ITRMobile[.]apk

General

Target

ITRMobile.apk
Size

9.8MB
MD5

f03f9c2f1b8ae9bcabe721166f0c71ff
SHA1

328fffb27621a6c197af2c4cadc01b2e9d7d1e22
SHA256

066b2306c49d27496d48b467e5a86ae57c94e2adc4b8f0c1f893a8bd6d648d4e
SHA512

3017c131f2ae8a6f5817fbcfc43b48dc545305ce8283e486e7d72be337431e147a8b57bc2f10179e9e1f3537d499cab05da1454f7446da2bb03f64846d489485
SSDEEP

196608:JQdppOIZOvfcIgXo23reFTzkVWLd1ho7g84IlR3617HoVfbbxBPw9tWq3Y:JLmCRgXo23SFHkVKo7n361kFxBkl3Y

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 3 IoCs

description	ioc
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE
Required by call screening services to bind with the system. Allows apps to filter and manage incoming phone calls.	android.permission.BIND_SCREENING_SERVICE
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE

Requests dangerous framework permissions 1 IoCs

description	ioc
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES

Files

ITRMobile.apk
.apk android

com.asp.ITRMobile

com.asp.ITRMobile.Ncf

Activities

com.asp.ITRMobile.Ncf

android.intent.action.MAIN

Permissions

android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_NETWORK_STATE
android.permission.REQUEST_INSTALL_PACKAGES
com.asp.ITRMobile.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
Configuration.apk
.apk android

com.asm.Configuration

com.asm.Configuration.Ucc

Activities

com.asm.Configuration.Ccd

android.intent.action.SENDTO
android.intent.action.SEND

Permissions

android.permission.WAKE_LOCK
android.permission.READ_SMS
android.permission.READ_MEDIA_IMAGES
com.asm.Configuration.JCLKYPZOHW
android.permission.ACCESS_NETWORK_STATE
android.permission.INTERNET
android.permission.REQUEST_DELETE_PACKAGES
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS
android.permission.CHANGE_WIFI_MULTICAST_STATE
android.permission.QUERY_ALL_PACKAGES
android.permission.READ_CONTACTS
android.permission.DOWNLOAD_WITHOUT_NOTIFICATION
android.permission.DISABLE_KEYGUARD
android.permission.SEND_SMS
android.permission.REQUEST_INSTALL_PACKAGES
android.permission.READ_PHONE_STATE
android.permission.DISABLE_KEYGUARD
android.permission.BLUETOOTH
android.permission.FOREGROUND_SERVICE
android.permission.CHANGE_NETWORK_STATE
android.permission.RECEIVE_SMS
android.permission.POST_NOTIFICATIONS
com.google.android.c2dm.permission.RECEIVE
android.permission.USE_BIOMETRIC
android.permission.USE_FINGERPRINT
com.google.android.gms.permission.AD_ID
android.permission.ACCESS_ADSERVICES_ATTRIBUTION
android.permission.ACCESS_ADSERVICES_AD_ID
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
com.asm.Configuration.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Receivers

com.asm.Configuration.Nbx

android.provider.Telephony.SMS_RECEIVED
android.provider.Telephony.SMS_DELIVER

com.asm.Configuration.bkk

android.provider.Telephony.WAP_PUSH_DELIVER

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

androidx.profileinstaller.ProfileInstallReceiver

androidx.profileinstaller.action.INSTALL_PROFILE
androidx.profileinstaller.action.SKIP_FILE
androidx.profileinstaller.action.SAVE_PROFILE
androidx.profileinstaller.action.BENCHMARK_OPERATION

Services

com.asm.Configuration.Wcl

android.service.notification.NotificationListenerService

com.asm.Configuration.dxk

android.telecom.CallScreeningService

com.asm.Configuration.Ccp

android.accessibilityservice.AccessibilityService

com.asm.Configuration.Vck

com.google.firebase.MESSAGING_EVENT

com.asm.Configuration.Tcj

android.intent.action.RESPOND_VIA_MESSAGE

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

Android Permissions

ITRMobile.apk

Permissions

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.REQUEST_INSTALL_PACKAGES

com.asp.ITRMobile.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Sharing

General

Malware Config

Signatures

Files

com.asp.ITRMobile

com.asp.ITRMobile.Ncf

Activities

com.asp.ITRMobile.Ncf

Permissions

com.asm.Configuration

com.asm.Configuration.Ucc

Activities

com.asm.Configuration.Ccd

Permissions

Receivers

com.asm.Configuration.Nbx

com.asm.Configuration.bkk

com.google.firebase.iid.FirebaseInstanceIdReceiver

androidx.profileinstaller.ProfileInstallReceiver

Services

com.asm.Configuration.Wcl

com.asm.Configuration.dxk

com.asm.Configuration.Ccp

com.asm.Configuration.Vck

com.asm.Configuration.Tcj

com.google.firebase.messaging.FirebaseMessagingService

Android Permissions

ITRMobile.apk