98ff40610058468a6dcf294f335bcef061f21a5ecadc2c1cfb7c84499b3227c3[.]bin

General

Target

98ff40610058468a6dcf294f335bcef061f21a5ecadc2c1cfb7c84499b3227c3.bin
Size

1.8MB
MD5

2ab8a5ec833b11d75fe358ac1d6f1d91
SHA1

151626fc4b7b4fbf675e702bde17b2bc154bc886
SHA256

98ff40610058468a6dcf294f335bcef061f21a5ecadc2c1cfb7c84499b3227c3
SHA512

3518c100dbeec79d1690b2e030d9cc6066bb3fa9f7a083c254b2debbb83636f33f5dcd523f361cca73a4090a2fec51269d56bd307ece0276d29c789e69dd98e8
SSDEEP

24576:5ugEd+33emsnvwRCGNkm+Sn2euiTlYTb/A2BLnaPX0CftL2RRCzMfe0C:5e+3yvwRCGeDSJ5YPNBLaPHLcCQ8

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 4 IoCs

description	ioc
Required by remote views services to bind with the system. Allows apps to share and display views across different processes.	android.permission.BIND_REMOTEVIEWS
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE
Required by call screening services to bind with the system. Allows apps to filter and manage incoming phone calls.	android.permission.BIND_SCREENING_SERVICE
Required by quick settings tile services to bind with the system. Allows apps to add custom tiles to the quick settings menu.	android.permission.BIND_QUICK_SETTINGS_TILE

Requests dangerous framework permissions 20 IoCs

description	ioc
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to monitor incoming MMS messages.	android.permission.RECEIVE_MMS
Allows an application to receive WAP push messages.	android.permission.RECEIVE_WAP_PUSH
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an application to write and read the user's call log data.	android.permission.WRITE_CALL_LOG
Allows an application to read the user's call log.	android.permission.READ_CALL_LOG
Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether.	android.permission.PROCESS_OUTGOING_CALLS
Allows an application a broad access to external storage in scoped storage.	android.permission.MANAGE_EXTERNAL_STORAGE
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows the app to answer an incoming phone call.	android.permission.ANSWER_PHONE_CALLS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows applications to use exact alarm APIs.	android.permission.SCHEDULE_EXACT_ALARM
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS

Files

98ff40610058468a6dcf294f335bcef061f21a5ecadc2c1cfb7c84499b3227c3.bin
.apk android arch:x86 arch:arm arch:x64 arch:arm64

com.mdnsoft.callsmsmanager

com.mdnsoft.callsmsmanager.MainActivity

Activities

com.mdnsoft.callsmsmanager.MainActivity

android.intent.action.MAIN

com.mdnsoft.callsmsmanager.LicenseDialog

android.intent.action.VIEW

com.mdnsoft.callsmsmanager.AddListSelector

android.intent.action.SEND

com.mdnsoft.callsmsmanager.Notepad

android.intent.action.MAIN
android.intent.action.VIEW
android.intent.action.EDIT

com.mdnsoft.callsmsmanager.Calculator

android.intent.action.MAIN

com.mdnsoft.callsmsmanager.StartActivity

android.intent.action.MAIN

com.mdnsoft.callsmsmanager.DialerActivity

android.intent.action.VIEW
android.intent.action.DIAL
android.intent.action.DIAL

com.mdnsoft.smsapp.Journal

android.intent.action.MAIN

com.mdnsoft.smsapp.SenderActivity

android.intent.action.SEND
android.intent.action.SENDTO

Permissions

android.permission.READ_SMS
android.permission.RECEIVE_SMS
android.permission.SEND_SMS
android.permission.WRITE_SMS
android.permission.RECEIVE_MMS
android.permission.RECEIVE_WAP_PUSH
android.permission.REQUEST_INSTALL_PACKAGES
android.permission.WRITE_CALL_LOG
android.permission.READ_CALL_LOG
android.permission.PROCESS_OUTGOING_CALLS
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS
android.permission.MANAGE_EXTERNAL_STORAGE
android.permission.CALL_PHONE
android.permission.ANSWER_PHONE_CALLS
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_PHONE_STATE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.READ_CONTACTS
android.permission.VIBRATE
android.permission.ACCESS_NETWORK_STATE
com.android.vending.BILLING
android.permission.ACCESS_SUPERUSER
android.permission.WRITE_CONTACTS
android.permission.WAKE_LOCK
android.permission.WRITE_SETTINGS
android.permission.DISABLE_KEYGUARD
android.permission.ACCESS_NOTIFICATION_POLICY
android.permission.INTERNET
android.permission.USE_FINGERPRINT
android.permission.USE_BIOMETRIC
android.permission.SYSTEM_ALERT_WINDOW
android.permission.FOREGROUND_SERVICE
android.permission.SCHEDULE_EXACT_ALARM
android.permission.POST_NOTIFICATIONS
android.permission.HIGH_SAMPLING_RATE_SENSORS

