smsagent | d744723ff284094a006bad426ed3d6c6

Sharing

Copy URL Twitter E-mail

General

Target
d744723ff284094a006bad426ed3d6c6
Size 8.0MB
Sample240319-2gam6she55
SHA256 abfc681699486b55ab723a174ab25404124334133bb5d3c94fdbd39a3af9c9a3
MD5 d744723ff284094a006bad426ed3d6c6
SHA1 3b5e07a9ee4b561f86c1d9f957e2d883e1833a74
SHA512 d44d33c608344ab8743af82d216211f6eebb1a6742d6e0656670ab6e7646a3c2695f4e3774afbc65d01018dd0deae50e39160e0ddbaed6d72f652142bb11553a
SSDEEP 98304:scZSMu2goodfQYUv4O/VkY1G2WtCqJTBQN8pvaTJ3apDRY:slT/dbUAYG2W4qpM8pvaTJCY
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

smsagent

Malware Config

Signatures

SmsAgent payload 1 IoCs

resource	yara_rule
sample	family_smsagent

Smsagent family
smsagent

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 7 IoCs

description	ioc
Required by quick settings tile services to bind with the system. Allows apps to add custom tiles to the quick settings menu.	android.permission.BIND_QUICK_SETTINGS_TILE
Required by quick settings tile services to bind with the system. Allows apps to add custom tiles to the quick settings menu.	android.permission.BIND_QUICK_SETTINGS_TILE
Required by quick settings tile services to bind with the system. Allows apps to add custom tiles to the quick settings menu.	android.permission.BIND_QUICK_SETTINGS_TILE
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE
Required by VPN services to bind with the system. Allows apps to provision VPN services.	android.permission.BIND_VPN_SERVICE
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE
Required by input method services to bind with the system. Allows apps to provide custom input methods (keyboards).	android.permission.BIND_INPUT_METHOD

Requests dangerous framework permissions 23 IoCs

description	ioc
Allows an application to collect component usage statistics.	android.permission.PACKAGE_USAGE_STATS
Allows an application to access data from sensors that the user uses to measure what is happening inside their body, such as heart rate.	android.permission.BODY_SENSORS
Allows an application to write and read the user's call log data.	android.permission.WRITE_CALL_LOG
Allows an application to read the user's call log.	android.permission.READ_CALL_LOG
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether.	android.permission.PROCESS_OUTGOING_CALLS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read the user's calendar data.	android.permission.READ_CALENDAR
Allows an application to write the user's calendar data.	android.permission.WRITE_CALENDAR
Allows the app to answer an incoming phone call.	android.permission.ANSWER_PHONE_CALLS
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW

File Explorer

d744723ff284094a006bad426ed3d6c6

.apk 8.0MB

d744723ff284094a006bad426ed3d6c6

SHA256 abfc681699486b55ab723a174ab25404124334133bb5d3c94fdbd39a3af9c9a3
MD5 d744723ff284094a006bad426ed3d6c6
SHA1 3b5e07a9ee4b561f86c1d9f957e2d883e1833a74
SHA512 d44d33c608344ab8743af82d216211f6eebb1a6742d6e0656670ab6e7646a3c2695f4e3774afbc65d01018dd0deae50e39160e0ddbaed6d72f652142bb11553a
SSDEEP 98304:scZSMu2goodfQYUv4O/VkY1G2WtCqJTBQN8pvaTJ3apDRY:slT/dbUAYG2W4qpM8pvaTJCY
MD5 SHA1 SHA512 SSDEEP

