daa78744599ce43d41e3a7c99ffe676642f763855ff9bfb39e12a2a9229a2c1c
- SHA256 daa78744599ce43d41e3a7c99ffe676642f763855ff9bfb39e12a2a9229a2c1c
-
Android SMSWorm payload
at.math.arena
Behavioral task
behavioral1
Sample
daa78744599ce43d41e3a7c99ffe676642f763855ff9bfb39e12a2a9229a2c1c.apk
Resource
android-x86-arm-20240514-en
| resource | yara_rule |
|---|---|
| sample | family_smsworm |
| description | ioc |
|---|---|
| Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. | android.permission.READ_PHONE_STATE |
| Allows an application to read from external storage. | android.permission.READ_EXTERNAL_STORAGE |
| Allows an app to access approximate location. | android.permission.ACCESS_COARSE_LOCATION |
Android SMSWorm payload
android.permission.INTERNET
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.READ_PHONE_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.READ_EXTERNAL_STORAGE
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.ACCESS_COARSE_LOCATION
android.permission.FOREGROUND_SERVICE