1c3ff29324eddfd6a956fb7e0038ac27

General

Target

1c3ff29324eddfd6a956fb7e0038ac27
Size

6.7MB
MD5

1c3ff29324eddfd6a956fb7e0038ac27
SHA1

938b4e4d8dc7cfeca9ce70d378832f8583652af6
SHA256

62fa23ee9a51671e3b861e16c958956df884d25034b556b7d9ef1902566c817d
SHA512

78638aaed6f1b18c8a5a4fa3126f5824865dcfb383e7fa85f23714862d8b9bcebb3f57ca9584ae4f088025ebad47facb9cb0911e7739a50842dd550615549f7c
SSDEEP

196608:5XO4nZdzHoIqU5Fvbi9wUtYYK4N5oYpSg2K:VO4LzHYU3vbi9DtY4fS6

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 7 IoCs

description	ioc
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Required to be able to access the camera device.	android.permission.CAMERA
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION

Files

1c3ff29324eddfd6a956fb7e0038ac27
.apk android

ir.rashin.mototel

ir.rashin.mototel.mvvm.view.activity.SplashActivity

Activities

ir.rashin.mototel.mvvm.view.activity.MainActivity

android.intent.action.VIEW

ir.rashin.mototel.mvvm.view.activity.SplashActivity

android.intent.action.MAIN

ir.rashin.mototel.mvvm.view.activity.SingleVideoActivity

android.intent.action.VIEW

ir.rashin.mototel.mvvm.view.activity.SingleNewsActivity

android.intent.action.VIEW

net.jhoobin.jhub.jstore.activity.InAppFacadeActivity

net.jhoobin.jhub.inappsdk.jstore.activity.InAppFacadeActivity

Permissions

android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
com.google.android.c2dm.permission.RECEIVE
android.permission.CAMERA
ir.rashin.mototel.permission.C2D_MESSAGE
com.google.android.gms.permission.ACTIVITY_RECOGNITION
com.ramand.audiobook.permission.C2D_MESSAGE
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.WAKE_LOCK
android.permission.MEDIA_CONTENT_CONTROL
android.permission.READ_PHONE_STATE
android.permission.RECEIVE_SMS
android.permission.ACCESS_WIFI_STATE
android.permission.SYSTEM_ALERT_WINDOW
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.ACCESS_COARSE_LOCATION
android.permission.BIND_JOB_SERVICE
com.google.android.providers.gsf.permission.READ_GSERVICES
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

Receivers

ir.rashin.mototel.util.download.DownloadReceiver

android.intent.action.DOWNLOAD_COMPLETE

co.ronash.pushe.receiver.UpdateReceiver

android.intent.action.PACKAGE_REPLACED

android.support.v4.media.session.MediaButtonReceiver

android.intent.action.MEDIA_BUTTON

net.jhoobin.jhub.receiver.SmsReceiver

android.provider.Telephony.SMS_RECEIVED

co.ronash.pushe.receiver.FallbackGcmNetworkManagerReceiver

co.ronash.pushe.CHECK_TASKS

co.ronash.pushe.receiver.BootAndScreenReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.QUICKBOOT_POWERON

co.ronash.pushe.receiver.ConnectivityReceiver

android.net.conn.CONNECTIVITY_CHANGE

co.ronash.pushe.receiver.AddReceiver

com.evernote.android.job.ADD_JOB_CREATOR

co.ronash.pushe.receiver.AppChangeReceiver

android.intent.action.PACKAGE_INSTALL
android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_FULLY_REMOVED

com.google.android.gms.measurement.AppMeasurementInstallReferrerReceiver

com.android.vending.INSTALL_REFERRER

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

com.evernote.android.job.v14.PlatformAlarmReceiver

com.evernote.android.job.v14.RUN_JOB
net.vrallev.android.job.v14.RUN_JOB

com.evernote.android.job.JobBootReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.QUICKBOOT_POWERON
com.htc.intent.action.QUICKBOOT_POWERON
android.intent.action.MY_PACKAGE_REPLACED

