891f42298a21ef70de0a75df9b6dc30d89da078daf4ea5a78fcbebabab657cfc[.]bin

Sharing

Copy URL Twitter E-mail

General

Target

891f42298a21ef70de0a75df9b6dc30d89da078daf4ea5a78fcbebabab657cfc.bin
Size

1.7MB
MD5

b8f541bba343ae15115bfd8589df13ac
SHA1

6209f1bcceccd2376fedf74374224cf02cd0dfca
SHA256

891f42298a21ef70de0a75df9b6dc30d89da078daf4ea5a78fcbebabab657cfc
SHA512

db1000191312dde5fa037418b59703e84486539a8f9a6560f32f673f2691975784ea9c20b8f3d4f8d42135372fd09f594fd87616279b96cbaeb57d5729737dde
SSDEEP

24576:nEnNr1kjhG9VpJZ0+DYvkm+Sn2euiTlYTb/A2eLnaPX0CftLXxLR2pAaxe2J:EnNRfVpJZ0+0sDSJ5YPNeLaPHLBwpH3

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 4 IoCs

description	ioc
Required by remote views services to bind with the system. Allows apps to share and display views across different processes.	android.permission.BIND_REMOTEVIEWS
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE
Required by call screening services to bind with the system. Allows apps to filter and manage incoming phone calls.	android.permission.BIND_SCREENING_SERVICE
Required by quick settings tile services to bind with the system. Allows apps to add custom tiles to the quick settings menu.	android.permission.BIND_QUICK_SETTINGS_TILE

Requests dangerous framework permissions 9 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows the app to answer an incoming phone call.	android.permission.ANSWER_PHONE_CALLS
Allows applications to use exact alarm APIs.	android.permission.SCHEDULE_EXACT_ALARM

Files

891f42298a21ef70de0a75df9b6dc30d89da078daf4ea5a78fcbebabab657cfc.bin
.zip
base.apk
.apk android arch:x86 arch:arm arch:x64 arch:arm64

com.mdnsoft.callsmsmanager

com.mdnsoft.callsmsmanager.MainActivity

Activities

com.mdnsoft.callsmsmanager.MainActivity

android.intent.action.MAIN

com.mdnsoft.callsmsmanager.AddListSelector

android.intent.action.SEND

com.mdnsoft.callsmsmanager.Notepad

android.intent.action.MAIN
android.intent.action.VIEW
android.intent.action.EDIT

com.mdnsoft.callsmsmanager.Calculator

android.intent.action.MAIN

com.mdnsoft.callsmsmanager.StartActivity

android.intent.action.MAIN

com.mdnsoft.callsmsmanager.DialerActivity

android.intent.action.VIEW
android.intent.action.DIAL
android.intent.action.DIAL

Permissions

android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_PHONE_STATE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.READ_CONTACTS
android.permission.VIBRATE
android.permission.ACCESS_NETWORK_STATE
com.android.vending.BILLING
android.permission.ACCESS_SUPERUSER
android.permission.WRITE_CONTACTS
android.permission.WAKE_LOCK
android.permission.WRITE_SETTINGS
android.permission.DISABLE_KEYGUARD
android.permission.ACCESS_NOTIFICATION_POLICY
android.permission.INTERNET
android.permission.CALL_PHONE
android.permission.USE_FINGERPRINT
android.permission.USE_BIOMETRIC
android.permission.SYSTEM_ALERT_WINDOW
android.permission.ANSWER_PHONE_CALLS
android.permission.FOREGROUND_SERVICE
android.permission.SCHEDULE_EXACT_ALARM

Receivers

com.mdnsoft.callsmsmanager.AppReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.SERVICE_STATE
android.intent.action.PHONE_STATE
com.mdnsoft.callsmsmanagermodule.PHONE_STATE
android.intent.action.AIRPLANE_MODE
android.intent.action.DUAL_SIM_MODE
com.mdnsoft.doSchedules
com.mdnsoft.ProcessDelete
com.mdnsoft.MarkSMS
com.mdnsoft.callsmsmanager.ACTION_UPDATE
RCM_List
RCM_Backup
RCM_Update_Group
RCM_RESTART_RADIO
RCM_RESTART_RADIO1
RCM_RESTART_INET
RCM_Private
RCM_Scheduler
com.mdnsoft.callsmsmanager.RESTART_RADIO
com.mdnsoft.callsmsmanager.RESTART_RADIO1
com.mdnsoft.callsmsmanager.AirplaneMode
com.mdnsoft.callsmsmanager.to_call
com.mdnsoft.callsmsmanager.to_send_sms
com.mdnsoft.callmanager.rcmkey.checked
com.mdnsoft.callsmsmanagermodule.NEW_OUTGOING_CALL
android.intent.action.NEW_OUTGOING_CALL

com.mdnsoft.callsmsmanager.XReceiver

com.mdnsoft.callsmsmanager.xinit_register
com.mdnsoft.callsmsmanager.XSMS_RECEIEVE
com.mdnsoft.callsmsmanager.XMMS_RECEIEVE
com.mdnsoft.callsmsmanager.XSMSOUT_RECEIEVE
com.mdnsoft.callsmsmanager.XCALL_RECEIEVE
com.mdnsoft.callsmsmanager.XFCALL_RECEIEVE

com.mdnsoft.callsmsmanager.Widget

android.appwidget.action.APPWIDGET_UPDATE

com.mdnsoft.callsmsmanager.MMS

android.provider.Telephony.SMS_RECEIVED
android.provider.Telephony.WAP_PUSH_RECEIVED
com.mdnsoft.callsmsmanagermodule.SMS_RECEIVED
com.mdnsoft.callsmsmanagermodule.WAP_PUSH_RECEIVED

com.mdnsoft.callsmsmanager.Widget2

android.appwidget.action.APPWIDGET_UPDATE

Services

com.mdnsoft.callsmsmanager.NLS

android.service.notification.NotificationListenerService

com.mdnsoft.callsmsmanager.CallFilteringService

android.telecom.CallScreeningService

com.mdnsoft.callsmsmanager.TService

android.service.quicksettings.action.QS_TILE
icon.png
.png
meta.sai_v1.json
meta.sai_v2.json

Sharing

General

Malware Config

Signatures

Files

com.mdnsoft.callsmsmanager

com.mdnsoft.callsmsmanager.MainActivity

Activities

com.mdnsoft.callsmsmanager.MainActivity

com.mdnsoft.callsmsmanager.AddListSelector

com.mdnsoft.callsmsmanager.Notepad

com.mdnsoft.callsmsmanager.Calculator

com.mdnsoft.callsmsmanager.StartActivity

com.mdnsoft.callsmsmanager.DialerActivity

Permissions

Receivers

com.mdnsoft.callsmsmanager.AppReceiver

com.mdnsoft.callsmsmanager.XReceiver

com.mdnsoft.callsmsmanager.Widget

com.mdnsoft.callsmsmanager.MMS

com.mdnsoft.callsmsmanager.Widget2

Services

com.mdnsoft.callsmsmanager.NLS

com.mdnsoft.callsmsmanager.CallFilteringService

com.mdnsoft.callsmsmanager.TService