General

  • Target
    TheOcularMigraine.apk
  • Size 38.2MB
  • Sample260808-2wxfgsel6y
  • SHA256 ec21a7364f354fc5955ee9b4ef73f4bbbb3d2e392002a42c2f50ff3bd533bebd
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Family: smsagent

    SmsAgent is an Android malware that targets victim SMS messages using Telegram as its C2.

  • SmsAgent payload 2 IoCs
  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 12 IoCs
  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • TheOcularMigraine.apk
    .apk 38.2MB

TheOcularMigraine.apk

  • SHA256 ec21a7364f354fc5955ee9b4ef73f4bbbb3d2e392002a42c2f50ff3bd533bebd
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • SmsAgent payload

  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

File Signature issue

Digest
30677cd00665481091f54ef9d771c0871c2bcc01a371ef36895ab2d8b2c6f8fa
Digest Algorithm
sha256
Digest Matches
Trusted
Not trusted
Signer
O=OPEN PC Reviews
openpc.ocular.migraine

Android Permissions

TheOcularMigraine.apk

Permissions

android.permission.READ_LOGS

android.permission.DISABLE_KEYGUARD

android.permission.PACKAGE_USAGE_STATS

android.permission.FOREGROUND_SERVICE

android.permission.WRITE_CALENDAR

android.permission.QUERY_ALL_PACKAGES

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_CALENDAR

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MANAGE_EXTERNAL_STORAGE

android.permission.ADB_WIFI

android.permission.ACCESS_FINE_LOCATION

android.permission.RESTART_PACKAGES

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.SCHEDULE_EXACT_ALARM

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_SECURE_SETTINGS

android.permission.WAKE_LOCK

android.permission.ACCESS_WIFI_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_SETTINGS

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.DUMP