30d557fef09fc14bea100e880d5cd5c3784faadfd39a1940ce17cb4eea8d8fd8[.]7z

Sharing

Copy URL

Twitter E-mail

General

Target

30d557fef09fc14bea100e880d5cd5c3784faadfd39a1940ce17cb4eea8d8fd8.7z
Size

5.3MB
MD5

d9821bce7569f82ac31fe70da8779f53
SHA1

2c7ec4bf5ca05ab21a553f1ed4dc8e710ea2a09c
SHA256

75489e429014b5cd7cc3d0b178971eea40c07e4f063de8652cf5dd8fec58fa26
SHA512

44e0802677ba738c5c959ecda45f32c95f4a63e089827798baaa466488409bab8d06d8704a1ccd115c3c82b40e53503c751d7b59463647dac0098b7d9b6615a6
SSDEEP

98304:aCzKdNXbUKK8fYA5Ijuz+HAGfX5r23TjlPMujxdkkrwLOYebQGZQb+RmN/:fKrPKcl5Ij/gy5r233lxjxdCOYaQ2QnJ

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 6 IoCs

Processes:

description	ioc
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS

Files

30d557fef09fc14bea100e880d5cd5c3784faadfd39a1940ce17cb4eea8d8fd8.7z
.7z

Password: infected
30d557fef09fc14bea100e880d5cd5c3784faadfd39a1940ce17cb4eea8d8fd8
.apk android

com.snda.wifilocating

com.snda.wifilocating.p50fa9510

Activities

com.snda.wifilocating.pd8edbe04

android.intent.action.MAIN

com.snda.wifilocating.p50fa9510

android.intent.action.MAIN

com.snda.wifilocating.p21d1c7d6

android.intent.action.SENDTO
android.intent.action.SEND

Permissions

android.permission.WAKE_LOCK
android.permission.WRITE_SMS
android.permission.KILL_BACKGROUND_PROCESSES
android.permission.REQUEST_DELETE_PACKAGES
android.permission.SEND_SMS
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS
android.permission.READ_PHONE_STATE
android.permission.VIBRATE
android.permission.RECEIVE_SMS
android.permission.FOREGROUND_SERVICE
android.permission.ACCESS_NETWORK_STATE
android.permission.CALL_PHONE
android.permission.READ_SMS
android.permission.QUERY_ALL_PACKAGES
android.permission.INTERNET
android.permission.READ_CONTACTS

Receivers

com.snda.wifilocating.p5ef04922

android.provider.Telephony.WAP_PUSH_DELIVER

com.snda.wifilocating.pfdb1b9d1

android.provider.Telephony.SMS_DELIVER

Services

com.snda.wifilocating.p653a2b67

android.intent.action.RESPOND_VIA_MESSAGE

com.snda.wifilocating.pf4f549c9

android.service.notification.NotificationListenerService

com.snda.wifilocating.pfdbff2f8

android.accessibilityservice.AccessibilityService
1ea1359fae54a3670e751fa1611840c3
2e0af3ab5ec0cdd9fa9715b4297b8996
5d8d48c4e5797689d5b51b334363721c
841979c85175e5ef4fff5bf6ae7e8c19
AssetManifest.json
CupertinoIcons.ttf
GTM-MNW3THG.json
ImageLoading.png
.png
MaterialIcons-Regular.otf
adapters.json
adjust_new_tools.json
adjust_old_tools.json
appboy-html-in-app-message-javascript-component.js
.js
backward
canva_pro.webp
checkerboard_pattern.jpg
.jpg
color_splash.fs
coloredLights3.json
coloredLights4.json
comic.fs
contours.fs
convolution_matrix.fs
countries.json
d4xflovlo1.sjz
fontawesome-webfont.ttf
fragment.glsl
ghost.fs
gouache.fs
grafit.fs
holgaart1.fs
holgaart2.fs
hue.fs
ic_camera_button.svg
ic_camera_roll_list.svg
ic_camera_roll_tab.svg
light_cross.fs
location_response.json
lomo.fs
masks.fs
masks_graph.json
mirror.fs
neon.fs
networks.json
open-iconic.woff
orig_image.fs
pastel.fs
poster.fs
preview.vs
sentry-debug-meta.properties
shape_1.svg
.xml
shape_10.svg
.xml
shape_11.svg
.xml
shape_12.svg
.xml
shape_13.svg
.xml
shape_14.svg
.xml
shape_15.svg
.xml
shape_16.svg
.xml
shape_17.svg
.xml
shape_18.svg
.xml
shape_19.svg
.xml
shape_2.svg
.xml
shape_20.svg
.xml
shape_21.svg
.xml
shape_22.svg
.xml
shape_3.svg
.xml
shape_4.svg
.xml
shape_5.svg
.xml
shape_6.svg
.xml
shape_7.svg
.xml
shape_8.svg
.xml
shape_9.svg
.xml
silence.m4a
sketcher.fs
src_1_oval.svg
.xml
src_2_round_rect.svg
.xml
src_3_rect.svg
.xml
supplierconfig.json
swirl.fs
t-rex.css
t-rex.html
.js
text_configurable_default.json
text_highlight_colors.json
transformable_screen.json
transformable_screen_china.json
uninstall_package_list.json
unshurpen.fs
updatesdkcas.bks
vertex.glsl
video_effects_info.json
video_fragment_ext.glsl
video_fragment_filter.glsl
video_fragment_static.glsl
video_group.glsl
video_transition.glsl
video_vertex.glsl
vk_dex.apk
.apk android
watercolor.fs
zlsioh.dat
zone.tab

Sharing

General

Malware Config

Signatures

Files

Password: infected

com.snda.wifilocating

com.snda.wifilocating.p50fa9510

Activities

com.snda.wifilocating.pd8edbe04

com.snda.wifilocating.p50fa9510

com.snda.wifilocating.p21d1c7d6

Permissions

Receivers

com.snda.wifilocating.p5ef04922

com.snda.wifilocating.pfdb1b9d1

Services

com.snda.wifilocating.p653a2b67

com.snda.wifilocating.pf4f549c9

com.snda.wifilocating.pfdbff2f8