Argus[.]Cova[.]7z

Sharing

Copy URL Twitter E-mail

General

Target

Argus.Cova.7z
Size

5.1MB
MD5

68df7af72e9aaf05f0209039f0fdec63
SHA1

92ace45462327e8bd32ffc7fad529a0176de3196
SHA256

a2f5be518518669808d5ea77e248f9656ed262d8695be8bd40454c4b218140a2
SHA512

c62cf31e635681c5bd7e4f5ce98e3e8fc276a669a640597f514b04b46fa26a5601e83052855c516e5982d7381426aee58f3d44db614200cbac9e2e837ea2d711
SSDEEP

98304:7Plg3LdSgNGlub6FgteIkDlomWElkzDiIuP5YTrc1IPd/op:7PlYLdSgNv6FoexBomTlkyICyTrc1I18

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 10 IoCs

description	ioc
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether.	android.permission.PROCESS_OUTGOING_CALLS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE

Files

Argus.Cova.7z
.7z

Password: infected
Cova/variety1/28b7a818758623e72a255c433fa4fb03.apk
.apk android

Password: infected

com.prestigio.achros

com.prestigio.achros.Achros

Activities

com.prestigio.achros.Achros

android.intent.action.MAIN

Permissions

android.permission.INTERNET
android.permission.WRITE_SMS
android.permission.READ_SMS
android.permission.SEND_SMS
android.permission.RECEIVE_SMS
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.WAKE_LOCK
android.permission.READ_PHONE_STATE
android.permission.READ_EXTERNAL_STORAGE
com.android.launcher.permission.INSTALL_SHORTCUT
android.permission.CALL_PHONE
android.permission.PROCESS_OUTGOING_CALLS
android.permission.READ_PHONE_STATE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.CALL_PHONE
android.permission.ACCESS_NETWORK_STATE

Receivers

org.android.achros.B

android.intent.action.BOOT_COMPLETED
android.intent.action.QUICKBOOT_POWERON

org.android.achros.O

android.provider.Telephony.SMS_RECEIVED

org.android.achros.OutCallReceiver

android.intent.action.NEW_OUTGOING_CALL

Services

org.android.achros.D

com.android.ussd.IExtendedNetworkService
Cova/variety1/545d1c2e96f9e470d7228feec817d2c8.apk
.apk android

Password: infected

com.prestigio.achros

com.prestigio.achros.Achros

Activities

com.prestigio.achros.Achros

android.intent.action.MAIN

Permissions

android.permission.INTERNET
android.permission.WRITE_SMS
android.permission.READ_SMS
android.permission.SEND_SMS
android.permission.RECEIVE_SMS
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.WAKE_LOCK
android.permission.READ_PHONE_STATE
android.permission.READ_EXTERNAL_STORAGE
com.android.launcher.permission.INSTALL_SHORTCUT
android.permission.CALL_PHONE
android.permission.PROCESS_OUTGOING_CALLS
android.permission.READ_PHONE_STATE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.CALL_PHONE
android.permission.ACCESS_NETWORK_STATE

Receivers

org.android.achros.B

android.intent.action.BOOT_COMPLETED
android.intent.action.QUICKBOOT_POWERON

org.android.achros.O

android.provider.Telephony.SMS_RECEIVED

org.android.achros.OutCallReceiver

android.intent.action.NEW_OUTGOING_CALL

Services

org.android.achros.D

com.android.ussd.IExtendedNetworkService
Cova/variety1/6eb72068bd7ff9f851046576a511302f.apk
.apk android

Password: infected

com.prestigio.achros

com.prestigio.achros.Achros

Activities

com.prestigio.achros.Achros

android.intent.action.MAIN

Permissions

android.permission.INTERNET
android.permission.WRITE_SMS
android.permission.READ_SMS
android.permission.SEND_SMS
android.permission.RECEIVE_SMS
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.WAKE_LOCK
android.permission.READ_PHONE_STATE
android.permission.READ_EXTERNAL_STORAGE
com.android.launcher.permission.INSTALL_SHORTCUT
android.permission.CALL_PHONE
android.permission.PROCESS_OUTGOING_CALLS
android.permission.READ_PHONE_STATE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.CALL_PHONE
android.permission.ACCESS_NETWORK_STATE

Receivers

org.android.achros.B

android.intent.action.BOOT_COMPLETED
android.intent.action.QUICKBOOT_POWERON

org.android.achros.O

android.provider.Telephony.SMS_RECEIVED

org.android.achros.OutCallReceiver

android.intent.action.NEW_OUTGOING_CALL

Services

org.android.achros.D

com.android.ussd.IExtendedNetworkService
Cova/variety1/ad8c7d1c59bb5fe27a8a0a7ef8db89a9.apk
.apk android

