Resubmissions

08/03/2024, 10:55

240308-m1dfvadc58 6

08/03/2024, 10:11

240308-l71paadd2z 6

08/03/2024, 09:51

240308-lv1hrada4x 6

General

  • Target

    ammpaysmsforward_2.4.apk

  • Size

    7.4MB

  • MD5

    5f04b19e54a4089e439778e19910806c

  • SHA1

    fe97a450b226e02bc3467805dff7f8d6b2308cdb

  • SHA256

    416582dfc3c41dea36cdffa942ef9ae80d1d78e66413e742f76be4545d26d5e1

  • SHA512

    15988b5d50b0a610f1246ae9270138aad34f336001dc6202533d5f78a83878c2c181c8d76aa33715cf1dc8a04d7473460938a495be62d714591868e9a8a40c9d

  • SSDEEP

    196608:ZqIXZcAo9Tt1FpfxjGSwzLgriggGCyLFjfT:ZqCyTtvmgrihUFfT

Score
6/10

Malware Config

Signatures

  • Requests dangerous framework permissions 8 IoCs

Files

  • ammpaysmsforward_2.4.apk
    .apk android arch:arm64 arch:arm arch:x86 arch:x64

    com.idpay.smsotp

    com.idpay.smsotp.MainActivity


Android Permissions

ammpaysmsforward_2.4.apk

Permissions

android.permission.READ_PHONE_STATE

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.FOREGROUND_SERVICE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.INTERNET

android.permission.READ_PHONE_NUMBERS

android.permission.SCHEDULE_EXACT_ALARM

android.permission.CHANGE_NETWORK_STATE

android.permission.READ_PRIVILEGED_PHONE_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.READ_EXTERNAL_STORAGE

android.permission.WAKE_LOCK