smsagent | clear_gms[.]apk

General

Target

clear_gms.apk
Size

6.5MB
MD5

cf6d6e0ca74ade4e6f799de875036c97
SHA1

1a1cc2cb36bb7edb1b981415bd92d4d71a4d0ac9
SHA256

cc55ee99ba80ef0e9dcbeb9669abef8b6f7739428c915e43d12bf2472a8ea1b8
SHA512

241ea4152f9e56385eb23b678de3c6abd077415efcb68deff34d9e9a214b1b043e8de20ffbf095db7a8ba6cedf3c2e1fe37e2bce48da09d41c3091794f4c91c4
SSDEEP

196608:DPM9/Q9IRcL/05dKe41y8et3CB7a9Z0mbzvPQh:DPMFM5L/Gdq1yx3Cg8m3PQh

Score

10^/10

smsagent

SmsAgent payload 2 IoCs

resource	yara_rule
sample	family_smsagent
sample	family_smsagent

Requests dangerous framework permissions 2 IoCs

description	ioc
Allows applications to use exact alarm APIs.	android.permission.SCHEDULE_EXACT_ALARM
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW

Permissions

android.permission.SCHEDULE_EXACT_ALARM

android.permission.FOREGROUND_SERVICE

android.permission.QUERY_ALL_PACKAGES

android.permission.SYSTEM_ALERT_WINDOW

android.permission.WAKE_LOCK