d92b0ecf43b922be1a92a90a5e9e41ba[.]zip

General

Target

d92b0ecf43b922be1a92a90a5e9e41ba.zip
Size

4.4MB
MD5

a87907fcb56d855fcb95a15af91469da
SHA1

2b22a46ed710d4f51905654946804b2c262b3a8d
SHA256

a62c5f60ba878b9aa6458c1d8b82d569b451a5287afa26f81a3434c000399bfa
SHA512

a51a074f39f4be5729eb07c076bb0773aedccf75199230ace1b504edae4f64130c5f96059d0d20340e6140010a7d01ec1044163ca0df6132d976b766bd37ce3a
SSDEEP

98304:oQ0N9PWuHvrAoHzRJ2mdsxj6M39YPVqxTDObpA7FnbpT0vMK:y9+uHv/dYmCxZ39YPVqxGbp0bB0vMK

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 6 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE

Files

d92b0ecf43b922be1a92a90a5e9e41ba.zip
.zip

Password: infected
6fbfd47c3f91559f8422a0cbce7933874c67a3565081d5db54045d638fcd9693
.apk android

Password: infected

ch.nth.android.contentabo_l01_sim_univ

ch.nth.android.contentabo_l01.activities.SplashActivity

Activities

ch.nth.android.contentabo_l01.activities.SplashActivity

android.intent.action.MAIN

ch.nth.android.contentabo_l01.activities.MainActivity

android.intent.action.SEARCH

ch.nth.android.contentabo_l01.activities.UpdateAppWithMobileDialogActivity

ch.nth.contentabo.action.install

Permissions

ch.nth.android.contentabo_l01_sim_univ.permission.C2D_MESSAGE
com.google.android.c2dm.permission.RECEIVE
android.permission.INTERNET
android.permission.READ_PHONE_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.SEND_SMS
android.permission.RECEIVE_SMS
android.permission.WRITE_SMS
android.permission.READ_SMS
android.permission.WAKE_LOCK
android.permission.ACCESS_WIFI_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.RECEIVE_BOOT_COMPLETED

Receivers

ch.nth.android.contentabo.common.recivers.SMSBroadcastReceiver

android.provider.Telephony.SMS_RECEIVED

ch.nth.android.contentabo.common.recivers.SMSSentBroadcastReceiver

ch.nth.android.action.FIRST_SMS_SENT
ch.nth.android.action.SECOND_SMS_SENT

ch.nth.android.contentabo_l01.service.AlarmReceiver

ch.nth.android.action.START_APP_UPDATE
ch.nth.android.action.CHECK_SPENDING_LIMIT
ch.nth.android.action.ACTION_SHOW_SPENDING_LIMIT_NOTIFICATION
android.intent.action.BOOT_COMPLETED

com.google.android.gcm.GCMBroadcastReceiver

com.google.android.c2dm.intent.RECEIVE
com.google.android.c2dm.intent.REGISTRATION

Services

Sharing

General

Malware Config

Signatures

Files

Password: infected

Password: infected

ch.nth.android.contentabo_l01_sim_univ

ch.nth.android.contentabo_l01.activities.SplashActivity

Activities

ch.nth.android.contentabo_l01.activities.SplashActivity

ch.nth.android.contentabo_l01.activities.MainActivity

ch.nth.android.contentabo_l01.activities.UpdateAppWithMobileDialogActivity

Permissions

Receivers

ch.nth.android.contentabo.common.recivers.SMSBroadcastReceiver

ch.nth.android.contentabo.common.recivers.SMSSentBroadcastReceiver

ch.nth.android.contentabo_l01.service.AlarmReceiver

com.google.android.gcm.GCMBroadcastReceiver

Services