1bd4ff4fbf8e84879c1055a34bf8023e3fdf35ab83c13282c8d4133080707b91[.]bin

General

Target

1bd4ff4fbf8e84879c1055a34bf8023e3fdf35ab83c13282c8d4133080707b91.bin
Size

1.7MB
MD5

3ee2351ec9b18579310fe9610c751c40
SHA1

6d6de68b5cc6da2f7e3a354a88de53a0b774d8bc
SHA256

1bd4ff4fbf8e84879c1055a34bf8023e3fdf35ab83c13282c8d4133080707b91
SHA512

d29ea76e93c93566911fdd95c3c3f566d1c6af854690107ac8c1e0697816faf435894d7afcc7756a3712ab723c1845dcf37f3478f46c70aca7c02c5df5cc0a23
SSDEEP

24576:YnNr1kjhG9VpJZ0+DYvkm+Sn2euiTlYTb/A2eLnaPX0CftLXxLR2pAaxe2K:YnNRfVpJZ0+0sDSJ5YPNeLaPHLBwpHA

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 4 IoCs

description	ioc
Required by remote views services to bind with the system. Allows apps to share and display views across different processes.	android.permission.BIND_REMOTEVIEWS
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE
Required by call screening services to bind with the system. Allows apps to filter and manage incoming phone calls.	android.permission.BIND_SCREENING_SERVICE
Required by quick settings tile services to bind with the system. Allows apps to add custom tiles to the quick settings menu.	android.permission.BIND_QUICK_SETTINGS_TILE

Requests dangerous framework permissions 9 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows the app to answer an incoming phone call.	android.permission.ANSWER_PHONE_CALLS
Allows applications to use exact alarm APIs.	android.permission.SCHEDULE_EXACT_ALARM

Files

1bd4ff4fbf8e84879c1055a34bf8023e3fdf35ab83c13282c8d4133080707b91.bin
.apk android arch:x86 arch:arm arch:x64 arch:arm64

com.mdnsoft.callsmsmanager

com.mdnsoft.callsmsmanager.MainActivity

Activities

com.mdnsoft.callsmsmanager.MainActivity

android.intent.action.MAIN

com.mdnsoft.callsmsmanager.AddListSelector

android.intent.action.SEND

com.mdnsoft.callsmsmanager.Notepad

android.intent.action.MAIN
android.intent.action.VIEW
android.intent.action.EDIT

com.mdnsoft.callsmsmanager.Calculator

android.intent.action.MAIN

com.mdnsoft.callsmsmanager.StartActivity

android.intent.action.MAIN

com.mdnsoft.callsmsmanager.DialerActivity

android.intent.action.VIEW
android.intent.action.DIAL
android.intent.action.DIAL

Permissions

android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_PHONE_STATE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.READ_CONTACTS
android.permission.VIBRATE
android.permission.ACCESS_NETWORK_STATE
com.android.vending.BILLING
android.permission.ACCESS_SUPERUSER
android.permission.WRITE_CONTACTS
android.permission.WAKE_LOCK
android.permission.WRITE_SETTINGS
android.permission.DISABLE_KEYGUARD
android.permission.ACCESS_NOTIFICATION_POLICY
android.permission.INTERNET
android.permission.CALL_PHONE
android.permission.USE_FINGERPRINT
android.permission.USE_BIOMETRIC
android.permission.SYSTEM_ALERT_WINDOW
android.permission.ANSWER_PHONE_CALLS
android.permission.FOREGROUND_SERVICE
android.permission.SCHEDULE_EXACT_ALARM

