4864c3b527aef2c1bc5b6c43a9d23610726f078970a23c6994a65e32004c5bec[.]bin

General

Target

4864c3b527aef2c1bc5b6c43a9d23610726f078970a23c6994a65e32004c5bec.bin
Size

2.5MB
MD5

24bee1d478f17cd8cd9f2a120252a9ce
SHA1

c06edcab6a7373715cb73cb9054c06bf81ced17a
SHA256

4864c3b527aef2c1bc5b6c43a9d23610726f078970a23c6994a65e32004c5bec
SHA512

04d697fca335a37ebb3ef0fdae24a4f5f121d3f1832002c7315402328ce49aabbcc5f6914cf1b01b1fde32bc4091d7c8d6a981213a71d90a97f01b40de9b3ff6
SSDEEP

49152:e/sISzi9zIwnKEyvVvZedd/8mT4apcic9eYPNcLaPjLnHCIp:eQz+hKE8Zu/8jXic9eqH5p

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 4 IoCs

description	ioc
Required by remote views services to bind with the system. Allows apps to share and display views across different processes.	android.permission.BIND_REMOTEVIEWS
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE
Required by call screening services to bind with the system. Allows apps to filter and manage incoming phone calls.	android.permission.BIND_SCREENING_SERVICE
Required by quick settings tile services to bind with the system. Allows apps to add custom tiles to the quick settings menu.	android.permission.BIND_QUICK_SETTINGS_TILE

Requests dangerous framework permissions 20 IoCs

description	ioc
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to monitor incoming MMS messages.	android.permission.RECEIVE_MMS
Allows an application to receive WAP push messages.	android.permission.RECEIVE_WAP_PUSH
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an application to write and read the user's call log data.	android.permission.WRITE_CALL_LOG
Allows an application to read the user's call log.	android.permission.READ_CALL_LOG
Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether.	android.permission.PROCESS_OUTGOING_CALLS
Allows an application a broad access to external storage in scoped storage.	android.permission.MANAGE_EXTERNAL_STORAGE
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows the app to answer an incoming phone call.	android.permission.ANSWER_PHONE_CALLS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows applications to use exact alarm APIs.	android.permission.SCHEDULE_EXACT_ALARM
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS

Files

4864c3b527aef2c1bc5b6c43a9d23610726f078970a23c6994a65e32004c5bec.bin
.apk android arch:x86 arch:arm arch:x64 arch:arm64

com.mdnsoft.callsmsmanager

com.mdnsoft.callsmsmanager.MainActivity

Activities

com.mdnsoft.callsmsmanager.MainActivity

android.intent.action.MAIN

com.mdnsoft.callsmsmanager.LicenseDialog

android.intent.action.VIEW

com.mdnsoft.callsmsmanager.AddListSelector

android.intent.action.SEND

com.mdnsoft.callsmsmanager.Notepad

android.intent.action.MAIN
android.intent.action.VIEW
android.intent.action.EDIT

com.mdnsoft.callsmsmanager.Calculator

android.intent.action.MAIN

com.mdnsoft.callsmsmanager.StartActivity

android.intent.action.MAIN

com.mdnsoft.callsmsmanager.DialerActivity

android.intent.action.VIEW
android.intent.action.DIAL
android.intent.action.DIAL

com.mdnsoft.smsapp.Journal

android.intent.action.MAIN

com.mdnsoft.smsapp.SenderActivity

android.intent.action.SEND
android.intent.action.SENDTO

Permissions

android.permission.READ_SMS
android.permission.RECEIVE_SMS
android.permission.SEND_SMS
android.permission.WRITE_SMS
android.permission.RECEIVE_MMS
android.permission.RECEIVE_WAP_PUSH
android.permission.REQUEST_INSTALL_PACKAGES
android.permission.WRITE_CALL_LOG
android.permission.READ_CALL_LOG
android.permission.PROCESS_OUTGOING_CALLS
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS
android.permission.MANAGE_EXTERNAL_STORAGE
android.permission.CALL_PHONE
android.permission.ANSWER_PHONE_CALLS
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_PHONE_STATE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.READ_CONTACTS
android.permission.VIBRATE
android.permission.ACCESS_NETWORK_STATE
com.android.vending.BILLING
android.permission.ACCESS_SUPERUSER
android.permission.WRITE_CONTACTS
android.permission.WAKE_LOCK
android.permission.WRITE_SETTINGS
android.permission.DISABLE_KEYGUARD
android.permission.ACCESS_NOTIFICATION_POLICY
android.permission.INTERNET
android.permission.USE_FINGERPRINT
android.permission.USE_BIOMETRIC
android.permission.SYSTEM_ALERT_WINDOW
android.permission.FOREGROUND_SERVICE
android.permission.SCHEDULE_EXACT_ALARM
android.permission.POST_NOTIFICATIONS
android.permission.HIGH_SAMPLING_RATE_SENSORS

