17431329967[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

17431329967.zip
Size

4.4MB
MD5

5c959516cd66aa9941cc934392653e47
SHA1

7b4cc62f62994a443060642f16dfd877a39438d7
SHA256

fb42b03e9c8e1529e9c1eed284b4b7faeacfc73315d3427c4bee659fefda295f
SHA512

006b3cba65f4631358d12be98e7d5331a53781e6178658f89b095ffafddd763cf463377b97468e5ec733fde8e40708152e8d03e030d5ee97e857d386b36f615c
SSDEEP

98304:P5+J8pAbDRENJUaA/zhCDS00BKbOfy6uoL1OSgbhs:P5+OpAn0JXAbEDT0BKImoASf

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 3 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS

Files

17431329967.zip
.zip

Password: infected
49f9b777020d1648e53eed08b7a5e0c2399a3c06af91ccb3ce232f7bcb5b2683
.apk android

Password: infected

com.jobs.ShineJobs

com.jobs.ShineJobs.SplashScreen

Activities

com.jobs.ShineJobs.SplashScreen

android.intent.action.MAIN

Permissions

android.permission.INTERNET
android.permission.READ_PHONE_STATE
android.permission.WRITE_SMS
android.permission.READ_SMS
android.permission.RECEIVE_SMS
android.permission.ACCESS_NETWORK_STATE
android.permission.WAKE_LOCK
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

Receivers

com.jobs.ShineJobs.SmsBroadcastReceiver

android.provider.Telephony.SMS_RECEIVED

Services