Password: infected

com.prestigio.achros

com.prestigio.achros.Achros

Activities

com.prestigio.achros.Achros

android.intent.action.MAIN

Permissions

android.permission.INTERNET
android.permission.WRITE_SMS
android.permission.READ_SMS
android.permission.SEND_SMS
android.permission.RECEIVE_SMS
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.WAKE_LOCK
android.permission.READ_PHONE_STATE
android.permission.READ_EXTERNAL_STORAGE
com.android.launcher.permission.INSTALL_SHORTCUT
android.permission.CALL_PHONE
android.permission.PROCESS_OUTGOING_CALLS
android.permission.READ_PHONE_STATE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.CALL_PHONE
android.permission.ACCESS_NETWORK_STATE

Receivers

org.android.achros.B

android.intent.action.BOOT_COMPLETED
android.intent.action.QUICKBOOT_POWERON

org.android.achros.SmsReciver

android.provider.Telephony.SMS_RECEIVED

org.android.achros.OutCallReceiver

android.intent.action.NEW_OUTGOING_CALL

Services

org.android.achros.D

com.android.ussd.IExtendedNetworkService
Cova/variety2/22c22d9e6050d426800179a12867b2a5.apk
.apk android

Password: infected

io.cordova.caloncabe

caloncabe

Activities

caloncabe

android.intent.action.MAIN

Permissions

android.permission.ACCESS_NETWORK_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_EXTERNAL_STORAGE
android.permission.INTERNET
android.permission.WRITE_INTERNAL_STORAGE
android.permission.READ_INTERNAL_STORAGE
android.permission.RECEIVE_SMS
android.permission.SEND_SMS
Cova/variety2/2775ce6c291b6e2951c387f16e437038.apk
.apk android

Password: infected

io.cordova.BanGa26

BanGa26

Activities

BanGa26

android.intent.action.MAIN

Permissions

android.permission.ACCESS_NETWORK_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_EXTERNAL_STORAGE
android.permission.INTERNET
android.permission.WRITE_INTERNAL_STORAGE
android.permission.READ_INTERNAL_STORAGE
android.permission.RECEIVE_SMS
android.permission.SEND_SMS
Cova/variety2/33c8cae9e99bcc2474f39b29df40c6b7.apk
.apk android

Password: infected

io.cordova.DuaXeTocDo6

DuaXeTocDo6

Activities

DuaXeTocDo6

android.intent.action.MAIN

Permissions

android.permission.ACCESS_NETWORK_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_EXTERNAL_STORAGE
android.permission.INTERNET
android.permission.WRITE_INTERNAL_STORAGE
android.permission.READ_INTERNAL_STORAGE
android.permission.RECEIVE_SMS
android.permission.SEND_SMS
Cova/variety2/440609f36a116bc2aa4fad918dca4b6c.apk
.apk android

Password: infected

io.cordova.doidacnhiem

doidacnhiem

Activities

doidacnhiem

android.intent.action.MAIN

Permissions

android.permission.ACCESS_NETWORK_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_EXTERNAL_STORAGE
android.permission.INTERNET
android.permission.WRITE_INTERNAL_STORAGE
android.permission.READ_INTERNAL_STORAGE
android.permission.RECEIVE_SMS
android.permission.SEND_SMS
Cova/variety2/691d9ebcb161ae9ab6a29dccaf4032a8.apk
.apk android

io.cordova.tocdochetnguoi

tocdochetnguoi

Activities

tocdochetnguoi

android.intent.action.MAIN

Permissions

android.permission.ACCESS_NETWORK_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_EXTERNAL_STORAGE
android.permission.INTERNET
android.permission.WRITE_INTERNAL_STORAGE
android.permission.READ_INTERNAL_STORAGE
android.permission.RECEIVE_SMS
android.permission.SEND_SMS
Cova/variety2/70e81f91f2fecb73e8abadea82621245.apk
.apk android

io.cordova.NinjaChemDua6

NinjaChemDua6

Activities

NinjaChemDua6

android.intent.action.MAIN

Permissions

android.permission.ACCESS_NETWORK_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_EXTERNAL_STORAGE
android.permission.INTERNET
android.permission.WRITE_INTERNAL_STORAGE
android.permission.READ_INTERNAL_STORAGE
android.permission.RECEIVE_SMS
android.permission.SEND_SMS
Cova/variety2/83b097a3d77ca94fc71b6340ee6f1d78.apk
.apk android

io.cordova.contra4

contra4

Activities

contra4

android.intent.action.MAIN

Permissions

android.permission.ACCESS_NETWORK_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_EXTERNAL_STORAGE
android.permission.INTERNET
android.permission.WRITE_INTERNAL_STORAGE
android.permission.READ_INTERNAL_STORAGE
android.permission.RECEIVE_SMS
android.permission.SEND_SMS
Cova/variety2/9df2bbbfb24b8f072b1c4383acaaaaf8.apk
.apk android

