Managed XDR

metode-ban-telegram.apk — отчёт о динамическом анализе вредоносного файла

Информация о файле

Имя файла
metode-ban-telegram.apk
Тип файла
Zip archive data, at least v2.0 to extract
Размер файла
7.9 MB
Первое обнаружение
Последнее обнаружение

Окружение

droid7/x86 ru

Хеши

SHA1
1bd636e9f1b12a536a4fd12469144b28f2c34928
SHA256
7a6b1a370f6add663574b64a65a64fc63fd6b9e4ef08b1779470a95c31dfc13e
MD5
6794d9cf2e96caf54e550982281c7f5d

Сигнатуры

Other

send_sms: Sends sms
metrics: Be used to get information from the screen
create_sms: Create SMS Message
dynamic_load: Uses undocumented methods to load apk/dex/classes
runtime_exec: Starts native process
skip_main_activity: Abort loading MainActivity
kill_process: Kills process
super_user: Checks root access
telephony_getsimcountryiso: Access country code of SIM
sms_message: Reads incoming SMS
dex_elements: Modifies classes path (possibly, dynamic code loading)
reflection: Uses reflection
framework_check: Checks frida/xposed/substrate
register_receiver: Registers broadcast receiver
browsed_history: Reads web browser history
network: Checks internet connection
read_or_write_global_settings: Read or write global settings
shared_prefs: Uses shared preferences
change_state_wifi_signature: Changes the state of Wi-Fi connection
read_or_write_system_settings: Read or write system settings
trowable: Throwable exceptions
start_activity: Starts activity
create_sqlite: Uses SQLite
load_jni_lib: Loads native library
get_runtime: Gets Runtime class
connect: Opening a connection
access_network_state: Network state access