Receivers

com.mdnsoft.callsmsmanager.AppReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.SERVICE_STATE
android.intent.action.PHONE_STATE
com.mdnsoft.callsmsmanagermodule.PHONE_STATE
android.intent.action.AIRPLANE_MODE
android.intent.action.DUAL_SIM_MODE
com.mdnsoft.doSchedules
com.mdnsoft.ProcessDelete
com.mdnsoft.MarkSMS
com.mdnsoft.callsmsmanager.ACTION_UPDATE
RCM_List
RCM_Backup
RCM_Update_Group
RCM_RESTART_RADIO
RCM_RESTART_RADIO1
RCM_RESTART_INET
RCM_Private
RCM_Scheduler
com.mdnsoft.callsmsmanager.RESTART_RADIO
com.mdnsoft.callsmsmanager.RESTART_RADIO1
com.mdnsoft.callsmsmanager.AirplaneMode
com.mdnsoft.callsmsmanager.to_call
com.mdnsoft.callsmsmanager.to_send_sms
com.mdnsoft.callmanager.rcmkey.checked
com.mdnsoft.callsmsmanagermodule.NEW_OUTGOING_CALL
android.intent.action.NEW_OUTGOING_CALL

com.mdnsoft.callsmsmanager.XReceiver

com.mdnsoft.callsmsmanager.xinit_register
com.mdnsoft.callsmsmanager.XSMS_RECEIEVE
com.mdnsoft.callsmsmanager.XMMS_RECEIEVE
com.mdnsoft.callsmsmanager.XSMSOUT_RECEIEVE
com.mdnsoft.callsmsmanager.XCALL_RECEIEVE
com.mdnsoft.callsmsmanager.XFCALL_RECEIEVE

com.mdnsoft.callsmsmanager.Widget

android.appwidget.action.APPWIDGET_UPDATE

com.mdnsoft.callsmsmanager.MMS

android.provider.Telephony.SMS_RECEIVED
android.provider.Telephony.WAP_PUSH_RECEIVED
com.mdnsoft.callsmsmanagermodule.SMS_RECEIVED
com.mdnsoft.callsmsmanagermodule.WAP_PUSH_RECEIVED

com.mdnsoft.callsmsmanager.Widget2

android.appwidget.action.APPWIDGET_UPDATE

com.mdnsoft.smsapp.SmsReceiver

android.provider.Telephony.SMS_DELIVER

com.mdnsoft.smsapp.MmsReceiver

android.provider.Telephony.WAP_PUSH_DELIVER

Services

com.mdnsoft.callsmsmanager.NLS

android.service.notification.NotificationListenerService

com.mdnsoft.callsmsmanager.CallFilteringService

android.telecom.CallScreeningService

com.mdnsoft.smsapp.HeadlessSmsSendService

android.intent.action.RESPOND_VIA_MESSAGE

com.mdnsoft.callsmsmanager.TService

android.service.quicksettings.action.QS_TILE

Android Permissions

4864c3b527aef2c1bc5b6c43a9d23610726f078970a23c6994a65e32004c5bec.bin

Permissions

android.permission.READ_SMS

android.permission.RECEIVE_SMS

android.permission.SEND_SMS

android.permission.WRITE_SMS

android.permission.RECEIVE_MMS

android.permission.RECEIVE_WAP_PUSH

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.WRITE_CALL_LOG

android.permission.READ_CALL_LOG

android.permission.PROCESS_OUTGOING_CALLS

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.MANAGE_EXTERNAL_STORAGE

android.permission.CALL_PHONE

android.permission.ANSWER_PHONE_CALLS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.READ_CONTACTS

android.permission.VIBRATE

android.permission.ACCESS_NETWORK_STATE

com.android.vending.BILLING

android.permission.ACCESS_SUPERUSER

android.permission.WRITE_CONTACTS

android.permission.WAKE_LOCK

android.permission.WRITE_SETTINGS

android.permission.DISABLE_KEYGUARD

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.INTERNET

android.permission.USE_FINGERPRINT

android.permission.USE_BIOMETRIC

android.permission.SYSTEM_ALERT_WINDOW

android.permission.FOREGROUND_SERVICE

android.permission.SCHEDULE_EXACT_ALARM

android.permission.POST_NOTIFICATIONS

android.permission.HIGH_SAMPLING_RATE_SENSORS

Sharing

General

Malware Config

Signatures

Files

com.mdnsoft.callsmsmanager

com.mdnsoft.callsmsmanager.MainActivity

Activities

com.mdnsoft.callsmsmanager.MainActivity

com.mdnsoft.callsmsmanager.LicenseDialog

com.mdnsoft.callsmsmanager.AddListSelector

com.mdnsoft.callsmsmanager.Notepad

com.mdnsoft.callsmsmanager.Calculator

com.mdnsoft.callsmsmanager.StartActivity

com.mdnsoft.callsmsmanager.DialerActivity

com.mdnsoft.smsapp.Journal

com.mdnsoft.smsapp.SenderActivity

Permissions

Receivers

com.mdnsoft.callsmsmanager.AppReceiver

com.mdnsoft.callsmsmanager.XReceiver

com.mdnsoft.callsmsmanager.Widget

com.mdnsoft.callsmsmanager.MMS

com.mdnsoft.callsmsmanager.Widget2

com.mdnsoft.smsapp.SmsReceiver

com.mdnsoft.smsapp.MmsReceiver

Services

com.mdnsoft.callsmsmanager.NLS

com.mdnsoft.callsmsmanager.CallFilteringService

com.mdnsoft.smsapp.HeadlessSmsSendService

com.mdnsoft.callsmsmanager.TService

Android Permissions

4864c3b527aef2c1bc5b6c43a9d23610726f078970a23c6994a65e32004c5bec.bin