8c9d7345935d46c1602936934b600bb55fa6127cbdefd343ad5ebf03114dbe45[.]7z

Sharing

Copy URL

Twitter E-mail

General

Target

8c9d7345935d46c1602936934b600bb55fa6127cbdefd343ad5ebf03114dbe45.7z
Size

5.3MB
MD5

8d356d4176bd812c7080973ee9ef39c6
SHA1

2ba7c51c3766db8017845240dbac63e15d667f0a
SHA256

460f82e3ae566f5334d21205d57e5b5b5bef28bacae5e8aa9e8e7befd525003a
SHA512

d17531a84c17d7149b2822ac884eb216c183d17d71f4f2ed10c62f11d0569f280820d080955a6b107e04c1e6ecc3e8e13866b0a7272032d67f0ecf3e109e8e63
SSDEEP

98304:1IWQ7AYpaWOxCfbx7YpR7S5G3Bd5vn/tjFIw2YxnhCH3vowQcWiPWF:1kcRWO8g33r5vnVhVXAvnbWiPWF

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 6 IoCs

Processes:

description	ioc
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS

Files

8c9d7345935d46c1602936934b600bb55fa6127cbdefd343ad5ebf03114dbe45.7z
.7z

Password: infected
8c9d7345935d46c1602936934b600bb55fa6127cbdefd343ad5ebf03114dbe45
.apk android

com.snda.wifilocating

com.snda.wifilocating.p50fa9510

Activities

com.snda.wifilocating.pd8edbe04

android.intent.action.MAIN

com.snda.wifilocating.p50fa9510

android.intent.action.MAIN

com.snda.wifilocating.p21d1c7d6

android.intent.action.SENDTO
android.intent.action.SEND

Permissions

android.permission.WAKE_LOCK
android.permission.WRITE_SMS
android.permission.KILL_BACKGROUND_PROCESSES
android.permission.REQUEST_DELETE_PACKAGES
android.permission.SEND_SMS
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS
android.permission.READ_PHONE_STATE
android.permission.VIBRATE
android.permission.RECEIVE_SMS
android.permission.FOREGROUND_SERVICE
android.permission.ACCESS_NETWORK_STATE
android.permission.CALL_PHONE
android.permission.READ_SMS
android.permission.QUERY_ALL_PACKAGES
android.permission.INTERNET
android.permission.READ_CONTACTS

Receivers

com.snda.wifilocating.p5ef04922

android.provider.Telephony.WAP_PUSH_DELIVER

com.snda.wifilocating.pfdb1b9d1

android.provider.Telephony.SMS_DELIVER

Services

com.snda.wifilocating.p653a2b67

android.intent.action.RESPOND_VIA_MESSAGE

com.snda.wifilocating.pf4f549c9

android.service.notification.NotificationListenerService

com.snda.wifilocating.pfdbff2f8

android.accessibilityservice.AccessibilityService
1ea1359fae54a3670e751fa1611840c3
2e0af3ab5ec0cdd9fa9715b4297b8996
5d8d48c4e5797689d5b51b334363721c
841979c85175e5ef4fff5bf6ae7e8c19
AssetManifest.json
CupertinoIcons.ttf
GTM-MNW3THG.json
ImageLoading.png
.png
MaterialIcons-Regular.otf
adapters.json
adjust_new_tools.json
adjust_old_tools.json
appboy-html-in-app-message-javascript-component.js
.js
backward
canva_pro.webp
checkerboard_pattern.jpg
.jpg
color_splash.fs
coloredLights3.json
coloredLights4.json
comic.fs
contours.fs
convolution_matrix.fs
countries.json
fdhfTkbhs1.dhr
fontawesome-webfont.ttf
fragment.glsl
ghost.fs
gouache.fs
grafit.fs
holgaart1.fs
holgaart2.fs
hue.fs
ic_camera_button.svg
ic_camera_roll_list.svg
ic_camera_roll_tab.svg
light_cross.fs
location_response.json
lomo.fs
masks.fs
masks_graph.json
mirror.fs
neon.fs
networks.json
open-iconic.woff
orig_image.fs
pastel.fs
poster.fs
preview.vs
sentry-debug-meta.properties
shape_1.svg
.xml
shape_10.svg
.xml
shape_11.svg
.xml
shape_12.svg
.xml
shape_13.svg
.xml
shape_14.svg
.xml
shape_15.svg
.xml
shape_16.svg
.xml
shape_17.svg
.xml
shape_18.svg
.xml
shape_19.svg
.xml
shape_2.svg
.xml
shape_20.svg
.xml
shape_21.svg
.xml
shape_22.svg
.xml
shape_3.svg
.xml
shape_4.svg
.xml
shape_5.svg
.xml
shape_6.svg
.xml
shape_7.svg
.xml
shape_8.svg
.xml
shape_9.svg
.xml
silence.m4a
sketcher.fs
src_1_oval.svg
.xml
src_2_round_rect.svg
.xml
src_3_rect.svg
.xml
supplierconfig.json
swirl.fs
t-rex.css
t-rex.html
.js
text_configurable_default.json
text_highlight_colors.json
transformable_screen.json
transformable_screen_china.json
uninstall_package_list.json
unshurpen.fs
updatesdkcas.bks
vertex.glsl
video_effects_info.json
video_fragment_ext.glsl
video_fragment_filter.glsl
video_fragment_static.glsl
video_group.glsl
video_transition.glsl
video_vertex.glsl
vk_dex.apk
.apk android
watercolor.fs
zlsioh.dat
zone.tab

Sharing

General

Malware Config

Signatures

Files

Password: infected

com.snda.wifilocating

com.snda.wifilocating.p50fa9510

Activities

com.snda.wifilocating.pd8edbe04

com.snda.wifilocating.p50fa9510

com.snda.wifilocating.p21d1c7d6

Permissions

Receivers

com.snda.wifilocating.p5ef04922

com.snda.wifilocating.pfdb1b9d1

Services

com.snda.wifilocating.p653a2b67

com.snda.wifilocating.pf4f549c9

com.snda.wifilocating.pfdbff2f8