smsworm | 5812872a1cfa2c88dd7477881ee7e4015b237f35ad7cb9b3d930d291d560e6a1

Sharing

Copy URL Twitter E-mail

General

Target
5812872a1cfa2c88dd7477881ee7e4015b237f35ad7cb9b3d930d291d560e6a1
Size 9.2MB
Sample240706-1myfrawdrg
SHA256 5812872a1cfa2c88dd7477881ee7e4015b237f35ad7cb9b3d930d291d560e6a1
MD5 cb15257128695991a490b70a32e2e9f0
SHA1 d5bd6500ae07fe8651956da78bdae50bcb1ac4bf
SHA512 405edd8363992e9c918a57fedf497172c64579fbab0894d8ce221a6208d5936f758188c31ac822fb34d598e7b03af69927d7a3c07123c6205f94f6da1e058981
SSDEEP 196608:mO4rYye2J4LHATYmx3ynDstkgGdrjjVUntcOEZdZ7OEf6SZ:m1YyT4LgjCDgUrjZyi
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

smsworm

Malware Config

Signatures

Android SMSWorm payload 1 IoCs

resource	yara_rule
sample	family_smsworm

Smsworm family
smsworm

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by remote views services to bind with the system. Allows apps to share and display views across different processes.	android.permission.BIND_REMOTEVIEWS

File Explorer

5812872a1cfa2c88dd7477881ee7e4015b237f35ad7cb9b3d930d291d560e6a1

.apk 9.2MB

5812872a1cfa2c88dd7477881ee7e4015b237f35ad7cb9b3d930d291d560e6a1

SHA256 5812872a1cfa2c88dd7477881ee7e4015b237f35ad7cb9b3d930d291d560e6a1
MD5 cb15257128695991a490b70a32e2e9f0
SHA1 d5bd6500ae07fe8651956da78bdae50bcb1ac4bf
SHA512 405edd8363992e9c918a57fedf497172c64579fbab0894d8ce221a6208d5936f758188c31ac822fb34d598e7b03af69927d7a3c07123c6205f94f6da1e058981
SSDEEP 196608:mO4rYye2J4LHATYmx3ynDstkgGdrjjVUntcOEZdZ7OEf6SZ:m1YyT4LgjCDgUrjZyi
MD5 SHA1 SHA512 SSDEEP

android arch:arm64 arch:arm arch:mips arch:mips64 arch:x86 arch:x64

Android SMSWorm payload

freerobux.appkh

freerobux.appkh.preinicio

android.intent.action.MAIN android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW

com.google.android.gms.ads.AdActivity

freerobux.appkh.SearchableActivity

android.intent.action.SEARCH

freerobux.appkh.ExpandedControlsActivity

android.intent.action.MAIN

freerobux.appkh.t_qr

freerobux.appkh.t_vistafb

freerobux.appkh.t_url

freerobux.appkh.t_html

freerobux.appkh.t_video

freerobux.appkh.t_video_exoplayer

freerobux.appkh.t_video_pro

freerobux.appkh.t_radio

freerobux.appkh.t_buscchats

freerobux.appkh.t_buscchats_lista

freerobux.appkh.t_menugrid

freerobux.appkh.t_submenu

freerobux.appkh.t_rss

freerobux.appkh.t_rssdetalle

freerobux.appkh.t_oficinas

freerobux.appkh.t_chat_contra

freerobux.appkh.t_chat

freerobux.appkh.preperfil

freerobux.appkh.chat_perfil

freerobux.appkh.guardarprimeravez

freerobux.appkh.eliminarperfil

freerobux.appkh.codigo

freerobux.appkh.chat

freerobux.appkh.contactar

freerobux.appkh.t_buscador_form

freerobux.appkh.cats

freerobux.appkh.t_buscador

freerobux.appkh.t_detalle

freerobux.appkh.t_menu

freerobux.appkh.t_mapa_web

freerobux.appkh.t_and

freerobux.appkh.finalizar

freerobux.appkh.notifs

freerobux.appkh.notifs_cats

freerobux.appkh.privados

freerobux.appkh.profile

freerobux.appkh.fotogal

freerobux.appkh.t_buscusus

freerobux.appkh.t_buscvideos

freerobux.appkh.t_buscvideo

freerobux.appkh.t_gal

freerobux.appkh.t_gal_foto

freerobux.appkh.t_card

com.facebook.ads.AudienceNetworkActivity

com.adcolony.sdk.AdColonyInterstitialActivity

com.adcolony.sdk.AdColonyAdViewActivity

com.appnext.ads.interstitial.InterstitialActivity

com.appnext.ads.fullscreen.FullscreenActivity

com.appnext.banners.BannerActivity

com.google.android.gms.auth.api.signin.internal.SignInHubActivity

com.google.android.gms.common.api.GoogleApiActivity

com.facebook.FacebookActivity

com.facebook.CustomTabMainActivity

com.facebook.CustomTabActivity

android.intent.action.VIEW

com.startapp.sdk.adsbase.consent.ConsentActivity

com.startapp.sdk.ads.list3d.List3DActivity

com.startapp.sdk.ads.interstitials.OverlayActivity

com.unity3d.services.ads.adunit.AdUnitActivity

com.unity3d.services.ads.adunit.AdUnitTransparentActivity

com.unity3d.services.ads.adunit.AdUnitTransparentSoftwareActivity

com.unity3d.services.ads.adunit.AdUnitSoftwareActivity

com.appnext.core.ResultActivity

com.appnext.core.result.ResultPageActivity

freerobux.appkh.s_widget_vistafb

freerobux.appkh.s_cargar_icos

freerobux.appkh.s_cargar_sliderheader

freerobux.appkh.s_cargar_fondo

freerobux.appkh.s_cargar_icos_gen

freerobux.appkh.s_guardarperfil

freerobux.appkh.s_mediaplayer_exo

freerobux.appkh.RegistrationIntentService

freerobux.appkh.MyFcmListenerService

com.google.firebase.MESSAGING_EVENT

freerobux.appkh.MyInstanceIDListenerService

com.google.firebase.INSTANCE_ID_EVENT

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

com.google.android.gms.cast.framework.media.MediaNotificationService

com.google.android.gms.cast.framework.ReconnectionService

com.appnext.core.AdsService

com.google.android.gms.auth.api.signin.RevocationBoundService

com.google.firebase.components.ComponentDiscoveryService

com.google.android.gms.measurement.AppMeasurementService

com.google.android.gms.measurement.AppMeasurementJobService

com.google.firebase.iid.FirebaseInstanceIdService

com.google.firebase.INSTANCE_ID_EVENT

com.startapp.sdk.cachedservice.BackgroundService

com.startapp.sdk.jobs.SchedulerService

com.appnext.base.services.OperationService

com.appnext.base.services.OperationJobService

com.appnext.base.services.EventsJobIntentService

Android Permissions

5812872a1cfa2c88dd7477881ee7e4015b237f35ad7cb9b3d930d291d560e6a1

Permissions

android.permission.FOREGROUND_SERVICE

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.WAKE_LOCK

com.google.android.c2dm.permission.RECEIVE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.ACCESS_WIFI_STATE

android.permission.RECEIVE_BOOT_COMPLETED