0e30948b3327a093bd7b35a10f65bc1f03a9b8d1d3e242dd6b5726e9136aaff0.zip
- SHA256 c1a3932fcfab6a27b4da47f54ded6039cc1d258b32be8b3d13b94b4f8331469c
Password
infected
Behavioral task
behavioral1
Sample
0e30948b3327a093bd7b35a10f65bc1f03a9b8d1d3e242dd6b5726e9136aaff0.apk
Resource
android-x64-arm64-20240624-en
android-11-x64
10 signatures
1800 seconds
Behavioral task
behavioral2
Sample
0e30948b3327a093bd7b35a10f65bc1f03a9b8d1d3e242dd6b5726e9136aaff0.apk
Resource
android-33-x64-arm64-20240624-en
android-13-x64
0 signatures
1800 seconds
General
- Target 0e30948b3327a093bd7b35a10f65bc1f03a9b8d1d3e242dd6b5726e9136aaff0.zip
- Size 13.5MB
- Sample240902-j4exaswclm
- SHA256 c1a3932fcfab6a27b4da47f54ded6039cc1d258b32be8b3d13b94b4f8331469c
- MD5 e89523b1b78b6496e7e16ced21cea221
- SHA1 17ff2697daaa243b9bd648ccf93f11558e612fea
- SHA512 9944d98072ccf31f5af93edc37a33263ea07489f0943d33fa0362db8738070994ec2ac755ce31133734a21632f878c4c5f425b2506e54a778c0b769a53956e09
- SSDEEP 393216:/kl1/i7R7l06dNFCSZj7AcjhiEArG17i2gFAwUE:/sS7GPe7dUrs+NKE
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Malware Config
Signatures
- Android SMSWorm payload 1 IoCs
resource yara_rule static1/unpack001/0e30948b3327a093bd7b35a10f65bc1f03a9b8d1d3e242dd6b5726e9136aaff0.apk family_smsworm - Smsworm family
- Declares services with permission to bind to the system 1 IoCs
description ioc Required by accessibility services to bind with the system. Allows apps to access accessibility features. android.permission.BIND_ACCESSIBILITY_SERVICE - Requests dangerous framework permissions 5 IoCs
description ioc Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE Required to be able to access the camera device. android.permission.CAMERA Allows an application to request installing packages. android.permission.REQUEST_INSTALL_PACKAGES
File Explorer
-
0e30948b3327a093bd7b35a10f65bc1f03a9b8d1d3e242dd6b5726e9136aaff0.zip.zip 13.5MB
-
0e30948b3327a093bd7b35a10f65bc1f03a9b8d1d3e242dd6b5726e9136aaff0.apk.apk 16.0MB
0e30948b3327a093bd7b35a10f65bc1f03a9b8d1d3e242dd6b5726e9136aaff0.apk
- SHA256 0e30948b3327a093bd7b35a10f65bc1f03a9b8d1d3e242dd6b5726e9136aaff0
- MD5 be5e2f074432526ef36156e82bb219cf
- SHA1 6cf0b782485e77218710fa024f1c11f122d84f60
- SHA512 84633c70391513b388cdaf77634e0c6a60d270be121bfef6d94cbcc5f88e34a929659d13d2f05348e83f56c356be3eb9dc9fc44fbeca8cf6637cc19cba8af845
- SSDEEP 393216:yf0YUtNuYwbvbaSafQ0Wejue+95sweOsjIYPaP:y9GNujbDaS4WeaeI5sqC8
- MD5 SHA1 SHA512 SSDEEP
-
Android SMSWorm payload
com.apkpure.aegon
com.apkpure.aegon.main.activity.SplashActivity
android.permission.INTERNET
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_EXTERNAL_STORAGE
android.permission.GET_PACKAGE_SIZE
android.permission.READ_PHONE_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.BIND_ACCESSIBILITY_SERVICE
com.android.launcher.permission.INSTALL_SHORTCUT
android.permission.CAMERA
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.REQUEST_INSTALL_PACKAGES
android.permission.FOREGROUND_SERVICE
oppo.permission.OPPO_COMPONENT_SAFE
android.permission.WAKE_LOCK
android.permission.REQUEST_DELETE_PACKAGES
android.permission.CHANGE_WIFI_STATE
android.permission.CHANGE_NETWORK_STATE
android.permission.VIBRATE
android.permission.FLASHLIGHT
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
com.google.android.c2dm.permission.RECEIVE
com.apkpure.aegon.ads.apkpure.MarketAdActivity
