64364f6cf1b893a79d4acd1b54340e66483c8d9a8d354aac2cf4d3b88a6a8ad6[.]7z

Sharing

Copy URL

Twitter E-mail

General

Target

64364f6cf1b893a79d4acd1b54340e66483c8d9a8d354aac2cf4d3b88a6a8ad6.7z
Size

5.3MB
MD5

22ef3791e53da4cd9e2b2a734401a1e0
SHA1

a82d8fc8f61d26610c633a3b2748e70f566bd3d0
SHA256

4f25a05ca878bb55a683b3c3f14f4b3c1b183a74dd2c6c9054d880966293ee06
SHA512

0d889f819a0d301b95a9efd3d0aa0116393bc0f890a31ee5fa9be75e45119c281661c94c2717d0614ca85b98217725c14466dcb9b2c9bec79247fb256cb4ec41
SSDEEP

98304:nHinMzthTFXe/bItgkIZdTkrmr+3qNKW1A0hfK7Zpj6OHXjds5NWH8An4L4smfZq:HjtD6zLwrR3wA09o1Xx2w/smfZ6Hsc

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 6 IoCs

Processes:

description	ioc
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS

Files

64364f6cf1b893a79d4acd1b54340e66483c8d9a8d354aac2cf4d3b88a6a8ad6.7z
.7z

Password: infected
64364f6cf1b893a79d4acd1b54340e66483c8d9a8d354aac2cf4d3b88a6a8ad6
.apk android

com.snda.wifilocating

com.snda.wifilocating.p50fa9510

Activities

com.snda.wifilocating.pd8edbe04

android.intent.action.MAIN

com.snda.wifilocating.p50fa9510

android.intent.action.MAIN

com.snda.wifilocating.p21d1c7d6

android.intent.action.SENDTO
android.intent.action.SEND

Permissions

android.permission.WAKE_LOCK
android.permission.WRITE_SMS
android.permission.KILL_BACKGROUND_PROCESSES
android.permission.REQUEST_DELETE_PACKAGES
android.permission.SEND_SMS
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS
android.permission.READ_PHONE_STATE
android.permission.VIBRATE
android.permission.RECEIVE_SMS
android.permission.FOREGROUND_SERVICE
android.permission.ACCESS_NETWORK_STATE
android.permission.CALL_PHONE
android.permission.READ_SMS
android.permission.QUERY_ALL_PACKAGES
android.permission.INTERNET
android.permission.READ_CONTACTS

Receivers

com.snda.wifilocating.p5ef04922

android.provider.Telephony.WAP_PUSH_DELIVER

com.snda.wifilocating.pfdb1b9d1

android.provider.Telephony.SMS_DELIVER

Services

com.snda.wifilocating.p653a2b67

android.intent.action.RESPOND_VIA_MESSAGE

com.snda.wifilocating.pf4f549c9

android.service.notification.NotificationListenerService

com.snda.wifilocating.pfdbff2f8

android.accessibilityservice.AccessibilityService
1ea1359fae54a3670e751fa1611840c3
2e0af3ab5ec0cdd9fa9715b4297b8996
5d8d48c4e5797689d5b51b334363721c
841979c85175e5ef4fff5bf6ae7e8c19
AssetManifest.json
CupertinoIcons.ttf
GTM-MNW3THG.json
ImageLoading.png
.png
MaterialIcons-Regular.otf
adapters.json
adjust_new_tools.json
adjust_old_tools.json
appboy-html-in-app-message-javascript-component.js
.js
backward
canva_pro.webp
checkerboard_pattern.jpg
.jpg
color_splash.fs
coloredLights3.json
coloredLights4.json
comic.fs
contours.fs
convolution_matrix.fs
countries.json
fontawesome-webfont.ttf
fragment.glsl
ghost.fs
gouache.fs
grafit.fs
hlvudk4uh1.hj5
holgaart1.fs
holgaart2.fs
hue.fs
ic_camera_button.svg
ic_camera_roll_list.svg
ic_camera_roll_tab.svg
light_cross.fs
location_response.json
lomo.fs
masks.fs
masks_graph.json
mirror.fs
neon.fs
networks.json
open-iconic.woff
orig_image.fs
pastel.fs
poster.fs
preview.vs
sentry-debug-meta.properties
shape_1.svg
.xml
shape_10.svg
.xml
shape_11.svg
.xml
shape_12.svg
.xml
shape_13.svg
.xml
shape_14.svg
.xml
shape_15.svg
.xml
shape_16.svg
.xml
shape_17.svg
.xml
shape_18.svg
.xml
shape_19.svg
.xml
shape_2.svg
.xml
shape_20.svg
.xml
shape_21.svg
.xml
shape_22.svg
.xml
shape_3.svg
.xml
shape_4.svg
.xml
shape_5.svg
.xml
shape_6.svg
.xml
shape_7.svg
.xml
shape_8.svg
.xml
shape_9.svg
.xml
silence.m4a
sketcher.fs
src_1_oval.svg
.xml
src_2_round_rect.svg
.xml
src_3_rect.svg
.xml
supplierconfig.json
swirl.fs
t-rex.css
t-rex.html
.js
text_configurable_default.json
text_highlight_colors.json
transformable_screen.json
transformable_screen_china.json
uninstall_package_list.json
unshurpen.fs
updatesdkcas.bks
vertex.glsl
video_effects_info.json
video_fragment_ext.glsl
video_fragment_filter.glsl
video_fragment_static.glsl
video_group.glsl
video_transition.glsl
video_vertex.glsl
vk_dex.apk
.apk android
watercolor.fs
zlsioh.dat
zone.tab

Sharing

General

Malware Config

Signatures

Files

Password: infected

com.snda.wifilocating

com.snda.wifilocating.p50fa9510

Activities

com.snda.wifilocating.pd8edbe04

com.snda.wifilocating.p50fa9510

com.snda.wifilocating.p21d1c7d6

Permissions

Receivers

com.snda.wifilocating.p5ef04922

com.snda.wifilocating.pfdb1b9d1

Services

com.snda.wifilocating.p653a2b67

com.snda.wifilocating.pf4f549c9

com.snda.wifilocating.pfdbff2f8