15513676174[.]zip | Triage

Resubmissions

28/02/2024, 19:56

240228-ynzdbsce78 6

28/02/2024, 19:51

240228-yk374scc8t 6

28/02/2024, 19:47

240228-yhmgkscd38 6

Sharing

Copy URL Twitter E-mail

General

Target

15513676174.zip
Size

5.4MB
MD5

bd721db879bb30ac657c9c0730b1b9fb
SHA1

afc58269684da048fddf381834063c94f4b86f07
SHA256

f0ed56f20811977d4df8b60da92a6ac16ca0b82593063874adc219946de168a3
SHA512

5a25054a7c323d018a14148dbbc124b8d92b84e3c04384c8b62b08d9514967dc8db6dcaac93584daaed7671e2bc52d021180d97ab44e47dce39c21e703d6db71
SSDEEP

98304:mvDtCGjVQAcvtdwtNLuufs94qdFLb8vqZtpuVyvWadqNJT3gCcPWq:mAGlc4tNaufm9FnZ4hadEwWq

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 4 IoCs

description	ioc
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows financial apps to read filtered sms messages.	android.permission.SMS_FINANCIAL_TRANSACTIONS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE

Files

15513676174.zip
.zip

Password: infected
e5bf1cd626135d757c6f2cc7dd7ffa146a6324e0fbb1020d02cc5615a33f8f4f
.apk android

c3.i3.u1

.MainActivity

Activities

.MainActivity

android.intent.action.MAIN

Permissions

android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.READ_SMS
android.permission.RECEIVE_SMS
android.permission.BROADCAST_SMS
android.permission.SEND_SMS_NO_CONFIRMATION
android.permission.SMS_FINANCIAL_TRANSACTIONS
android.permission.MODIFY_PHONE_STATE
android.permission.READ_PHONE_STATE
android.permission.READ_PRECISE_PHONE_STATE
android.permission.READ_PRIVILEGED_PHONE_STATE
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE

Receivers

.SmsReceiver

android.provider.Telephony.SMS_RECEIVED

Services