android

SmsAgent payload

net.dinglisch.android.taskerm

net.dinglisch.android.zoom.permission.MAKE_CHANGES android.permission.PACKAGE_USAGE_STATS cyanogenmod.permission.PUBLISH_CUSTOM_TILE android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS android.permission.REQUEST_COMPANION_RUN_IN_BACKGROUND android.permission.REQUEST_COMPANION_USE_DATA_IN_BACKGROUND android.permission.BODY_SENSORS android.permission.WRITE_CALL_LOG android.permission.READ_CALL_LOG android.permission.RECEIVE_SMS com.latedroid.juicedefender.permission.CONTROL_JUICEDEFENDER com.latedroid.juicedefender.permission.TOGGLE_MOBILE_DATA android.permission.MODIFY_PHONE_STATE com.android.phone.CHANGE_NETWORK_MODE android.permission.SET_TIME_ZONE android.permission.WRITE_SYNC_SETTINGS android.permission.WRITE_EXTERNAL_STORAGE android.permission.VIBRATE android.permission.WAKE_LOCK android.permission.GET_TASKS android.permission.RECEIVE_BOOT_COMPLETED android.permission.WRITE_SETTINGS android.permission.RECORD_AUDIO android.permission.READ_PHONE_STATE android.permission.SEND_SMS android.permission.WRITE_SMS android.permission.READ_SMS android.permission.ACCESS_FINE_LOCATION android.permission.ACCESS_COARSE_LOCATION com.android.alarm.permission.SET_ALARM android.permission.EXPAND_STATUS_BAR android.permission.CHANGE_NETWORK_STATE android.permission.CAMERA android.permission.DISABLE_KEYGUARD android.permission.BLUETOOTH_ADMIN android.permission.BLUETOOTH android.permission.ACCESS_NETWORK_STATE android.permission.SET_WALLPAPER android.permission.ACCESS_WIFI_STATE android.permission.CHANGE_WIFI_STATE android.permission.MODIFY_AUDIO_SETTINGS android.permission.PROCESS_OUTGOING_CALLS android.permission.READ_CONTACTS android.permission.WRITE_CONTACTS android.permission.INTERNET android.permission.CALL_PHONE android.permission.READ_SYNC_SETTINGS android.permission.READ_CALENDAR android.permission.WRITE_CALENDAR android.permission.WRITE_SECURE_SETTINGS android.permission.DUMP android.permission.CHANGE_CONFIGURATION android.permission.TETHER_PRIVILEGED com.joaomgcd.taskersettings.SET_SETTING android.permission.ANSWER_PHONE_CALLS android.permission.CAPTURE_AUDIO_OUTPUT android.permission.FOREGROUND_SERVICE android.permission.USE_BIOMETRIC android.permission.NFC android.permission.REQUEST_INSTALL_PACKAGES android.permission.SET_MEDIA_KEY_LISTENER android.permission.RESTART_PACKAGES android.permission.KILL_BACKGROUND_PROCESSES android.permission.ACCESS_WIMAX_STATE android.permission.CHANGE_WIMAX_STATE android.permission.SYSTEM_ALERT_WINDOW android.permission.ACCESS_NOTIFICATION_POLICY android.permission.READ_CLIPBOARD_IN_BACKGROUND android.permission.SET_VOLUME_KEY_LONG_PRESS_LISTENER com.android.vending.CHECK_LICENSE

net.dinglisch.android.taskerm.Tasker

android.intent.action.MAIN

com.joaomgcd.taskerm.util.ActivitySecondaryApp

android.intent.action.MAIN android.media.action.IMAGE_CAPTURE android.media.action.IMAGE_CAPTURE_SECURE android.media.action.STILL_IMAGE_CAMERA android.media.action.STILL_IMAGE_CAMERA_SECURE android.media.action.VIDEO_CAMERA android.media.action.VIDEO_CAPTURE

net.dinglisch.android.taskerm.Main

net.dinglisch.android.taskerm.KidConfig

com.joaomgcd.taskerm.datashare.export.ShareDataConfig

net.dinglisch.android.taskerm.ListItemEdit

net.dinglisch.android.taskerm.CreateKeyStore

net.dinglisch.android.taskerm.LongPressSearch

android.intent.action.SEARCH_LONG_PRESS

net.dinglisch.android.taskerm.VoiceProxy

net.dinglisch.android.taskerm.HTMLView

net.dinglisch.android.taskerm.Settings

net.dinglisch.android.tasker.ACTION_OPEN_PREFS android.service.quicksettings.action.QS_TILE_PREFERENCES

net.dinglisch.android.taskerm.ActionEdit

net.dinglisch.android.taskerm.ActionEditNoResize

net.dinglisch.android.taskerm.SceneEdit

net.dinglisch.android.taskerm.ScenePropertiesEdit

net.dinglisch.android.taskerm.SceneEditElement

net.dinglisch.android.taskerm.Licence

net.dinglisch.android.taskerm.EventEdit

net.dinglisch.android.taskerm.StateEdit

net.dinglisch.android.taskerm.MacroEdit

net.dinglisch.android.taskerm.USBHandler

net.dinglisch.android.taskerm.MIDIHandler

android.hardware.usb.action.USB_DEVICE_ATTACHED

net.dinglisch.android.taskerm.WebSearchHandler

android.speech.action.WEB_SEARCH

net.dinglisch.android.taskerm.AssistHandler

android.intent.action.ASSIST

net.dinglisch.android.taskerm.IntentHandler

net.dinglisch.android.tasker.WIDICKYUM android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW

