da318465946bde81b6a1b0669d8174a1[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

da318465946bde81b6a1b0669d8174a1.bin
Size

14.0MB
MD5

c9c87be82f2432a2cdef0cc7fddb63cf
SHA1

c6b22d55ceaa45756f6ec9a262acad06572b9a8f
SHA256

c8586170fe7a9cc94018eb15672f9d398b19f99a5ff61c42e20136c0d35bfd91
SHA512

3d07e78d412d2a544dd7b48a711b4ed73bf464bce85bf8af1cf53cc7fca587857cafb433984f656637dc8ac2cf38b8e675b9fc0cd7eb2afb6e4c2fcf2ad3c93d
SSDEEP

393216:T2aOppfIE+pZ5jyNYSzgnk9Dtg85YD8beM:T2D7ffm5jy2SzPG85q0eM

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 1 IoCs

description	ioc
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS

Files

da318465946bde81b6a1b0669d8174a1.bin
.zip

Password: infected
e96cb3e957b9573f60f31e5c10fcb385a56063f24bb749d75ac0ca97393fc3dc.apk
.apk android arch:arm64 arch:arm

Password: infected

com.simplemobiletools.launcherxlxlxgpfom

com.simplemobiletools.launcher.activities.MainActivity

Activities

com.simplemobiletools.launcher.activities.MainActivity

android.content.pm.action.CONFIRM_PIN_SHORTCUT
android.intent.action.MAIN

com.simplemobiletools.launcher.activities.SettingsActivity

android.intent.action.APPLICATION_PREFERENCES

Permissions

android.permission.INTERNET
android.permission.FOREGROUND_SERVICE
android.permission.RECEIVE_SMS
android.permission.QUERY_ALL_PACKAGES
android.permission.BIND_APPWIDGET
android.permission.REQUEST_DELETE_PACKAGES
android.permission.EXPAND_STATUS_BAR

Receivers

com.simplemobiletools.launcher.apper.MyReceiver

android.provider.Telephony.SMS_DELIVER
android.provider.Telephony.SMS_RECEIVED

com.simplemobiletools.commons.receivers.SharedThemeReceiver

com.simplemobiletools.commons.SHARED_THEME_ACTIVATED
com.simplemobiletools.commons.SHARED_THEME_UPDATED

androidx.profileinstaller.ProfileInstallReceiver

androidx.profileinstaller.action.INSTALL_PROFILE
androidx.profileinstaller.action.SKIP_FILE
androidx.profileinstaller.action.SAVE_PROFILE
androidx.profileinstaller.action.BENCHMARK_OPERATION

Services