smsworm | 4d99caae27190f07886a28123560dce8a1efd4aa5258d69b5aeb09772ca6d994

General

Target

4d99caae27190f07886a28123560dce8a1efd4aa5258d69b5aeb09772ca6d994
Size

9.6MB
MD5

e38b1053eea56f76266819748322e1d8
SHA1

f95401194de9c3a4bccc71c64e5a2694776fa69b
SHA256

4d99caae27190f07886a28123560dce8a1efd4aa5258d69b5aeb09772ca6d994
SHA512

febe2f57044e8e210ba1eb4e325832e47bb1c2e447393347d95086812022fb9b9f1a05778d5aa679b7cf74aa653a32cb9970aa90d81033c95c9ac97566a3262a
SSDEEP

196608:S+DsCKNMpeRjO3UyRiMMNeOf79nVuvhQJE9cWYU:VsCKNo3Uv3NeOf7L46E63U

Score

10^/10

smsworm

Android SMSWorm payload 1 IoCs

resource	yara_rule
sample	family_smsworm

Requests dangerous framework permissions 3 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.READ_PHONE_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.FOREGROUND_SERVICE