net.dinglisch.android.taskerm.CameraProxy

net.dinglisch.android.taskerm.CameraProxyDiscrete

net.dinglisch.android.taskerm.ImageSelect

net.dinglisch.android.taskerm.LocSelect

net.dinglisch.android.taskerm.GeoCoder

net.dinglisch.android.taskerm.ProxyTransparent

net.dinglisch.android.taskerm.RunLog

net.dinglisch.android.taskerm.Search

net.dinglisch.android.taskerm.SceneActivity

net.dinglisch.android.taskerm.SceneActivityResize

net.dinglisch.android.taskerm.TaskSelect

net.dinglisch.android.tasker.ACTION_TASK_SELECT

net.dinglisch.android.taskerm.DummyActivity

net.dinglisch.android.taskerm.DockActivityCar

android.intent.action.MAIN

net.dinglisch.android.taskerm.DockActivityDesk

android.intent.action.MAIN

net.dinglisch.android.taskerm.TaskTimerConfigure

net.dinglisch.android.taskerm.ProfileProperties

net.dinglisch.android.taskerm.AppSelect

net.dinglisch.android.taskerm.DaySelect

net.dinglisch.android.taskerm.DoodleEdit

net.dinglisch.android.taskerm.FileSelect

net.dinglisch.android.taskerm.TimeSelect

net.dinglisch.android.taskerm.TaskerAppWidgetConfigure

android.appwidget.action.APPWIDGET_CONFIGURE

net.dinglisch.android.taskerm.TaskerAppWidgetConfigureShortcut

android.intent.action.CREATE_SHORTCUT

net.dinglisch.android.taskerm.TaskerAppWidgetCountdownConfigure

android.appwidget.action.APPWIDGET_CONFIGURE

net.dinglisch.android.taskerm.IpackIconSelect

net.dinglisch.android.ipack.actions.ICON_SELECT

com.joaomgcd.taskerm.genericaction.ActivityGenericAction

com.joaomgcd.taskerm.genericaction.ActivityGenericActionForResult

com.joaomgcd.taskerm.datashare.import.ActivityImportTaskerDataFromXml

android.intent.action.SEND android.intent.action.SEND android.intent.action.SEND android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW

com.joaomgcd.taskerm.datashare.import.ActivityImportTaskerDataFromUri

android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW

com.joaomgcd.taskerm.nfc.ActivityNFCTag

android.nfc.action.NDEF_DISCOVERED android.nfc.action.NDEF_DISCOVERED android.nfc.action.NDEF_DISCOVERED android.nfc.action.NDEF_DISCOVERED android.nfc.action.NDEF_DISCOVERED android.nfc.action.NDEF_DISCOVERED android.nfc.action.NDEF_DISCOVERED android.nfc.action.NDEF_DISCOVERED android.nfc.action.NDEF_DISCOVERED android.nfc.action.NDEF_DISCOVERED android.nfc.action.NDEF_DISCOVERED android.nfc.action.NDEF_DISCOVERED android.nfc.action.NDEF_DISCOVERED android.nfc.action.NDEF_DISCOVERED android.nfc.action.NDEF_DISCOVERED android.nfc.action.NDEF_DISCOVERED android.nfc.action.NDEF_DISCOVERED android.nfc.action.NDEF_DISCOVERED android.nfc.action.NDEF_DISCOVERED android.nfc.action.NDEF_DISCOVERED android.nfc.action.NDEF_DISCOVERED android.nfc.action.NDEF_DISCOVERED android.nfc.action.NDEF_DISCOVERED android.nfc.action.NDEF_DISCOVERED android.nfc.action.NDEF_DISCOVERED android.nfc.action.NDEF_DISCOVERED android.nfc.action.NDEF_DISCOVERED android.nfc.action.NDEF_DISCOVERED android.nfc.action.NDEF_DISCOVERED android.nfc.action.NDEF_DISCOVERED android.nfc.action.TECH_DISCOVERED android.nfc.action.TECH_DISCOVERED android.nfc.action.TAG_DISCOVERED android.nfc.action.TAG_DISCOVERED

com.joaomgcd.taskerm.navigationbar.ActivityReceiveKey

android.intent.action.MAIN

com.joaomgcd.taskerm.display.ActivityTurnScreenOff

com.google.android.gms.auth.api.signin.internal.SignInHubActivity

com.google.android.gms.common.api.GoogleApiActivity

net.dinglisch.android.taskerm.IpackReceiver

net.dinglisch.android.ipack.actions.QUERY_PACKS net.dinglisch.android.ipack.actions.QUERY_ICONS