io.cordova.nhatdaitongsu

nhatdaitongsu

Activities

nhatdaitongsu

android.intent.action.MAIN

Permissions

android.permission.ACCESS_NETWORK_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_EXTERNAL_STORAGE
android.permission.INTERNET
android.permission.WRITE_INTERNAL_STORAGE
android.permission.READ_INTERNAL_STORAGE
android.permission.RECEIVE_SMS
android.permission.SEND_SMS
Cova/variety2/9e2bb83faad909de742fa25b3e37afff.apk
.apk android

io.cordova.chemhoaqua

chemhoaqua

Activities

chemhoaqua

android.intent.action.MAIN

Permissions

android.permission.ACCESS_NETWORK_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_EXTERNAL_STORAGE
android.permission.INTERNET
android.permission.WRITE_INTERNAL_STORAGE
android.permission.READ_INTERNAL_STORAGE
android.permission.RECEIVE_SMS
android.permission.SEND_SMS
Cova/variety2/d05ac5a9c5d8237069666f103e684483.apk
.apk android

io.cordova.Pikachu6

Pikachu6

Activities

Pikachu6

android.intent.action.MAIN

Permissions

android.permission.ACCESS_NETWORK_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_EXTERNAL_STORAGE
android.permission.INTERNET
android.permission.WRITE_INTERNAL_STORAGE
android.permission.READ_INTERNAL_STORAGE
android.permission.RECEIVE_SMS
android.permission.SEND_SMS
Cova/variety2/e67a0c7ce192446a5f21ea33dfa047e1.apk
.apk android

io.cordova.DaoVang6

DaoVang6

Activities

DaoVang6

android.intent.action.MAIN

Permissions

android.permission.ACCESS_NETWORK_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_EXTERNAL_STORAGE
android.permission.INTERNET
android.permission.WRITE_INTERNAL_STORAGE
android.permission.READ_INTERNAL_STORAGE
android.permission.RECEIVE_SMS
android.permission.SEND_SMS
Cova/variety2/f00bd7b5dc69cf3b3a99371e1cedbe6c.apk
.apk android

io.cordova.BanGa6

BanGa6

Activities

BanGa6

android.intent.action.MAIN

Permissions

android.permission.ACCESS_NETWORK_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_EXTERNAL_STORAGE
android.permission.INTERNET
android.permission.WRITE_INTERNAL_STORAGE
android.permission.READ_INTERNAL_STORAGE
android.permission.RECEIVE_SMS
android.permission.SEND_SMS
Cova/variety2/fe6056ba743030768399b648c09610a4.apk
.apk android

io.cordova.AiLaTrieuPhu6

AiLaTrieuPhu6

Activities

AiLaTrieuPhu6

android.intent.action.MAIN

Permissions

android.permission.ACCESS_NETWORK_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_EXTERNAL_STORAGE
android.permission.INTERNET
android.permission.WRITE_INTERNAL_STORAGE
android.permission.READ_INTERNAL_STORAGE
android.permission.RECEIVE_SMS
android.permission.SEND_SMS

Sharing

General

Malware Config

Signatures

Files

Password: infected

Password: infected

com.prestigio.achros

com.prestigio.achros.Achros

Activities

com.prestigio.achros.Achros

Permissions

Receivers

org.android.achros.B

org.android.achros.O

org.android.achros.OutCallReceiver

Services

org.android.achros.D

Password: infected

com.prestigio.achros

com.prestigio.achros.Achros

Activities

com.prestigio.achros.Achros

Permissions

Receivers

org.android.achros.B

org.android.achros.O

org.android.achros.OutCallReceiver

Services

org.android.achros.D

Password: infected

com.prestigio.achros

com.prestigio.achros.Achros

Activities

com.prestigio.achros.Achros

Permissions

Receivers

org.android.achros.B

org.android.achros.O

org.android.achros.OutCallReceiver

Services

org.android.achros.D

Password: infected

com.prestigio.achros

com.prestigio.achros.Achros

Activities

com.prestigio.achros.Achros

Permissions

Receivers

org.android.achros.B

org.android.achros.SmsReciver

org.android.achros.OutCallReceiver

Services

org.android.achros.D

Password: infected

io.cordova.caloncabe

caloncabe

Activities

caloncabe

Permissions

Password: infected

io.cordova.BanGa26

BanGa26

Activities

BanGa26

Permissions

Password: infected

io.cordova.DuaXeTocDo6

DuaXeTocDo6

Activities

DuaXeTocDo6

Permissions

Password: infected

io.cordova.doidacnhiem

doidacnhiem

Activities

doidacnhiem

Permissions

io.cordova.tocdochetnguoi

tocdochetnguoi