smsagent | Roblox_Premium__Programado_Por_Juanjo_[.]3[.]apk

General

Target

Roblox_Premium__Programado_Por_Juanjo_.3.apk
Size

6.5MB
MD5

a2c5af5ec0552013a072766b8acd6557
SHA1

c3665e16ac82844c5ab70c249447d6e476d18e87
SHA256

9187020f2442242cfe7363d2d45d48890d57ad3a4f556739c15029d1f23b2909
SHA512

a44c9e2f0b4faab5de9795f1b10b0684786954050ba7508b9806c67bdaecc12d7d3424034f2dc550228c33116c9f7e22593a965da80104edda7e21466c263fc3
SSDEEP

196608:q9wpVLg6e4pQatK9ai38cVXihShi0DqzQGI:q9owg9saA8cVVhZDwxI

Score

10^/10

smsagent

Malware Config

Signatures

SmsAgent payload 2 IoCs

Processes:

resource	yara_rule
sample	family_smsagent
sample	family_smsagent

Smsagent family
smsagent

Declares services with permission to bind to the system 1 IoCs

Processes:

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE

Requests dangerous framework permissions 9 IoCs

Processes:

description	ioc
Allows an application to read audio files from external storage.	android.permission.READ_MEDIA_AUDIO
Allows an application to read video files from external storage.	android.permission.READ_MEDIA_VIDEO
Allows an app to access location in the background.	android.permission.ACCESS_BACKGROUND_LOCATION
Allows an application to read image files from external storage.	android.permission.READ_MEDIA_IMAGES
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application a broad access to external storage in scoped storage.	android.permission.MANAGE_EXTERNAL_STORAGE
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows applications to use exact alarm APIs.	android.permission.SCHEDULE_EXACT_ALARM
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION

Files

Roblox_Premium__Programado_Por_Juanjo_.3.apk
.apk android

com.premium.roblox.real

net.dinglisch.android.taskerm.Kid

Activities

net.dinglisch.android.taskerm.Kid

android.intent.action.MAIN

Permissions

android.permission.READ_MEDIA_AUDIO
android.permission.READ_MEDIA_VIDEO
android.permission.FOREGROUND_SERVICE
android.permission.ACCESS_BACKGROUND_LOCATION
android.permission.READ_MEDIA_IMAGES
android.permission.QUERY_ALL_PACKAGES
android.permission.VIBRATE
android.permission.SYSTEM_ALERT_WINDOW
com.android.alarm.permission.SET_ALARM
android.permission.MANAGE_EXTERNAL_STORAGE
android.permission.ACCESS_FINE_LOCATION
android.permission.SCHEDULE_EXACT_ALARM
android.permission.ACCESS_COARSE_LOCATION
android.permission.WAKE_LOCK

Receivers

net.dinglisch.android.taskerm.ReceiverStaticAlwaysOn

net.dinglisch.android.taskerm.WILLYUM
net.dinglisch.android.taskerm.AWAKEY
android.intent.action.BOOT_COMPLETED
android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REPLACED
android.intent.action.PACKAGE_REMOVED
android.intent.action.MY_PACKAGE_REPLACED

net.dinglisch.android.taskerm.ReceiverStaticInternal

android.intent.action.DATE_CHANGED
android.intent.action.TIME_SET
android.intent.action.TIMEZONE_CHANGED
net.dinglisch.android.tasker.WIDICKYUM

Services

net.dinglisch.android.taskerm.MyAccessibilityService

android.accessibilityservice.AccessibilityService

com.joaomgcd.taskerm.plugin.ServiceRequestQuery

com.twofortyfouram.locale.intent.action.REQUEST_QUERY

Roblox_Premium__Programado_Por_Juanjo_.3.apk

Permissions

android.permission.READ_MEDIA_AUDIO

android.permission.READ_MEDIA_VIDEO

android.permission.FOREGROUND_SERVICE

android.permission.ACCESS_BACKGROUND_LOCATION

android.permission.READ_MEDIA_IMAGES

android.permission.QUERY_ALL_PACKAGES

android.permission.VIBRATE

android.permission.SYSTEM_ALERT_WINDOW

com.android.alarm.permission.SET_ALARM

android.permission.MANAGE_EXTERNAL_STORAGE

android.permission.ACCESS_FINE_LOCATION

android.permission.SCHEDULE_EXACT_ALARM

android.permission.ACCESS_COARSE_LOCATION

android.permission.WAKE_LOCK

Sharing

General

Malware Config

Signatures

Files

com.premium.roblox.real

net.dinglisch.android.taskerm.Kid

Activities

net.dinglisch.android.taskerm.Kid

Permissions

Receivers

net.dinglisch.android.taskerm.ReceiverStaticAlwaysOn

net.dinglisch.android.taskerm.ReceiverStaticInternal

Services

net.dinglisch.android.taskerm.MyAccessibilityService

com.joaomgcd.taskerm.plugin.ServiceRequestQuery

Android Permissions

Roblox_Premium__Programado_Por_Juanjo_.3.apk