General

  • Target

    app1211684.apk

  • Size

    12.2MB

  • MD5

    0c9685834174ec73159ce161da226907

  • SHA1

    a205e808f00cae2bc00bda93906ed7eaa5e8b87c

  • SHA256

    0cc56d2add55c6584921e8454308718b9f9e43bde581d8afd7e4d1a65bf6d3a4

  • SHA512

    7e6bbef4acd6c030e45b42ef2c27cb5ea3e274098d3e344ed539357453c475eb4a4eae34394012fdaf41439869df34035010c190bfb644161364efd1841e5bcb

  • SSDEEP

    196608:Uyd7pyOZ2AWlYijEnqV5CEfkzfZdXtw6TMxKvgOgajUwtCkZnqEcWtpUh:Ui7E4mZjq5Dtwc5vgsjUV

Score
10/10

Malware Config

Signatures

  • Android SMSWorm payload 1 IoCs
  • Smsworm family
  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 3 IoCs

Files

  • app1211684.apk
    .apk android arch:arm64 arch:arm arch:mips arch:mips64 arch:x86 arch:x64

    co.ke.appcreator24probeta.app

    co.ke.appcreator24probeta.app.preinicio


Android Permissions

app1211684.apk

Permissions

android.permission.FOREGROUND_SERVICE

android.permission.ACCESS_FINE_LOCATION

android.permission.RECORD_AUDIO

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.CAMERA

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.WAKE_LOCK

com.google.android.c2dm.permission.RECEIVE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.ACCESS_WIFI_STATE

android.permission.RECEIVE_BOOT_COMPLETED