net.dinglisch.android.taskerm.ReceiverStaticPhoneState

android.intent.action.PHONE_STATE

net.dinglisch.android.taskerm.ReceiverStaticNotification

net.dinglisch.android.tasker.NOTORUM

net.dinglisch.android.taskerm.ReceiverStaticMediaButton

net.dinglisch.android.taskerm.ReceiverStaticCallRewriter

android.intent.action.NEW_OUTGOING_CALL

net.dinglisch.android.taskerm.ReceiverStaticCallBlocker

android.intent.action.NEW_OUTGOING_CALL

net.dinglisch.android.taskerm.ReceiverStaticAlwaysOn

android.intent.action.BOOT_COMPLETED net.dinglisch.android.tasker.WILLYUM net.dinglisch.android.tasker.AWAKEY android.intent.action.PACKAGE_ADDED android.intent.action.PACKAGE_REPLACED android.intent.action.PACKAGE_REMOVED android.intent.action.MY_PACKAGE_REPLACED

net.dinglisch.android.taskerm.ReceiverStaticRunTasks

net.dinglisch.android.tasker.ACTION_TASK net.dinglisch.android.tasker.ACTION_TASK

net.dinglisch.android.taskerm.ReceiverStaticInternal

net.dinglisch.android.tasker.ACTION_FILE_CHANGED net.dinglisch.android.tasker.SMSEY net.dinglisch.android.tasker.ALARUM net.dinglisch.android.tasker.CALARUM net.dinglisch.android.tasker.COOLORUM net.dinglisch.android.tasker.WIDICKYUM net.dinglisch.android.tasker.ANDPROFTUM android.intent.action.DATE_CHANGED android.intent.action.TIME_SET android.intent.action.TIMEZONE_CHANGED com.twofortyfouram.locale.intent.action.REQUEST_QUERY

net.dinglisch.android.taskerm.TaskerAppWidgetProvider

android.appwidget.action.APPWIDGET_UPDATE

net.dinglisch.android.taskerm.TaskerAppWidgetCountdownProvider

android.appwidget.action.APPWIDGET_UPDATE

net.dinglisch.android.taskerm.MyDeviceAdminReceiver

android.app.action.DEVICE_ADMIN_ENABLED

Android Permissions

d744723ff284094a006bad426ed3d6c6

Permissions

net.dinglisch.android.zoom.permission.MAKE_CHANGES

android.permission.PACKAGE_USAGE_STATS

cyanogenmod.permission.PUBLISH_CUSTOM_TILE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.REQUEST_COMPANION_RUN_IN_BACKGROUND

android.permission.REQUEST_COMPANION_USE_DATA_IN_BACKGROUND

android.permission.BODY_SENSORS

android.permission.WRITE_CALL_LOG

android.permission.READ_CALL_LOG

android.permission.RECEIVE_SMS

com.latedroid.juicedefender.permission.CONTROL_JUICEDEFENDER

com.latedroid.juicedefender.permission.TOGGLE_MOBILE_DATA

android.permission.MODIFY_PHONE_STATE

com.android.phone.CHANGE_NETWORK_MODE

android.permission.SET_TIME_ZONE

android.permission.WRITE_SYNC_SETTINGS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.VIBRATE

android.permission.WAKE_LOCK

android.permission.GET_TASKS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WRITE_SETTINGS