com.zcoup.base.view.InnerWebViewActivity
com.zcoup.appwall.AppwallActivity
com.apkpure.aegon.main.activity.SplashActivity
android.intent.action.MAIN
com.apkpure.aegon.cms.activity.CmsTabActivity
com.apkpure.aegon.main.activity.FrameActivity
com.apkpure.aegon.main.activity.LauncherActivity
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.SEND
android.intent.action.SEND_MULTIPLE
com.apkpure.aegon.cms.activity.SearchActivity
com.apkpure.aegon.person.activity.SettingsActivity
com.apkpure.aegon.post.activity.SubmitChildCommentActivity
com.apkpure.aegon.widgets.clipImageview.CropImgActivity
com.apkpure.aegon.app.activity.ManagerActivity
com.apkpure.aegon.main.activity.MainTabActivity
com.apkpure.aegon.person.activity.MessageActivity
com.apkpure.aegon.cms.activity.CommonActivity
com.apkpure.aegon.person.activity.FavouriteActivity
com.apkpure.aegon.cms.activity.MyCommentActivity
com.apkpure.aegon.person.activity.TopSelectActivity
com.apkpure.aegon.app.activity.AppDetailActivity
com.apkpure.aegon.app.activity.UserDetailActivity
com.apkpure.aegon.person.activity.UserFocusActivity
com.apkpure.aegon.cms.activity.TopicListActivity
com.apkpure.aegon.app.activity.AppTagListActivity
com.apkpure.aegon.app.activity.AddAppTagActivity
com.apkpure.aegon.app.activity.AddTagAgoActivity
com.apkpure.aegon.cms.activity.PreRegisterActivity
com.facebook.CustomTabActivity
android.intent.action.VIEW
com.apkpure.aegon.person.activity.LoginActivity
com.yalantis.ucrop.UCropActivity
com.apkpure.aegon.app.activity.ApkListActivity
com.apkpure.aegon.cms.activity.SpecialCommentActivity
com.apkpure.aegon.person.activity.AtUserActivity
com.apkpure.aegon.cms.activity.SearchHashtagActivity
com.apkpure.aegon.person.activity.UserInfoEditActivity
com.apkpure.aegon.cms.activity.PictureBrowseActivity
com.apkpure.aegon.cms.activity.CommentSecondActivity
com.apkpure.aegon.cms.activity.CommentThirdActivity
com.apkpure.aegon.cms.activity.HashtagDetailActivity
com.apkpure.aegon.post.activity.SubmitCommentV2Activity
com.apkpure.aegon.cms.activity.CommentDraftActivity
com.apkpure.aegon.cms.activity.CommonWebViewActivity
com.apkpure.aegon.main.activity.ContainerFragmentActivity
com.apkpure.aegon.main.activity.CaptchaWebViewActivity
com.apkmatrix.components.clientupdate.UpdateDialogActivity
com.apkpure.components.installer.ui.InstallApksActivity
com.just.agentwebX5.ActionActivity
com.luck.picture.lib.PictureSelectorActivity
com.luck.picture.lib.PicturePreviewActivity
com.luck.picture.lib.PictureVideoPlayActivity
com.luck.picture.lib.PictureExternalPreviewActivity
com.yalantis.ucrop.PictureMultiCuttingActivity
com.luck.picture.lib.PicturePlayAudioActivity
com.facebook.FacebookActivity
com.facebook.CustomTabMainActivity
com.twitter.sdk.android.core.identity.OAuthActivity
com.just.agentweb.ActionActivity
com.acker.simplezxing.activity.CaptureActivity
com.google.android.gms.tagmanager.TagManagerPreviewActivity
android.intent.action.VIEW
com.google.firebase.auth.internal.GenericIdpActivity
android.intent.action.VIEW
com.google.firebase.auth.internal.RecaptchaActivity
android.intent.action.VIEW
com.google.android.gms.auth.api.signin.internal.SignInHubActivity
com.adtiming.mediationsdk.adt.AdsActivity
com.adtiming.mediationsdk.adt.interactive.InteractiveActivity
com.adtiming.mediationsdk.adt.AdtActivity
com.unity3d.services.ads.adunit.AdUnitActivity
