Overview

overview

7

Static

static

6

Pm health ...ly.apk

android-13-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Pm health card apply.apk

  • Size

    6.3MB

  • MD5

    5d5b2d1b4c69c4d2a6262b0831e5b33c

  • SHA1

    6c512e6bd74d3dc34e2c93f64989864fa505c3c3

  • SHA256

    a6f42c4bda81840c8e196a1f84ebccca406aac668c7f81355469e8f4b08b6d2a

  • SHA512

    538eb7ae7fb26eb0e0f623ed0e9ed589fa2982ba318ec3d943d00ae3c285132906e254b2a88683b51417512fed6740d4faf47e06ccbacead4314214d0965a002

  • SSDEEP

    196608:RRAzavA4kgoFI53poDXh22jzcbSmdk5DWn:IE9xDEXg8zJL5yn

Score
6/10

Malware Config

Signatures

  • Attempts to obfuscate APK file format

    Applies obfuscation techniques to the APK format in order to hinder analysis

  • Requests dangerous framework permissions 3 IoCs

Files

  • Pm health card apply.apk
    .apk android arch:arm arch:arm64

    Password: infected

    com.jio.messageslitg

    com.jio.messageslite.MainActivity


Android Permissions

Pm health card apply.apk

Permissions

android.permission.READ_SMS

android.permission.RECEIVE_SMS

android.permission.SEND_SMS

android.permission.INTERNET

android.permission.FOREGROUND_SERVICE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

com.jio.messageslitg.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION