General

  • Target

    base (3).apk

  • Size

    9.8MB

  • MD5

    b15051dc78c8a32ad26bea20f30655fb

  • SHA1

    ffb552d6760d74f77a599fb76903bd734767fccb

  • SHA256

    b5fd30b9b94327212e8b21f8cfb376b07178b84caca5dc686f51389ff120fb37

  • SHA512

    b6c9501ccb193f0a714591a7c31d8fdc475f211edfbea6bf1887d34a122313706683bf57bc7f4e3d3d010906923dfee62aed9baf9ab0811b651bdce6f44b3988

  • SSDEEP

    196608:qSHwc4KsH8xP0wau0dxwNROdyPpC3bRfay9rx8zHzfTvqqs9RV:jQDBdxuEOCdBeHvu

Score
10/10

Malware Config

Signatures

  • Android SMSWorm payload 1 IoCs
  • Smsworm family
  • Requests dangerous framework permissions 3 IoCs

Files

  • base (3).apk
    .apk android arch:arm64 arch:arm arch:x86 arch:x64

    ver3.ycntivi.off

    dev.google.yacinetv.ui.splash.SplashActivity


Android Permissions

base (3).apk

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.BLUETOOTH

android.permission.BLUETOOTH_SCAN

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.Ad_ID

android.permission.POST_NOTIFICATIONS

ver3.ycntivi.off.permission.C2D_MESSAGE

android.permission.WAKE_LOCK

com.google.android.c2dm.permission.RECEIVE

android.permission.VIBRATE

com.sec.android.provider.badge.permission.READ

com.sec.android.provider.badge.permission.WRITE

com.htc.launcher.permission.READ_SETTINGS

com.htc.launcher.permission.UPDATE_SHORTCUT

com.sonyericsson.home.permission.BROADCAST_BADGE

com.sonymobile.home.permission.PROVIDER_INSERT_BADGE

com.anddoes.launcher.permission.UPDATE_COUNT

com.majeur.launcher.permission.UPDATE_BADGE

com.huawei.android.launcher.permission.CHANGE_BADGE

com.huawei.android.launcher.permission.READ_SETTINGS

com.huawei.android.launcher.permission.WRITE_SETTINGS

android.permission.READ_APP_BADGE

com.oppo.launcher.permission.READ_SETTINGS

com.oppo.launcher.permission.WRITE_SETTINGS

me.everything.badger.permission.BADGE_COUNT_READ

me.everything.badger.permission.BADGE_COUNT_WRITE

ver3.ycntivi.off.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

com.google.android.gms.permission.AD_ID

android.permission.ACCESS_ADSERVICES_ATTRIBUTION

android.permission.ACCESS_ADSERVICES_AD_ID

android.permission.ACCESS_ADSERVICES_TOPICS

android.permission.FOREGROUND_SERVICE

android.permission.ACCESS_WIFI_STATE