com.unity3d.services.ads.adunit.AdUnitTransparentActivity
com.unity3d.services.ads.adunit.AdUnitTransparentSoftwareActivity
com.unity3d.services.ads.adunit.AdUnitSoftwareActivity
com.tradplus.ads.mobileads.gdpr.TradplusGDPRAuthActivity
net.pubnative.lite.sdk.consent.UserConsentActivity
net.pubnative.lite.sdk.interstitial.activity.MraidInterstitialActivity
net.pubnative.lite.sdk.interstitial.activity.VastInterstitialActivity
net.pubnative.lite.sdk.rewarded.activity.VastRewardedActivity
com.startapp.sdk.adsbase.consent.ConsentActivity
com.startapp.sdk.ads.list3d.List3DActivity
com.startapp.sdk.adsbase.activities.OverlayActivity
com.startapp.sdk.adsbase.activities.FullScreenActivity
com.mintegral.msdk.activity.MTGCommonActivity
com.mintegral.msdk.out.LoadingActivity
com.mintegral.msdk.reward.player.MTGRewardVideoActivity
com.mintegral.msdk.interstitial.view.MTGInterstitialActivity
com.google.android.gms.common.api.GoogleApiActivity
com.apkpure.aegon.services.CommonDownloadService
com.apkpure.aegon.services.UltraDownloadService
com.apkpure.aegon.services.AppProtoBufUpdateService
com.apkpure.aegon.services.AppWatcherService
com.apkpure.aegon.services.AutoInstallService
android.accessibilityservice.AccessibilityService
com.google.android.gms.analytics.AnalyticsService
com.google.android.gms.analytics.AnalyticsJobService
com.apkpure.aegon.services.PushFirebaseMessagingService
com.google.firebase.MESSAGING_EVENT
com.apkpure.aegon.services.UploadFileService
com.apkmatrix.components.downloader.services.DownloadService
com.google.firebase.components.ComponentDiscoveryService
com.google.android.gms.tagmanager.TagManagerService
com.google.firebase.messaging.FirebaseMessagingService
com.google.firebase.MESSAGING_EVENT
com.google.firebase.auth.api.fallback.service.FirebaseAuthFallbackService
com.google.firebase.auth.api.gms.service.START
com.google.android.gms.auth.api.signin.RevocationBoundService
com.startapp.sdk.adsbase.InfoEventService
com.startapp.sdk.adsbase.PeriodicJobService
com.google.android.gms.measurement.AppMeasurementService
com.google.android.gms.measurement.AppMeasurementJobService
com.google.android.datatransport.runtime.backends.TransportBackendDiscovery
com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService
androidx.room.MultiInstanceInvalidationService
com.zcoup.base.tp.UtilityReceiver
android.intent.action.PACKAGE_ADDED
com.apkpure.aegon.app.event.SystemBootEvent$Receiver
android.intent.action.BOOT_COMPLETED
com.apkpure.aegon.app.event.SystemPackageEvent$Receiver
android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED
android.intent.action.PACKAGE_REPLACED
com.apkpure.aegon.person.event.NotificationEvent
notification_cancelled
notification_clicked
com.google.android.gms.analytics.AnalyticsReceiver
com.google.android.gms.analytics.ANALYTICS_DISPATCH
com.google.android.gms.analytics.CampaignTrackingReceiver
com.android.vending.INSTALL_REFERRER
com.just.agentwebX5.RealDownLoader$NotificationBroadcastReceiver
com.startapp.sdk.adsbase.remoteconfig.BootCompleteListener
android.intent.action.BOOT_COMPLETED
com.google.firebase.iid.FirebaseInstanceIdReceiver
com.google.android.c2dm.intent.RECEIVE
com.google.android.gms.measurement.AppMeasurementReceiver
com.facebook.CurrentAccessTokenExpirationBroadcastReceiver
com.facebook.sdk.ACTION_CURRENT_ACCESS_TOKEN_CHANGED