smsworm | daa78744599ce43d41e3a7c99ffe676642f763855ff9bfb39e12a2a9229a2c1c

General

Target

daa78744599ce43d41e3a7c99ffe676642f763855ff9bfb39e12a2a9229a2c1c
Size

8.5MB
MD5

557f116f9686f6e766cba9e87448961b
SHA1

a5eef5cf8bbbd5d14b5960240f535c20988094a9
SHA256

daa78744599ce43d41e3a7c99ffe676642f763855ff9bfb39e12a2a9229a2c1c
SHA512

95a7ece1dce844964b84b5402bf523d4a3c0044efbdd9a7c55c2bcea89092d4932ed1224276bd1260db05d862f52e942a5e2600b73a5fa3d95bcebada259a0ce
SSDEEP

98304:S/W1A9XMxaaBgv64eolPT7JWkPGKFEG9IcMMIcAXWhMPVakh7apeRsMuhlv/7OxI:8eA1MF/suKeOIzwlMPNMpeRjO37+DsCY

Score

10^/10

smsworm

Android SMSWorm payload 1 IoCs

Processes:

resource yara_rule

sample family_smsworm
Smsworm family
smsworm

resource	yara_rule
sample	family_smsworm

Requests dangerous framework permissions 3 IoCs

Processes:

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION

Permissions

android.permission.INTERNET

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.FOREGROUND_SERVICE