Receivers

com.mdnsoft.callsmsmanager.AppReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.SERVICE_STATE
android.intent.action.PHONE_STATE
com.mdnsoft.callsmsmanagermodule.PHONE_STATE
android.intent.action.AIRPLANE_MODE
android.intent.action.DUAL_SIM_MODE
com.mdnsoft.doSchedules
com.mdnsoft.ProcessDelete
com.mdnsoft.MarkSMS
com.mdnsoft.callsmsmanager.ACTION_UPDATE
RCM_List
RCM_Backup
RCM_Update_Group
RCM_RESTART_RADIO
RCM_RESTART_RADIO1
RCM_RESTART_INET
RCM_Private
RCM_Scheduler
com.mdnsoft.callsmsmanager.RESTART_RADIO
com.mdnsoft.callsmsmanager.RESTART_RADIO1
com.mdnsoft.callsmsmanager.AirplaneMode
com.mdnsoft.callsmsmanager.to_call
com.mdnsoft.callsmsmanager.to_send_sms
com.mdnsoft.callmanager.rcmkey.checked
com.mdnsoft.callsmsmanagermodule.NEW_OUTGOING_CALL
android.intent.action.NEW_OUTGOING_CALL

com.mdnsoft.callsmsmanager.XReceiver

com.mdnsoft.callsmsmanager.xinit_register
com.mdnsoft.callsmsmanager.XSMS_RECEIEVE
com.mdnsoft.callsmsmanager.XMMS_RECEIEVE
com.mdnsoft.callsmsmanager.XSMSOUT_RECEIEVE
com.mdnsoft.callsmsmanager.XCALL_RECEIEVE
com.mdnsoft.callsmsmanager.XFCALL_RECEIEVE

com.mdnsoft.callsmsmanager.Widget

android.appwidget.action.APPWIDGET_UPDATE

com.mdnsoft.callsmsmanager.MMS

android.provider.Telephony.SMS_RECEIVED
android.provider.Telephony.WAP_PUSH_RECEIVED
com.mdnsoft.callsmsmanagermodule.SMS_RECEIVED
com.mdnsoft.callsmsmanagermodule.WAP_PUSH_RECEIVED

com.mdnsoft.callsmsmanager.Widget2

android.appwidget.action.APPWIDGET_UPDATE

Services

com.mdnsoft.callsmsmanager.NLS

android.service.notification.NotificationListenerService

com.mdnsoft.callsmsmanager.CallFilteringService

android.telecom.CallScreeningService

com.mdnsoft.callsmsmanager.TService

android.service.quicksettings.action.QS_TILE

Android Permissions

1bd4ff4fbf8e84879c1055a34bf8023e3fdf35ab83c13282c8d4133080707b91.bin

Permissions

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.READ_CONTACTS

android.permission.VIBRATE

android.permission.ACCESS_NETWORK_STATE

com.android.vending.BILLING

android.permission.ACCESS_SUPERUSER

android.permission.WRITE_CONTACTS

android.permission.WAKE_LOCK

android.permission.WRITE_SETTINGS

android.permission.DISABLE_KEYGUARD

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.INTERNET

android.permission.CALL_PHONE

android.permission.USE_FINGERPRINT

android.permission.USE_BIOMETRIC

android.permission.SYSTEM_ALERT_WINDOW

android.permission.ANSWER_PHONE_CALLS

android.permission.FOREGROUND_SERVICE

android.permission.SCHEDULE_EXACT_ALARM

Sharing

General

Malware Config

Signatures

Files

com.mdnsoft.callsmsmanager

com.mdnsoft.callsmsmanager.MainActivity

Activities

com.mdnsoft.callsmsmanager.MainActivity

com.mdnsoft.callsmsmanager.AddListSelector

com.mdnsoft.callsmsmanager.Notepad

com.mdnsoft.callsmsmanager.Calculator

com.mdnsoft.callsmsmanager.StartActivity

com.mdnsoft.callsmsmanager.DialerActivity

Permissions

Receivers

com.mdnsoft.callsmsmanager.AppReceiver

com.mdnsoft.callsmsmanager.XReceiver

com.mdnsoft.callsmsmanager.Widget

com.mdnsoft.callsmsmanager.MMS

com.mdnsoft.callsmsmanager.Widget2

Services

com.mdnsoft.callsmsmanager.NLS

com.mdnsoft.callsmsmanager.CallFilteringService

com.mdnsoft.callsmsmanager.TService

Android Permissions

1bd4ff4fbf8e84879c1055a34bf8023e3fdf35ab83c13282c8d4133080707b91.bin