Receivers

com.mdnsoft.callsmsmanager.AppReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.SERVICE_STATE
android.intent.action.PHONE_STATE
com.mdnsoft.callsmsmanagermodule.PHONE_STATE
android.intent.action.AIRPLANE_MODE
android.intent.action.DUAL_SIM_MODE
com.mdnsoft.doSchedules
com.mdnsoft.ProcessDelete
com.mdnsoft.MarkSMS
com.mdnsoft.callsmsmanager.ACTION_UPDATE
RCM_List
RCM_Backup
RCM_Update_Group
RCM_RESTART_RADIO
RCM_RESTART_RADIO1
RCM_RESTART_INET
RCM_Private
RCM_Scheduler
com.mdnsoft.callsmsmanager.RESTART_RADIO
com.mdnsoft.callsmsmanager.RESTART_RADIO1
com.mdnsoft.callsmsmanager.AirplaneMode
com.mdnsoft.callsmsmanager.to_call
com.mdnsoft.callsmsmanager.to_send_sms
com.mdnsoft.callmanager.rcmkey.checked
com.mdnsoft.callsmsmanagermodule.NEW_OUTGOING_CALL
android.intent.action.NEW_OUTGOING_CALL

com.mdnsoft.callsmsmanager.XReceiver

com.mdnsoft.callsmsmanager.xinit_register
com.mdnsoft.callsmsmanager.XSMS_RECEIEVE
com.mdnsoft.callsmsmanager.XMMS_RECEIEVE
com.mdnsoft.callsmsmanager.XSMSOUT_RECEIEVE
com.mdnsoft.callsmsmanager.XCALL_RECEIEVE
com.mdnsoft.callsmsmanager.XFCALL_RECEIEVE

com.mdnsoft.callsmsmanager.Widget

android.appwidget.action.APPWIDGET_UPDATE

com.mdnsoft.callsmsmanager.MMS

android.provider.Telephony.SMS_RECEIVED
android.provider.Telephony.WAP_PUSH_RECEIVED
com.mdnsoft.callsmsmanagermodule.SMS_RECEIVED
com.mdnsoft.callsmsmanagermodule.WAP_PUSH_RECEIVED

com.mdnsoft.callsmsmanager.Widget2

android.appwidget.action.APPWIDGET_UPDATE

com.mdnsoft.smsapp.SmsReceiver

android.provider.Telephony.SMS_DELIVER

com.mdnsoft.smsapp.MmsReceiver

android.provider.Telephony.WAP_PUSH_DELIVER

Services

com.mdnsoft.callsmsmanager.NLS

android.service.notification.NotificationListenerService

com.mdnsoft.callsmsmanager.CallFilteringService

android.telecom.CallScreeningService

com.mdnsoft.smsapp.HeadlessSmsSendService

android.intent.action.RESPOND_VIA_MESSAGE

com.mdnsoft.callsmsmanager.TService

android.service.quicksettings.action.QS_TILE

Android Permissions

98ff40610058468a6dcf294f335bcef061f21a5ecadc2c1cfb7c84499b3227c3.bin

Permissions

android.permission.READ_SMS

android.permission.RECEIVE_SMS

android.permission.SEND_SMS

android.permission.WRITE_SMS

android.permission.RECEIVE_MMS

android.permission.RECEIVE_WAP_PUSH

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.WRITE_CALL_LOG

android.permission.READ_CALL_LOG

android.permission.PROCESS_OUTGOING_CALLS

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.MANAGE_EXTERNAL_STORAGE

android.permission.CALL_PHONE

android.permission.ANSWER_PHONE_CALLS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.READ_CONTACTS

android.permission.VIBRATE

android.permission.ACCESS_NETWORK_STATE

com.android.vending.BILLING

android.permission.ACCESS_SUPERUSER

android.permission.WRITE_CONTACTS

android.permission.WAKE_LOCK

android.permission.WRITE_SETTINGS

android.permission.DISABLE_KEYGUARD

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.INTERNET

android.permission.USE_FINGERPRINT

android.permission.USE_BIOMETRIC

android.permission.SYSTEM_ALERT_WINDOW

android.permission.FOREGROUND_SERVICE

android.permission.SCHEDULE_EXACT_ALARM

android.permission.POST_NOTIFICATIONS

android.permission.HIGH_SAMPLING_RATE_SENSORS

Sharing

General

Malware Config

Signatures

Files

com.mdnsoft.callsmsmanager

com.mdnsoft.callsmsmanager.MainActivity

Activities

com.mdnsoft.callsmsmanager.MainActivity

com.mdnsoft.callsmsmanager.LicenseDialog

com.mdnsoft.callsmsmanager.AddListSelector

com.mdnsoft.callsmsmanager.Notepad

com.mdnsoft.callsmsmanager.Calculator

com.mdnsoft.callsmsmanager.StartActivity

com.mdnsoft.callsmsmanager.DialerActivity

com.mdnsoft.smsapp.Journal

com.mdnsoft.smsapp.SenderActivity

Permissions

Receivers

com.mdnsoft.callsmsmanager.AppReceiver

com.mdnsoft.callsmsmanager.XReceiver

com.mdnsoft.callsmsmanager.Widget

com.mdnsoft.callsmsmanager.MMS

com.mdnsoft.callsmsmanager.Widget2

com.mdnsoft.smsapp.SmsReceiver

com.mdnsoft.smsapp.MmsReceiver

Services

com.mdnsoft.callsmsmanager.NLS

com.mdnsoft.callsmsmanager.CallFilteringService

com.mdnsoft.smsapp.HeadlessSmsSendService

com.mdnsoft.callsmsmanager.TService

Android Permissions

98ff40610058468a6dcf294f335bcef061f21a5ecadc2c1cfb7c84499b3227c3.bin