93880cd38abffa10e753c17ae7c14f0833356cba601bd1a3d3998859f47c900f

General

Target

93880cd38abffa10e753c17ae7c14f0833356cba601bd1a3d3998859f47c900f
Size

3.7MB
MD5

1af8aabf1bab2c4ed825d24aad6fdf25
SHA1

92c1abc9ef94af9701608012e0c9f1f0c94fdb89
SHA256

93880cd38abffa10e753c17ae7c14f0833356cba601bd1a3d3998859f47c900f
SHA512

0d3673291f767e801461add2d46d04d48fcf8f3827588c3bc2d7fe926eb4e23ddbc841e139588cda98c1729a1c2b43387fdaad426398b797426e17b8853fb331
SSDEEP

98304:kSdN59E3uUN+bHVG3ZRrGft4dG1kdS0ey/lR:ld5iuUNkVDV4YadlT

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 1 IoCs

Processes:

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE

Requests dangerous framework permissions 6 IoCs

Processes:

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to monitor incoming MMS messages.	android.permission.RECEIVE_MMS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW

Files

93880cd38abffa10e753c17ae7c14f0833356cba601bd1a3d3998859f47c900f
.apk android

com.obckaliva.ebnxvikzi

in.makaek.galbak.KAopneaoniAoiasM

Activities

in.makaek.galbak.KAopneaoniAoiasM

android.intent.action.MAIN

in.makaek.galbak.opnoPAWNDioaNDW

android.intent.action.SEND
android.intent.action.SENDTO

Permissions

android.permission.FOREGROUND_SERVICE
android.permission.INTERNET
android.permission.READ_PHONE_STATE
android.permission.SEND_SMS
android.permission.RECEIVE_SMS
android.permission.READ_SMS
android.permission.USE_BIOMETRIC
android.permission.WRITE_SMS
android.permission.RECEIVE_MMS
android.permission.WAKE_LOCK
android.permission.USE_FULL_SCREEN_INTENT
android.permission.SYSTEM_ALERT_WINDOW
android.permission.REQUEST_DELETE_PACKAGES
android.permission.QUERY_ALL_PACKAGES
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.REQUEST_PASSWORD_COMPLEXITY

Receivers

in.makaek.galbak.receiver.AIUbawuidBAWUdi

android.provider.Telephony.SMS_RECEIVED
android.provider.Telephony.SMS_DELIVER

in.makaek.galbak.receiver.eifbiaFBAUIFB

android.intent.action.INPUT_METHOD_CHANGED
android.intent.action.BOOT_COMPLETED
android.intent.action.QUICKBOOT_POWERON
com.htc.intent.action.QUICKBOOT_POWERON
android.intent.action.USER_PRESENT
android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED
android.intent.action.ACTION_PACKAGE_ADDED

in.makaek.galbak.AOInwiaofNAIWOfnai

android.provider.Telephony.WAP_PUSH_DELIVER

Services

in.makaek.galbak.iaoWNDoianwdoIAWND

android.intent.action.RESPOND_VIA_MESSAGE

in.makaek.galbak.UIDNwaidobaWIODb

android.accessibilityservice.AccessibilityService

93880cd38abffa10e753c17ae7c14f0833356cba601bd1a3d3998859f47c900f

Permissions

android.permission.FOREGROUND_SERVICE

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.SEND_SMS

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.permission.USE_BIOMETRIC

android.permission.WRITE_SMS

android.permission.RECEIVE_MMS

android.permission.WAKE_LOCK

android.permission.USE_FULL_SCREEN_INTENT

android.permission.SYSTEM_ALERT_WINDOW

android.permission.REQUEST_DELETE_PACKAGES

android.permission.QUERY_ALL_PACKAGES

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.REQUEST_PASSWORD_COMPLEXITY

Sharing

General

Malware Config

Signatures

Files

com.obckaliva.ebnxvikzi

in.makaek.galbak.KAopneaoniAoiasM

Activities

in.makaek.galbak.KAopneaoniAoiasM

in.makaek.galbak.opnoPAWNDioaNDW

Permissions

Receivers

in.makaek.galbak.receiver.AIUbawuidBAWUdi

in.makaek.galbak.receiver.eifbiaFBAUIFB

in.makaek.galbak.AOInwiaofNAIWOfnai

Services

in.makaek.galbak.iaoWNDoianwdoIAWND

in.makaek.galbak.UIDNwaidobaWIODb

Android Permissions

93880cd38abffa10e753c17ae7c14f0833356cba601bd1a3d3998859f47c900f