b1d26127aaf6c223deafce17e9bd70a74926b4c4e5b5e6166b24f8e58f7120fd[.]zip

General

Target

b1d26127aaf6c223deafce17e9bd70a74926b4c4e5b5e6166b24f8e58f7120fd.zip
Size

203KB
MD5

326c21f35e7797331044ee6312a661bc
SHA1

174c847edb872973086fcb39bfbe1d100ca0282e
SHA256

b1d26127aaf6c223deafce17e9bd70a74926b4c4e5b5e6166b24f8e58f7120fd
SHA512

8548c74039b543dc5b921abd9a2ea1a02098335bb6d5a47acfdc308e55c7f0dddde33dcc903f119e3c86bf8693e6266546e83d18fc8c6073fc738127c7cc744c
SSDEEP

6144:d5nnf+z9+8TFRw7M1FXPN2GVQ5VawnkKT:72B+uRw7MTXrQ5Va0fT

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 9 IoCs

description	ioc
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS

Files

b1d26127aaf6c223deafce17e9bd70a74926b4c4e5b5e6166b24f8e58f7120fd.zip
.zip

Password: infected
7843d056e42bc194275b946226418c1dd1929b4ae9438a20846d4deb67e6682a.apk
.apk android

ngur.qlvem.ofnld

jvobvn.DFActivity

Activities

jvobvn.DFActivity

android.intent.action.MAIN

jvobvn.OWActivity

android.intent.action.SEND
android.intent.action.SENDTO

Permissions

android.permission.ACCESS_WIFI_STATE
android.permission.SYSTEM_ALERT_WINDOW
android.permission.CHANGE_NETWORK_STATE
android.permission.CALL_PHONE
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.DISABLE_KEYGUARD
android.permission.RECEIVE_BOOT_COMPLETED
hrkuons.jiubgtp.ngrhd
jygb.himrqf.mgjkesp
fuow.zpauybh.zwry
blbukue.fnixhn.ytsn
android.permission.WAKE_LOCK
android.permission.INTERNET
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_EXTERNAL_STORAGE
android.permission.ACCESS_NETWORK_STATE
android.permission.READ_PHONE_STATE
android.permission.RECEIVE_SMS
android.permission.READ_SMS
android.permission.WRITE_SMS
android.permission.SEND_SMS
android.permission.DISABLE_KEYGUARD
android.permission.READ_CONTACTS
android.permission.CHANGE_WIFI_STATE
android.permission.READ_PROFILE

Receivers

jvobvn.BVReceiver

android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.PACKAGE_ADDED

jvobvn.COReceiver

android.provider.Telephony.SMS_DELIVER

jvobvn.KCReceiver

android.provider.Telephony.WAP_PUSH_DELIVER

Services

jvobvn.IsService

android.intent.action.RESPOND_VIA_MESSAGE

Sharing

General

Malware Config

Signatures

Files

Password: infected

ngur.qlvem.ofnld

jvobvn.DFActivity

Activities

jvobvn.DFActivity

jvobvn.OWActivity

Permissions

Receivers

jvobvn.BVReceiver

jvobvn.COReceiver

jvobvn.KCReceiver

Services

jvobvn.IsService