smsworm | f28818acccb59e01c4b8482f512f3404a88498f60d94761b4a0ce354cb25ebd5

General

Target
f28818acccb59e01c4b8482f512f3404a88498f60d94761b4a0ce354cb25ebd5
Size 14.7MB
Sample240314-k5dlasad37
SHA256 f28818acccb59e01c4b8482f512f3404a88498f60d94761b4a0ce354cb25ebd5
MD5 928b1aa90f84314e1ec635aedf6b0d1e
SHA1 d144b0b83a6974873b977b18316d7b4a6d8d54b8
SHA512 9817f2965e3340681083bb5f19707fad96bf3370a8efd738a87ea61073dcb186b6c3a8e99385fde6a0b447890d881bee2f20c59c8bcfa971d175b69b83baf860
SSDEEP 393216:rtfn3/j29fjZ5UaGseMs7No3XsCGDk0UZ1+gfVanZ:rtfn4Z5DGseMs7E8i0UZ1+gfQZ
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

smsworm

Malware Config

Signatures

Android SMSWorm payload 1 IoCs

resource	yara_rule
sample	family_smsworm

Smsworm family
smsworm

Requests dangerous framework permissions 4 IoCs

description	ioc
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION

File Explorer

f28818acccb59e01c4b8482f512f3404a88498f60d94761b4a0ce354cb25ebd5

.apk 14.7MB

f28818acccb59e01c4b8482f512f3404a88498f60d94761b4a0ce354cb25ebd5

SHA256 f28818acccb59e01c4b8482f512f3404a88498f60d94761b4a0ce354cb25ebd5
MD5 928b1aa90f84314e1ec635aedf6b0d1e
SHA1 d144b0b83a6974873b977b18316d7b4a6d8d54b8
SHA512 9817f2965e3340681083bb5f19707fad96bf3370a8efd738a87ea61073dcb186b6c3a8e99385fde6a0b447890d881bee2f20c59c8bcfa971d175b69b83baf860
SSDEEP 393216:rtfn3/j29fjZ5UaGseMs7No3XsCGDk0UZ1+gfVanZ:rtfn4Z5DGseMs7E8i0UZ1+gfQZ
MD5 SHA1 SHA512 SSDEEP

android arch:arm64 arch:arm

Android SMSWorm payload

com.arappdev.whiteboard

Android Permissions

f28818acccb59e01c4b8482f512f3404a88498f60d94761b4a0ce354cb25ebd5

Permissions

android.permission.ACCESS_COARSE_LOCATION

android.permission.INTERNET

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

com.google.android.providers.gsf.permission.READ_GSERVICES

android.permission.ACCESS_FINE_LOCATION

com.google.android.c2dm.permission.RECEIVE

epicstar.allvillagemap.permission.C2D_MESSAGE

android.permission.VIBRATE

android.permission.RECEIVE_BOOT_COMPLETED

com.sec.android.provider.badge.permission.READ

com.sec.android.provider.badge.permission.WRITE

com.htc.launcher.permission.READ_SETTINGS

com.htc.launcher.permission.UPDATE_SHORTCUT

com.sonyericsson.home.permission.BROADCAST_BADGE

com.sonymobile.home.permission.PROVIDER_INSERT_BADGE

com.anddoes.launcher.permission.UPDATE_COUNT

com.majeur.launcher.permission.UPDATE_BADGE

com.huawei.android.launcher.permission.CHANGE_BADGE

com.huawei.android.launcher.permission.READ_SETTINGS

com.huawei.android.launcher.permission.WRITE_SETTINGS

android.permission.READ_APP_BADGE

com.oppo.launcher.permission.READ_SETTINGS

com.oppo.launcher.permission.WRITE_SETTINGS

me.everything.badger.permission.BADGE_COUNT_READ

me.everything.badger.permission.BADGE_COUNT_WRITE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.FOREGROUND_SERVICE

com.google.android.gms.permission.AD_ID

android.permission.USE_FULL_SCREEN_INTENT

Sharing

General

Malware Config

Signatures

File Explorer

f28818acccb59e01c4b8482f512f3404a88498f60d94761b4a0ce354cb25ebd5

com.villagemaps.livevillagemap.activity.FirstSplashActivity

com.villagemaps.livevillagemap.activity.ExitActivity

com.villagemaps.livevillagemap.activity.ThirdSplashActivity

com.villagemaps.livevillagemap.StartActivity

com.villagemaps.livevillagemap.StateActivity

com.villagemaps.livevillagemap.HomeActivity

com.villagemaps.livevillagemap.DisActivity

com.villagemaps.livevillagemap.CityActivity

com.villagemaps.livevillagemap.MapsActivity

com.google.android.gms.common.api.GoogleApiActivity

com.google.android.gms.ads.AdActivity

com.arappdev.whiteboard.ndYWlV

com.arappdev.whiteboard.ySBA7M

com.startapp.sdk.adsbase.consent.ConsentActivity

com.startapp.sdk.ads.list3d.List3DActivity

com.startapp.sdk.ads.interstitials.OverlayActivity

com.unity3d.services.ads.adunit.AdUnitActivity

com.unity3d.services.ads.adunit.AdUnitTransparentActivity

com.unity3d.services.ads.adunit.AdUnitTransparentSoftwareActivity

com.unity3d.services.ads.adunit.AdUnitSoftwareActivity

com.google.android.gms.ads.AdService

androidx.work.impl.background.systemalarm.SystemAlarmService

androidx.work.impl.background.systemjob.SystemJobService

androidx.room.MultiInstanceInvalidationService

com.arappdev.whiteboard.kQTtlc

com.arappdev.whiteboard.PI9fVf

com.arappdev.whiteboard.wp0YGw

com.startapp.sdk.cachedservice.BackgroundService

com.startapp.sdk.jobs.SchedulerService

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

com.arappdev.whiteboard.PjXLSZ

com.startapp.sdk.adsbase.remoteconfig.BootCompleteListener

androidx.core.content.FileProvider

com.google.android.gms.ads.MobileAdsInitProvider

androidx.work.impl.WorkManagerInitializer

com.arappdev.whiteboard.WhMfQq

com.startapp.sdk.adsbase.StartAppInitProvider

Android Permissions

f28818acccb59e01c4b8482f512f3404a88498f60d94761b4a0ce354cb25ebd5