Resubmissions

15-03-2024 18:37

240315-w9rt9sfh6w 10

15-03-2024 18:36

240315-w8z49afh4t 10

15-03-2024 18:30

240315-w5nxtahg83 10

15-03-2024 18:28

240315-w4s55sfg3z 10

General

  • Target

    rata.tvcreator_v1.1.apk

  • Size

    13.4MB

  • MD5

    aa725d2639cc248c60b018159dd753ff

  • SHA1

    f46ea732a40b3de67283e8e43b24bb7e71e86380

  • SHA256

    4deaf9b563854ae9a724ae46ec714566064fe5fd607e2880d742b240b9952f79

  • SHA512

    6421936323db77cb50a51ffa79e3d45503fae1cb523c709f7ac155359ec8bf26dfc4dddf1f20c875689c95784b6a37c83688d03527b810d15a73ba877fa681aa

  • SSDEEP

    393216:mT3XVpmsqRSeYhRux8uIFdzDYFk4rVnbbE5:mDXfmsVh46dMk4rVXm

Score
10/10

Malware Config

Signatures

  • Android SMSWorm payload 1 IoCs
  • Smsworm family
  • Declares services with permission to bind to the system 1 IoCs

Files

  • rata.tvcreator_v1.1.apk
    .apk android arch:arm64 arch:arm arch:mips arch:mips64 arch:x86 arch:x64

    rata.tvcreator

    rata.tvcreator.preinicio


Android Permissions

rata.tvcreator_v1.1.apk

Permissions

android.permission.FOREGROUND_SERVICE

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.WAKE_LOCK

com.google.android.c2dm.permission.RECEIVE

com.google.android.gms.permission.AD_ID

android.permission.RECEIVE_BOOT_COMPLETED

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.ACCESS_WIFI_STATE