smsworm | Labalabi For Whatsapp_v20[.]0[.]apk

General

Target

Labalabi For Whatsapp_v20.0.apk
Size

3.4MB
MD5

1f400a6f883457e9378e37f7bfc76113
SHA1

4cacd6df506f095382551e929b68bd96f5b64828
SHA256

0e0201da887350f02171cce8ed2dfd0e1e0cf46110ee426a1d6dc236ea50206c
SHA512

d88d9ca8e499bbb8e8517e00333a4096316e4d4a5496b6f56a2ecb63aa2168a62142ff2dbdd31596792a30e4191efaafa2d44c5d760c2ef153446e0d725eade3
SSDEEP

98304:ytE0fr/hH4BD2dQaptpu2KJ3tCyC18dk9qx:2n4x2LptpuNJdCZ8diqx

Score

10^/10

smsworm

Android SMSWorm payload 1 IoCs

resource	yara_rule
sample	family_smsworm

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE

Requests dangerous framework permissions 4 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to record audio.	android.permission.RECORD_AUDIO
Required to be able to access the camera device.	android.permission.CAMERA
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW

Permissions

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.RECORD_AUDIO

android.permission.CAMERA

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.FOREGROUND_SERVICE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.RECEIVE_BOOT_COMPLETED

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE