smsagent | 967393a6603bdaf0399641aa25acc5880fbad74d036312d326091d0687c245ab

Analysis

max time kernel
3847683s
max time network
130s
platform
android_x86
resource
android-x86-arm-20231215-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
submitted
07-01-2024 19:08

Target

apk.apk
Size

6.6MB
MD5

e3523cfc265cfe009eff00fe16f0da00
SHA1

0cb8fc29373a60687329eb2329e40626d3f028a4
SHA256

967393a6603bdaf0399641aa25acc5880fbad74d036312d326091d0687c245ab
SHA512

cfa2c6eb140f9b4670908ef24ff6167612d3c2c70af83bfd4758d7fe6e827b6df770e8f0e86574f99476a34d7739e732b16d2b1394544df134c982f6603e18f4
SSDEEP

196608:/CwTQLxeffSTHbdNTluzn2FmZkpipXAYylzj8/sv:/CwTQVQuVuz2U/pXAYgzjd

Score

10^/10

smsagent
SmsAgent is an Android malware that targets victim SMS messages using Telegram as its C2.
trojan infostealer spyware smsagent
Reads the content of SMS inbox messages. 1 IoCs
infostealer

Processes:

com.android.app

description ioc process

URI accessed for read content://sms/inbox com.android.app
Acquires the wake lock 1 IoCs

Processes:

com.android.app

description ioc process

Framework service call android.os.IPowerManager.acquireWakeLock com.android.app

description	ioc	process
URI accessed for read	content://sms/inbox	com.android.app

description	ioc	process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.android.app

com.android.app
1⤵
- Reads the content of SMS inbox messages.
- Acquires the wake lock
PID:4223