General

  • Target

    257986f667b4e9bb26dbf219dfccfe01254163fb4ccb7d0547d398a2542338b9

  • Size

    9.3MB

  • MD5

    52e49a9b7159ea5a93b36cc674cd91da

  • SHA1

    4247b689b00da89158334b6a6e34884691533f03

  • SHA256

    257986f667b4e9bb26dbf219dfccfe01254163fb4ccb7d0547d398a2542338b9

  • SHA512

    2216387cd0b621e69a27be5044197edfc4c47f0e221476d1bf931d4cdad99ba35b7b20032224603d71be3d2461d8aec9989ff73124445d69dad02152fabcf34f

  • SSDEEP

    196608:qV1DlRRdQ+0NxBtCEVpPbUrjZIeiZxBE2Itj:qLDTRW+0nCiBsjD

Score
10/10

Malware Config

Signatures

  • Android SMSWorm payload 1 IoCs
  • Smsworm family
  • Declares services with permission to bind to the system 1 IoCs

Files

  • 257986f667b4e9bb26dbf219dfccfe01254163fb4ccb7d0547d398a2542338b9
    .apk android arch:arm64

    dzpal.aplicige

    dzpal.aplicige.preinicio


Android Permissions

257986f667b4e9bb26dbf219dfccfe01254163fb4ccb7d0547d398a2542338b9

Permissions

android.permission.FOREGROUND_SERVICE

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.WAKE_LOCK

com.google.android.c2dm.permission.RECEIVE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.ACCESS_WIFI_STATE

android.permission.RECEIVE_BOOT_COMPLETED