ct158[.]apk | Triage

General

Target

ct158.apk
Size

9.5MB
MD5

ad297b791ba0070e26a99a03f2427c97
SHA1

19ee71b6d3c588b2004b2d2fdbbe445d56da552c
SHA256

d07570d3ea8f2f57ed1ee7aff0bda3bcf5a26483b331bbe9cc77e0747af2d7f1
SHA512

42812b0fee501ac0b25ddd3982a327d0b67b39f726b32adb8582d9fd31694f18c0e48d5f5b40f547566022e5d1dc7cc7bf4355e03e8b2b18292d429b2e412580
SSDEEP

196608:3MOakQjKAhFvkg8/judRyBfimHphp+1Gz1cIBYg3gKC:8n7FvkggCd0imJTaGppIKC

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 12 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to access location in the background.	android.permission.ACCESS_BACKGROUND_LOCATION
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application a broad access to external storage in scoped storage.	android.permission.MANAGE_EXTERNAL_STORAGE
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS

Files

ct158.apk
.apk android arch:arm64 arch:arm arch:mips arch:mips64 arch:x86 arch:x64

com.nth.taxicornisa

com.nth.taxicornisa.MainActivity

Activities

com.nth.taxicornisa.MainActivity

android.intent.action.MAIN

com.nth.taxicornisa.sms.ComposeSmsActivity

android.intent.action.SEND
android.intent.action.SENDTO

Permissions

android.permission.WAKE_LOCK
android.permission.INTERNET
android.permission.BLUETOOTH
android.permission.VIBRATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_COARSE_LOCATION
android.permission.CHANGE_NETWORK_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.READ_PHONE_STATE
android.permission.ACCESS_LOCATION_EXTRA_COMMANDS
android.permission.ACCESS_BACKGROUND_LOCATION
android.permission.READ_EXTERNAL_STORAGE
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS
android.permission.MANAGE_EXTERNAL_STORAGE
android.permission.GET_ACCOUNTS
android.permission.READ_CONTACTS
android.permission.REQUEST_INSTALL_PACKAGES
android.permission.WRITE_SETTINGS
android.permission.POST_NOTIFICATIONS
com.google.android.c2dm.permission.RECEIVE
android.permission.RECEIVE_BOOT_COMPLETED

Receivers

com.nth.taxicornisa.sms.SmsReceiver

android.provider.Telephony.SMS_DELIVER

com.nth.taxicornisa.sms.MmsReceiver

android.provider.Telephony.WAP_PUSH_DELIVER

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

com.instacart.library.truetime.BootCompletedBroadcastReceiver

android.intent.action.BOOT_COMPLETED

Services

com.nth.taxicornisa.services.SmsSendService

android.intent.action.RESPOND_VIA_MESSAGE

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT
carmen.apk
.apk android arch:arm

com.ivona.tts.voicebeta.ron.rou.carmen

.IvonaVoice

Activities

.IvonaVoice

android.intent.action.MAIN

CheckVoiceInstalled

com.ivona.tts.CHECK_VOICE_INSTALLED

Permissions

android.permission.WRITE_EXTERNAL_STORAGE
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.READ_PHONE_STATE
com.android.vending.CHECK_LICENSE
android.permission.WAKE_LOCK

Receivers

com.ivona.tts.voicelib.ActivityReceiver

android.intent.action.USER_PRESENT

com.ivona.tts.voicelib.ActivityReceiver

android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_CHANGED
android.intent.action.PACKAGE_REMOVED
android.intent.action.PACKAGE_RESTARTED
android.intent.action.PACKAGE_FULLY_REMOVED
android.intent.action.PACKAGE_REPLACED

.UpdateReceiver

android.intent.action.PACKAGE_REPLACED

Services
ivona.apk
.apk android arch:arm

com.ivona.tts

com.ivona.tts.WelcomeActivity

Activities

com.ivona.ttslib.DownloadVoiceData

android.speech.tts.engine.INSTALL_TTS_DATA

com.ivona.ttslib.CheckVoiceData

android.speech.tts.engine.CHECK_TTS_DATA

com.ivona.ttslib.GetSampleText

android.speech.tts.engine.GET_SAMPLE_TEXT

.Ivona

android.intent.action.START_TTS_ENGINE

com.ivona.tts.WelcomeActivity

android.intent.action.MAIN

.EngineSettings

android.speech.tts.engine.CONFIGURE_ENGINE

com.ivona.ttslib.CustomSettings

com.ivona.tts.intent.ACTION_CUSTOM_SETTINGS

Permissions

android.permission.WRITE_EXTERNAL_STORAGE
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.READ_PHONE_STATE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.GET_ACCOUNTS
com.android.vending.BILLING

Receivers

com.ivona.ttslib.ActivityReceiver

android.intent.action.USER_PRESENT
android.intent.action.BOOT_COMPLETED

com.ivona.ttslib.PackageMonitorReceiver

android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_CHANGED
android.intent.action.PACKAGE_REMOVED
android.intent.action.PACKAGE_RESTARTED
android.intent.action.PACKAGE_FULLY_REMOVED
android.intent.action.PACKAGE_REPLACED

Services

com.ivona.ttslib.ics.IVONATextToSpeechService

android.intent.action.TTS_SERVICE

Android Permissions

ct158.apk

Permissions

android.permission.WAKE_LOCK

android.permission.INTERNET

android.permission.BLUETOOTH

android.permission.VIBRATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.CHANGE_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.ACCESS_BACKGROUND_LOCATION

android.permission.READ_EXTERNAL_STORAGE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.MANAGE_EXTERNAL_STORAGE

android.permission.GET_ACCOUNTS

android.permission.READ_CONTACTS

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.WRITE_SETTINGS

android.permission.POST_NOTIFICATIONS

com.google.android.c2dm.permission.RECEIVE

android.permission.RECEIVE_BOOT_COMPLETED

Sharing

General

Malware Config

Signatures

Files

com.nth.taxicornisa

com.nth.taxicornisa.MainActivity

Activities

com.nth.taxicornisa.MainActivity

com.nth.taxicornisa.sms.ComposeSmsActivity

Permissions

Receivers

com.nth.taxicornisa.sms.SmsReceiver

com.nth.taxicornisa.sms.MmsReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.instacart.library.truetime.BootCompletedBroadcastReceiver

Services

com.nth.taxicornisa.services.SmsSendService

com.google.firebase.messaging.FirebaseMessagingService

com.ivona.tts.voicebeta.ron.rou.carmen

.IvonaVoice

Activities

.IvonaVoice

CheckVoiceInstalled

Permissions

Receivers

com.ivona.tts.voicelib.ActivityReceiver

com.ivona.tts.voicelib.ActivityReceiver

.UpdateReceiver

Services

com.ivona.tts

com.ivona.tts.WelcomeActivity

Activities

com.ivona.ttslib.DownloadVoiceData

com.ivona.ttslib.CheckVoiceData

com.ivona.ttslib.GetSampleText

.Ivona

com.ivona.tts.WelcomeActivity

.EngineSettings

com.ivona.ttslib.CustomSettings

Permissions

Receivers

com.ivona.ttslib.ActivityReceiver

com.ivona.ttslib.PackageMonitorReceiver

Services

com.ivona.ttslib.ics.IVONATextToSpeechService

Android Permissions

ct158.apk