smsworm | Y-TV PRO[.]apk

General

Target

Y-TV PRO.apk
Size

8.5MB
MD5

5c898cdb727a2462fa19948e31d7b72a
SHA1

0dc9124efab4d7d54b274ee5bd6fbe6f77a0cd6a
SHA256

707af85272a6b82812716f17210be4f0f3cdbbda5423a7b1547390df5a24a4f8
SHA512

0eae47f5ac918d8dce762bf19cebb057f95c0bbe643e7e0fe9d198adf2cb8def46a43abea1d8bc4d8a5e05391c4f3577104acf134e9e25bed4bb8a3a3e90efac
SSDEEP

98304:NEpdPaLbNpb+muZlNBmfB0739zSE+DARwJXQ4TVtnQ72u5tMx6QURKHZT3W9ZymX:NYtaLPryLa0T9EDUwjKDMxo0DWAV5s

Score

10^/10

smsworm

Malware Config

Signatures

Android SMSWorm payload 1 IoCs

Processes:

resource yara_rule

sample family_smsworm
Smsworm family
smsworm
Requests dangerous framework permissions 1 IoCs

Processes:

description ioc

Allows an application to request installing packages. android.permission.REQUEST_INSTALL_PACKAGES

resource	yara_rule
sample	family_smsworm

description	ioc
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES

Files

Y-TV PRO.apk
.apk android arch:x86 arch:x64 arch:arm arch:arm64

Password: #Reacher2024#

ver3.ycntivi.off.premium

dev.pankaj.yacinetv.ui.splash.SplashActivity

Activities

dev.pankaj.yacinetv.ui.splash.SplashActivity

android.intent.action.MAIN

dev.pankaj.yacinetv.tvui.splash.SplashActivity

android.intent.action.MAIN

Permissions

android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.REQUEST_INSTALL_PACKAGES
android.permission.BLUETOOTH
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.WAKE_LOCK
com.google.android.c2dm.permission.RECEIVE
android.permission.ACCESS_WIFI_STATE
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

Receivers

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

com.startapp.sdk.adsbase.remoteconfig.BootCompleteListener

android.intent.action.BOOT_COMPLETED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY
android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW
android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.TIME_SET
android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

Services

dev.pankaj.ytvlib.app.FCM

com.google.firebase.MESSAGING_EVENT

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

Android Permissions

Y-TV PRO.apk

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.BLUETOOTH

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WAKE_LOCK

com.google.android.c2dm.permission.RECEIVE

android.permission.ACCESS_WIFI_STATE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

Sharing

General

Malware Config

Signatures

Files

Password: #Reacher2024#

ver3.ycntivi.off.premium

dev.pankaj.yacinetv.ui.splash.SplashActivity

Activities

dev.pankaj.yacinetv.ui.splash.SplashActivity

dev.pankaj.yacinetv.tvui.splash.SplashActivity

Permissions

Receivers

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.startapp.sdk.adsbase.remoteconfig.BootCompleteListener

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

Services

dev.pankaj.ytvlib.app.FCM

com.google.firebase.messaging.FirebaseMessagingService

Android Permissions

Y-TV PRO.apk