android.permission.RECORD_AUDIO

android.permission.READ_PHONE_STATE

android.permission.SEND_SMS

android.permission.WRITE_SMS

android.permission.READ_SMS

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

com.android.alarm.permission.SET_ALARM

android.permission.EXPAND_STATUS_BAR

android.permission.CHANGE_NETWORK_STATE

android.permission.CAMERA

android.permission.DISABLE_KEYGUARD

android.permission.BLUETOOTH_ADMIN

android.permission.BLUETOOTH

android.permission.ACCESS_NETWORK_STATE

android.permission.SET_WALLPAPER

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.PROCESS_OUTGOING_CALLS

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

android.permission.INTERNET

android.permission.CALL_PHONE

android.permission.READ_SYNC_SETTINGS

android.permission.READ_CALENDAR

android.permission.WRITE_CALENDAR

android.permission.WRITE_SECURE_SETTINGS

Sharing

General

Malware Config

Signatures

File Explorer

d744723ff284094a006bad426ed3d6c6

net.dinglisch.android.taskerm.Tasker

com.joaomgcd.taskerm.util.ActivitySecondaryApp

net.dinglisch.android.taskerm.Main

net.dinglisch.android.taskerm.KidConfig

com.joaomgcd.taskerm.datashare.export.ShareDataConfig

net.dinglisch.android.taskerm.ListItemEdit

net.dinglisch.android.taskerm.CreateKeyStore

net.dinglisch.android.taskerm.LongPressSearch

net.dinglisch.android.taskerm.VoiceProxy

net.dinglisch.android.taskerm.HTMLView

net.dinglisch.android.taskerm.Settings

net.dinglisch.android.taskerm.ActionEdit

net.dinglisch.android.taskerm.ActionEditNoResize

net.dinglisch.android.taskerm.SceneEdit

net.dinglisch.android.taskerm.ScenePropertiesEdit

net.dinglisch.android.taskerm.SceneEditElement

net.dinglisch.android.taskerm.Licence

net.dinglisch.android.taskerm.EventEdit

net.dinglisch.android.taskerm.StateEdit

net.dinglisch.android.taskerm.MacroEdit

net.dinglisch.android.taskerm.USBHandler

net.dinglisch.android.taskerm.MIDIHandler

net.dinglisch.android.taskerm.WebSearchHandler

net.dinglisch.android.taskerm.AssistHandler

net.dinglisch.android.taskerm.IntentHandler

net.dinglisch.android.taskerm.CameraProxy

net.dinglisch.android.taskerm.CameraProxyDiscrete

net.dinglisch.android.taskerm.ImageSelect

net.dinglisch.android.taskerm.LocSelect

net.dinglisch.android.taskerm.GeoCoder

net.dinglisch.android.taskerm.ProxyTransparent

net.dinglisch.android.taskerm.RunLog

net.dinglisch.android.taskerm.Search

net.dinglisch.android.taskerm.SceneActivity

net.dinglisch.android.taskerm.SceneActivityResize

net.dinglisch.android.taskerm.TaskSelect

net.dinglisch.android.taskerm.DummyActivity

net.dinglisch.android.taskerm.DockActivityCar

net.dinglisch.android.taskerm.DockActivityDesk

net.dinglisch.android.taskerm.TaskTimerConfigure

net.dinglisch.android.taskerm.ProfileProperties

net.dinglisch.android.taskerm.AppSelect

net.dinglisch.android.taskerm.DaySelect

net.dinglisch.android.taskerm.DoodleEdit

net.dinglisch.android.taskerm.FileSelect

net.dinglisch.android.taskerm.TimeSelect

net.dinglisch.android.taskerm.TaskerAppWidgetConfigure

net.dinglisch.android.taskerm.TaskerAppWidgetConfigureShortcut

net.dinglisch.android.taskerm.TaskerAppWidgetCountdownConfigure

net.dinglisch.android.taskerm.IpackIconSelect

com.joaomgcd.taskerm.genericaction.ActivityGenericAction

com.joaomgcd.taskerm.genericaction.ActivityGenericActionForResult

com.joaomgcd.taskerm.datashare.import.ActivityImportTaskerDataFromXml

com.joaomgcd.taskerm.datashare.import.ActivityImportTaskerDataFromUri

com.joaomgcd.taskerm.nfc.ActivityNFCTag

com.joaomgcd.taskerm.navigationbar.ActivityReceiveKey

com.joaomgcd.taskerm.display.ActivityTurnScreenOff

com.google.android.gms.auth.api.signin.internal.SignInHubActivity

com.google.android.gms.common.api.GoogleApiActivity

net.dinglisch.android.taskerm.MonitorService

net.dinglisch.android.taskerm.ExecuteService

net.dinglisch.android.taskerm.QSTileService0

net.dinglisch.android.taskerm.QSTileService1

net.dinglisch.android.taskerm.QSTileService2

net.dinglisch.android.taskerm.NotificationListenerService

net.dinglisch.android.taskerm.MyVpnService

net.dinglisch.android.taskerm.MyAccessibilityService

com.joaomgcd.taskerm.plugin.ServiceRequestQuery

com.joaomgcd.taskerm.plugin.ServicePluginFinished

com.joaomgcd.taskerm.genericaction.ServiceGenericAction

com.joaomgcd.taskerm.genericaction.ServiceGenericActionJobs

com.joaomgcd.taskerm.keyboard.InputMethodServiceTasker

com.google.android.gms.auth.api.signin.RevocationBoundService

net.dinglisch.android.taskerm.IpackReceiver