General

  • Target

    9c024966062cb00b3dff281b4a92451e793b3436f7c0bb782d96ed9d2721f394

  • Size

    9.4MB

  • MD5

    e0140d7409d8ea55cb1f910e56ecb5c0

  • SHA1

    be189a5e2dc84f27111114c5eb357bc02ff820dc

  • SHA256

    9c024966062cb00b3dff281b4a92451e793b3436f7c0bb782d96ed9d2721f394

  • SHA512

    e2e14be5f2f3539f3f54d66534b9d83f94cff1ad6100fcdee2dee7d9b70ff8251d48b44015e9bfd2ad5a382552322b32af5398824bcdf002b636cd03a7b37255

  • SSDEEP

    196608:cB61MHXP+yV2GeNMpeRjO3O+DsCWR6FNfrjLbu/X0gR:cuOXP+U2GeNo3xsCWR6vfrvC/kI

Score
10/10

Malware Config

Signatures

  • Android SMSWorm payload 1 IoCs
  • Smsworm family

Files

  • 9c024966062cb00b3dff281b4a92451e793b3436f7c0bb782d96ed9d2721f394
    .apk android arch:arm64 arch:arm

    com.qidian.Int.reader

    cz.marstaj.cardexpiration.app.cardlist.MainActivity


Android Permissions

9c024966062cb00b3dff281b4a92451e793b3436f7c0bb782d96ed9d2721f394

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.VIBRATE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

com.google.android.c2dm.permission.RECEIVE

com.qidian.Int.reader.permission.C2D_MESSAGE

android.permission.ACCESS_WIFI_STATE

android.permission.FOREGROUND_SERVICE