a397ccb187460fe8790147ee81c8147838ce5ca8a55f33d822a8a8332e8173c7[.]zip

General

Target

a397ccb187460fe8790147ee81c8147838ce5ca8a55f33d822a8a8332e8173c7.zip
Size

3.7MB
MD5

26ac0471653ccd96bb9509a1ff243523
SHA1

b8e56d7d1403d66ac2344d300e0d80c5bdf54e03
SHA256

a397ccb187460fe8790147ee81c8147838ce5ca8a55f33d822a8a8332e8173c7
SHA512

652e476c118172337b156ff51f7d8609d3af684eebeb5c85f6350f4f745c47f4750419f5a2e00a1c6ce41e16368cf6349c3f8137713277ea32bb2431b66a8d8c
SSDEEP

98304:MHPweiWhsUUu4pYB/3zjTj6klg79tEn/Jf1t5:ugugczj6k6htEn/h1t5

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE

Requests dangerous framework permissions 9 IoCs

description	ioc
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to send SMS messages.	android.permission.SEND_SMS

Files

a397ccb187460fe8790147ee81c8147838ce5ca8a55f33d822a8a8332e8173c7.zip
.zip

Password: infected
19278db5549027a224f9436c45ffdf0a0dc5ac630335fb2d9ff9d44da0f267b0.zip
.apk android

com.xsyhwp

com.xsyhwp.qnzqkxsm.IoiXLathYhL

Activities

com.xsyhwp.qnzqkxsm.IoiXLathYhL

android.intent.action.MAIN

Permissions

android.permission.WRITE_EXTERNAL_IYZTPC
android.permission.WRITE_EXTERNAL_IOHOCX
android.permission.GET_ACCOUNTS
android.permission.ACCESS_NETWORK_STATE
android.permission.DISABLE_KEYGUARD
android.permission.WRITE_EXTERNAL_PBWZXGIB
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_SETTINGS
android.permission.VIBRATE
android.permission.RECEIVE_SMS
android.permission.READ_SMS
android.permission.WRITE_EXTERNAL_MYNEGNJNKRF
com.google.android.c2dm.permission.RECEIVE
android.permission.READ_CONTACTS
android.permission.USES_POLICY_FORCE_LOCK
android.permission.WRITE_EXTERNAL_FRJQAVPMZOCY
android.permission.SYSTEM_ALERT_WINDOW
android.permission.WAKE_LOCK
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.SEND_SMS
andstartScreenroid.permission.READ_EXTERNAL_STORAGE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.INTERNET

Receivers

com.xsyhwp.bfnljzjemqd.gslRPjXLI

android.intent.action.BOOT_COMPLETED
android.intent.action.QUICKBOOT_POWERON

com.xsyhwp.bfnljzjemqd.CVnFQR

MainActivity.AlarmAction

com.xsyhwp.bfnljzjemqd.EOFiwNUHhORe

android.provider.Telephony.SMS_RECEIVED

com.xsyhwp.bfnljzjemqd.gTIGDNnwVJxs

android.intent.action.BATTERY_CHANGED
android.intent.action.ACTION_POWER_DISCONNECTED
android.intent.action.ACTION_POWER_CONNECTED

com.NEWwxzlywah.mjpwfzr.mwnPNRCcXlv

android.net.conn.CONNECTIVITY_CHANGE

Services

com.xsyhwp.bkioklpmlmck.jJBtEJXqPWQ

com.google.android.gms.gcm.ACTION_TASK_READY

com.xsyhwp.nsgGayPXDe

android.accessibilityservice.AccessibilityService

com.xsyhwp.bkioklpmlmck.RKxtSKyYHalv

com.facebook.main

com.xsyhwp.bkioklpmlmck.LFSImfRSIqf

com.facebook.events

Sharing

General

Malware Config

Signatures

Files

Password: infected

com.xsyhwp

com.xsyhwp.qnzqkxsm.IoiXLathYhL

Activities

com.xsyhwp.qnzqkxsm.IoiXLathYhL

Permissions

Receivers

com.xsyhwp.bfnljzjemqd.gslRPjXLI

com.xsyhwp.bfnljzjemqd.CVnFQR

com.xsyhwp.bfnljzjemqd.EOFiwNUHhORe

com.xsyhwp.bfnljzjemqd.gTIGDNnwVJxs

com.NEWwxzlywah.mjpwfzr.mwnPNRCcXlv

Services

com.xsyhwp.bkioklpmlmck.jJBtEJXqPWQ

com.xsyhwp.nsgGayPXDe

com.xsyhwp.bkioklpmlmck.RKxtSKyYHalv

com.xsyhwp.bkioklpmlmck.LFSImfRSIqf