smseye | sms eye app_src_mod[.]apk | Triage

Sharing

General

Target

sms eye app_src_mod.apk
Size

7.7MB
MD5

ce9377a43039e9a9b6d19cddfce9f35e
SHA1

88b24c7c0a26abc6a8284c74af21af7ca044e288
SHA256

e7cd1bcd6452bacd1176be56d183d4dc4960615740d854c686a1b1e3d8cd13e0
SHA512

c29b990b584ce46d7d25f12299dc04488cc5c8aa2503b3370ca17aef114990d618f060c3f6518bbf59bdad7eb405ff9249ee77cea8b3a6b2f1084c014e820dd6
SSDEEP

196608:KwXcCnmhMHi3xtvYrJaOy/4JsaiSxcymkF85:KkXmeifuarAJpiFymk2

Score

10^/10

smseye

Malware Config

Signatures

Android SMSeye payload 2 IoCs

Processes:

resource	yara_rule
sample	family_smseye
sample	family_smseye

Smseye family
smseye
Requests dangerous framework permissions 1 IoCs

Processes:

description ioc

Allows an application to receive SMS messages. android.permission.RECEIVE_SMS

Files

sms eye app_src_mod.apk
.apk android

abyssalarmy.smseye

abyssalarmy.smseye.SmsEyeMainActivity

Activities

abyssalarmy.smseye.SmsEyeMainActivity

android.intent.action.MAIN

Permissions

android.permission.INTERNET
android.permission.RECEIVE_SMS
abyssalarmy.smseye.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Receivers

abyssalarmy.smseye.SmsEyeReceivers.SmsEyeSmsListener

android.provider.Telephony.SMS_RECEIVED

androidx.profileinstaller.ProfileInstallReceiver

androidx.profileinstaller.action.INSTALL_PROFILE
androidx.profileinstaller.action.SKIP_FILE

sms eye app_src_mod.apk

Permissions

android.permission.INTERNET

android.permission.RECEIVE_SMS

abyssalarmy.smseye.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION