General

  • Target

    2936207e-6d88-4986-881a-549cfb937563_oogleWebBrowserAndroid.apk

  • Size

    12.1MB

  • MD5

    d0d130c855a790da28fdd744535ef07f

  • SHA1

    e9760321509f198ffd80667cc8fa34c4c76f4cc7

  • SHA256

    e6746d0069dea77ecd1d7a611c45e5af220643c23f7b473e1bc2ed8aa2923475

  • SHA512

    e6a08e435d5ea53de01c765c7747e2bcfea9dc99e67ac4e8b5d5cdfd7f07894e9554b04aca9d0310a7cc09b180bfa84f7e9192c03e79ae8f664a230a740a2a5f

  • SSDEEP

    196608:wvyd7pyOZgwi70nk6zLxs1yuyc3u4Ly3UUnKEO++lUU4tjBZPqECEtZWk:wvi7E4gh0k6z2UHc3u4GnKA+lUx

Score
10/10

Malware Config

Signatures

  • Android SMSWorm payload 1 IoCs
  • Smsworm family
  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 3 IoCs

Files

  • 2936207e-6d88-4986-881a-549cfb937563_oogleWebBrowserAndroid.apk
    .apk android arch:arm64 arch:arm arch:mips arch:mips64 arch:x86 arch:x64

    oogle.chrome.web

    oogle.chrome.web.preinicio


Android Permissions

2936207e-6d88-4986-881a-549cfb937563_oogleWebBrowserAndroid.apk

Permissions

android.permission.FOREGROUND_SERVICE

android.permission.ACCESS_FINE_LOCATION

android.permission.RECORD_AUDIO

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.CAMERA

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.WAKE_LOCK

com.google.android.c2dm.permission.RECEIVE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.ACCESS_WIFI_STATE

android.permission.RECEIVE_BOOT_COMPLETED