angyongchaoa@aliyun.com:w1314521W
emailTracked by C2 Tracker Ā· Whois queried never
Network
- Network
- ā
- CIDR
- ā
- Country
- ā
Contact
- Handle
- ā
- Abuse
- ā
Observed in malware
| Family | Sample SHA-256 | First seen |
|---|---|---|
| ChinaSMSStealer | fe00cfa0f75eā¦ | 2019-09-25 |
About ChinaSMSStealer
SMS-intercepting stealer exfiltrating over email rather than a network C2: the SMTP account and password sit as const-strings in the i()/j() accessors of Lcom/phone/stop/db/a;. Detected by a four-part manifest fingerprint (INTERNET, activity.MainActivity, receiver.SMSReceiver, service.SecondService).