzBeYlYlAzKtBhWhWyPzYhDdUoFkFnQkDm

Permissions

Receivers

com.useallrb.p019k

com.useallrb.p069g

com.useallrb.p019z

com.useallrb.p033e

com.useallrb.p081x

Services

com.useallrb.p038i

com.useallrb.p028k

com.useallrb.p066u

Android Permissions

1.traff23_com.useallrb_Lazada_0_crypt_aligned.apk