Services

ir.rashin.mototel.mvvm.fcm.MyFirebaseInstanceIDService

com.google.firebase.INSTANCE_ID_EVENT

ir.rashin.mototel.mvvm.fcm.MyFirebaseMessageService

com.google.firebase.MESSAGING_EVENT

net.jhoobin.jhub.billing.InAppBillingService2

net.jhoobin.jhub.inappsdk.InAppBillingService.BIND

co.ronash.pushe.service.GcmService

com.google.android.c2dm.intent.RECEIVE

co.ronash.pushe.service.ScreenStateService

co.ronash.pushe.service.ScreenStateService

co.ronash.pushe.service.FallbackGcmTaskRunner

co.ronash.pushe.ACTION_TASK_READY

co.ronash.pushe.task.scheduler.gcm.GcmTaskRunner

com.google.android.gms.gcm.ACTION_TASK_READY

co.ronash.pushe.service.InstanceIDService

com.google.android.gms.iid.InstanceID

com.evernote.android.job.gcm.PlatformGcmService

com.google.android.gms.gcm.ACTION_TASK_READY

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

com.google.firebase.iid.FirebaseInstanceIdService

com.google.firebase.INSTANCE_ID_EVENT

Android Permissions

1c3ff29324eddfd6a956fb7e0038ac27

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

com.google.android.c2dm.permission.RECEIVE

android.permission.CAMERA

ir.rashin.mototel.permission.C2D_MESSAGE

com.google.android.gms.permission.ACTIVITY_RECOGNITION

com.ramand.audiobook.permission.C2D_MESSAGE

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.WAKE_LOCK

android.permission.MEDIA_CONTENT_CONTROL

android.permission.READ_PHONE_STATE

android.permission.RECEIVE_SMS

android.permission.ACCESS_WIFI_STATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.ACCESS_COARSE_LOCATION

android.permission.BIND_JOB_SERVICE

com.google.android.providers.gsf.permission.READ_GSERVICES

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

Sharing

General

Malware Config

Signatures

Files

ir.rashin.mototel

ir.rashin.mototel.mvvm.view.activity.SplashActivity

Activities

ir.rashin.mototel.mvvm.view.activity.MainActivity

ir.rashin.mototel.mvvm.view.activity.SplashActivity

ir.rashin.mototel.mvvm.view.activity.SingleVideoActivity

ir.rashin.mototel.mvvm.view.activity.SingleNewsActivity

net.jhoobin.jhub.jstore.activity.InAppFacadeActivity

Permissions

Receivers

ir.rashin.mototel.util.download.DownloadReceiver

co.ronash.pushe.receiver.UpdateReceiver

android.support.v4.media.session.MediaButtonReceiver

net.jhoobin.jhub.receiver.SmsReceiver

co.ronash.pushe.receiver.FallbackGcmNetworkManagerReceiver

co.ronash.pushe.receiver.BootAndScreenReceiver

co.ronash.pushe.receiver.ConnectivityReceiver

co.ronash.pushe.receiver.AddReceiver

co.ronash.pushe.receiver.AppChangeReceiver

com.google.android.gms.measurement.AppMeasurementInstallReferrerReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.evernote.android.job.v14.PlatformAlarmReceiver

com.evernote.android.job.JobBootReceiver

Services

ir.rashin.mototel.mvvm.fcm.MyFirebaseInstanceIDService

ir.rashin.mototel.mvvm.fcm.MyFirebaseMessageService

net.jhoobin.jhub.billing.InAppBillingService2

co.ronash.pushe.service.GcmService

co.ronash.pushe.service.ScreenStateService

co.ronash.pushe.service.FallbackGcmTaskRunner

co.ronash.pushe.task.scheduler.gcm.GcmTaskRunner

co.ronash.pushe.service.InstanceIDService

com.evernote.android.job.gcm.PlatformGcmService

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.iid.FirebaseInstanceIdService

Android Permissions

1c3ff29324eddfd6a956fb7e0038ac27