335bb6bba5f40ed919d8e33ef186f538[.]zip

General

Target

335bb6bba5f40ed919d8e33ef186f538.zip
Size

4.4MB
MD5

e077ae6cca5ce0e0a6884e44b59e4ec9
SHA1

e743cb27b9343543426235da42675ce661b5cc7a
SHA256

3f5bfe76e9c3549155421ec19632db8ed08975aafca02c3ac757863b462fa56d
SHA512

85348ba513ae438f58764f7f974d32e7d5a587176214f4080786d8644f819c7bd44d11beda1f935cee3dace03283cac3cec80381aba9df9158c86f724dd9af55
SSDEEP

98304:FVry5CFvHBsJzxxh4fmfDyZyHRb+fXX8IQriXLcfSrR6:HrygZhs/cuLQY+X8zKeSrk

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 6 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE

Files

335bb6bba5f40ed919d8e33ef186f538.zip
.zip

Password: infected
e8bb1f5f6533abc1dfd2570d88f9c5a34e87a3d60a8e27abf7fa156040e93932
.apk android

Password: infected

ch.nth.android.contentabo_l01_sim_univ

ch.nth.android.contentabo_l01.activities.SplashActivity

Activities

ch.nth.android.contentabo_l01.activities.SplashActivity

android.intent.action.MAIN

ch.nth.android.contentabo_l01.activities.MainActivity

android.intent.action.SEARCH

ch.nth.android.contentabo_l01.activities.UpdateAppWithMobileDialogActivity

ch.nth.contentabo.action.install

Permissions

ch.nth.android.contentabo_l01_sim_univ.permission.C2D_MESSAGE
com.google.android.c2dm.permission.RECEIVE
android.permission.INTERNET
android.permission.READ_PHONE_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.SEND_SMS
android.permission.RECEIVE_SMS
android.permission.WRITE_SMS
android.permission.READ_SMS
android.permission.WAKE_LOCK
android.permission.ACCESS_WIFI_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.RECEIVE_BOOT_COMPLETED

Receivers

ch.nth.android.contentabo.common.recivers.SMSBroadcastReceiver

android.provider.Telephony.SMS_RECEIVED

ch.nth.android.contentabo.common.recivers.SMSSentBroadcastReceiver

ch.nth.android.action.FIRST_SMS_SENT
ch.nth.android.action.SECOND_SMS_SENT

ch.nth.android.contentabo_l01.service.AlarmReceiver

ch.nth.android.action.START_APP_UPDATE
ch.nth.android.action.CHECK_SPENDING_LIMIT
ch.nth.android.action.ACTION_SHOW_SPENDING_LIMIT_NOTIFICATION
android.intent.action.BOOT_COMPLETED

com.google.android.gcm.GCMBroadcastReceiver

com.google.android.c2dm.intent.RECEIVE
com.google.android.c2dm.intent.REGISTRATION

Services

Sharing

General

Malware Config

Signatures

Files

Password: infected

Password: infected

ch.nth.android.contentabo_l01_sim_univ

ch.nth.android.contentabo_l01.activities.SplashActivity

Activities

ch.nth.android.contentabo_l01.activities.SplashActivity

ch.nth.android.contentabo_l01.activities.MainActivity

ch.nth.android.contentabo_l01.activities.UpdateAppWithMobileDialogActivity

Permissions

Receivers

ch.nth.android.contentabo.common.recivers.SMSBroadcastReceiver

ch.nth.android.contentabo.common.recivers.SMSSentBroadcastReceiver

ch.nth.android.contentabo_l01.service.AlarmReceiver

com.google.android.gcm.GCMBroadcastReceiver

Services