General

  • Target

    ff43be3e709be29f1902ef98942a93e569a872b87aa8e683394db1c0cc8983b1

  • Size

    14.0MB

  • MD5

    817ec1cd96d40bdebe0e5f8bbddd1be6

  • SHA1

    933c5803653a4d54002e8dbdabbdedbe1acc4b23

  • SHA256

    ff43be3e709be29f1902ef98942a93e569a872b87aa8e683394db1c0cc8983b1

  • SHA512

    0a7204ea9fb92fa074f1383f520cca9cea886d457054c17d4ea9ce1783dcce99146fd44ea3d7cce1dac6c8d4a1721a2fd7477d7d96057f797d1095521b69ff57

  • SSDEEP

    196608:xvjdvQcgc3TOFZ7H27Tnwzi5bjI2NMpeRjO33+DsCusEGoHtdxCr6ZZOEym5f:xLdocqhWnnI2No3SsCrk9CkOc5f

Score
10/10

Malware Config

Signatures

  • Android SMSWorm payload 1 IoCs
  • Smsworm family

Files

  • ff43be3e709be29f1902ef98942a93e569a872b87aa8e683394db1c0cc8983b1
    .apk android arch:arm64 arch:arm

    org.rnazarevych.shaketorch

    nerdcats.arabichausa.MainActivity


Android Permissions

ff43be3e709be29f1902ef98942a93e569a872b87aa8e683394db1c0cc8983b1

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.RECEIVE_BOOT_COMPLETED

com.android.launcher.permission.INSTALL_SHORTCUT

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

com.google.android.c2dm.permission.RECEIVE

android.permission.ACCESS_WIFI_STATE

android.permission.FOREGROUND_SERVICE

com.google.android.gms.permission.AD_ID