734e14421da87e2fc3d3306dd3897b97535fb1cfb0cb7f6b685f62adb7dc6e5a[.]bin

General

Target

734e14421da87e2fc3d3306dd3897b97535fb1cfb0cb7f6b685f62adb7dc6e5a.bin
Size

3.1MB
MD5

e3694135b5369529a0f589addf897b3c
SHA1

f51a47e99f78ccc90d809d28efb64726ba62d4bc
SHA256

734e14421da87e2fc3d3306dd3897b97535fb1cfb0cb7f6b685f62adb7dc6e5a
SHA512

7b8273efe943362eea00288ca59091b5e6d06730d216a073af423e68b95a5b223f6f9596d90cc2c4c084040150ea204dc6b33e398387352ad16b59cb832ec2f9
SSDEEP

49152:NjibH9O2u5vuOKUXlVNCY+8455SW4avW48DF3jSDNaDLg3zGUez1D4QXmVup:E1u5vuOKUvIY+zlu48Z2KLgydz94Ejp

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 3 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS

Files

734e14421da87e2fc3d3306dd3897b97535fb1cfb0cb7f6b685f62adb7dc6e5a.bin
.apk android

com.google.message

com.otter.message.MainActivity

Activities

com.otter.message.MainActivity

android.intent.action.MAIN

Permissions

android.permission.INTERNET
android.permission.READ_PHONE_STATE
android.permission.READ_SMS
android.permission.RECEIVE_SMS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.ACCESS_NETWORK_STATE
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS
android.permission.FOREGROUND_SERVICE
android.permission.GET_TASKS
android.permission.WAKE_LOCK

Receivers

com.xdandroid.hellodaemon.WakeUpReceiver

android.intent.action.USER_PRESENT
android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED
com.xdandroid.hellodaemon.CANCEL_JOB_ALARM_SUB

com.xdandroid.hellodaemon.WakeUpReceiver$WakeUpAutoStartReceiver

android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY
android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW
android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.TIME_SET
android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

Services

Android Permissions

734e14421da87e2fc3d3306dd3897b97535fb1cfb0cb7f6b685f62adb7dc6e5a.bin

Permissions

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.READ_SMS

android.permission.RECEIVE_SMS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.ACCESS_NETWORK_STATE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.FOREGROUND_SERVICE

android.permission.GET_TASKS

android.permission.WAKE_LOCK

Sharing

General

Malware Config

Signatures

Files

com.google.message

com.otter.message.MainActivity

Activities

com.otter.message.MainActivity

Permissions

Receivers

com.xdandroid.hellodaemon.WakeUpReceiver

com.xdandroid.hellodaemon.WakeUpReceiver$WakeUpAutoStartReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

Services

Android Permissions

734e14421da87e2fc3d3306dd3897b97535fb1cfb0cb7f6b685f62adb7dc6e5a.bin