78cb36cc9aba70bc902b3c8ba1b86c7a5d72b056fd624349bbd3fd972341aacf

General

Target

78cb36cc9aba70bc902b3c8ba1b86c7a5d72b056fd624349bbd3fd972341aacf
Size

1.9MB
MD5

775f6c26db0c5cbd3febd81f951429e2
SHA1

01b9c342f09f4f81853a0eb4545d84e09a440a6c
SHA256

78cb36cc9aba70bc902b3c8ba1b86c7a5d72b056fd624349bbd3fd972341aacf
SHA512

ca5d6d3a78668908f4791ac81e77279c2d6c195d2bc699475a525fc5143aa81e1c3f27bea433ebf1244d0ab37f2a017c94b64a9a831f367bd9dccd394934f199
SSDEEP

49152:QGIJvbO/022UoQ7tlRbafau77G918EZKzeCRd/i2ySilpGSlluVY:p0m2dQ7gX7GAGSDy3ZluVY

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE

Requests dangerous framework permissions 16 IoCs

description	ioc
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to read the user's call log.	android.permission.READ_CALL_LOG
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether.	android.permission.PROCESS_OUTGOING_CALLS
Allows an application to record audio.	android.permission.RECORD_AUDIO

Files

78cb36cc9aba70bc902b3c8ba1b86c7a5d72b056fd624349bbd3fd972341aacf
.apk android

inc.imonitor

inc.imonitor.StartHere

Activities

inc.imonitor.StartHere

android.intent.action.MAIN

Permissions

android.permission.READ_SMS
android.permission.READ_CONTACTS
android.permission.READ_CALL_LOG
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.READ_PHONE_STATE
android.permission.GET_ACCOUNTS
android.permission.INTERNET
android.permission.CALL_PHONE
android.permission.READ_SMS
android.permission.RECEIVE_SMS
android.permission.ACCESS_FINE_LOCATION
android.permission.READ_PROFILE
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_COARSE_LOCATION
android.permission.READ_CONTACTS
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.INTERNET
android.permission.CHANGE_WIFI_STATE
android.permission.CAMERA
android.permission.PROCESS_OUTGOING_CALLS
android.permission.RECORD_AUDIO
android.permission.VIBRATE
android.permission.WAKE_LOCK
com.google.android.c2dm.permission.RECEIVE
inc.imonitor.permission.C2D_MESSAGE

Receivers

inc.imonitor.AutoStart

android.intent.action.BOOT_COMPLETED

inc.imonitor.SMSReceived

android.provider.Telephony.SMS_RECEIVED

inc.imonitor.Connectvity

android.net.conn.CONNECTIVITY_CHANGE
android.net.wifi.WIFI_STATE_CHANGED

inc.imonitor.PhonecallReceiver

android.intent.action.PHONE_STATE
android.intent.action.NEW_OUTGOING_CALL

com.google.android.gms.measurement.AppMeasurementInstallReferrerReceiver

com.android.vending.INSTALL_REFERRER

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

Services

inc.imonitor.TokenService

com.google.firebase.INSTANCE_ID_EVENT

inc.imonitor.FCMMessageReceiverService

com.google.firebase.MESSAGING_EVENT

inc.imonitor.NotificationService

android.service.notification.NotificationListenerService

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

com.google.firebase.iid.FirebaseInstanceIdService

com.google.firebase.INSTANCE_ID_EVENT

Android Permissions

78cb36cc9aba70bc902b3c8ba1b86c7a5d72b056fd624349bbd3fd972341aacf

Permissions

android.permission.READ_SMS

android.permission.READ_CONTACTS

android.permission.READ_CALL_LOG

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.READ_PHONE_STATE

android.permission.GET_ACCOUNTS

android.permission.INTERNET

android.permission.CALL_PHONE

android.permission.READ_SMS

android.permission.RECEIVE_SMS

android.permission.ACCESS_FINE_LOCATION

android.permission.READ_PROFILE

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_COARSE_LOCATION

android.permission.READ_CONTACTS

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.INTERNET

android.permission.CHANGE_WIFI_STATE

android.permission.CAMERA

android.permission.PROCESS_OUTGOING_CALLS

android.permission.RECORD_AUDIO

android.permission.VIBRATE

android.permission.WAKE_LOCK

com.google.android.c2dm.permission.RECEIVE

inc.imonitor.permission.C2D_MESSAGE

Sharing

General

Malware Config

Signatures

Files

inc.imonitor

inc.imonitor.StartHere

Activities

inc.imonitor.StartHere

Permissions

Receivers

inc.imonitor.AutoStart

inc.imonitor.SMSReceived

inc.imonitor.Connectvity

inc.imonitor.PhonecallReceiver

com.google.android.gms.measurement.AppMeasurementInstallReferrerReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

Services

inc.imonitor.TokenService

inc.imonitor.FCMMessageReceiverService

inc.imonitor.NotificationService

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.iid.FirebaseInstanceIdService

Android Permissions

78cb36cc9aba70bc902b3c8ba1b86c7a5d72b056fd624349bbd3fd972341aacf