General

Malware Config

Signatures

Files

• 5050965669609472.zip

  .zip

  Password: infected

• 6ff9689025c204b4cf400c3eef7be8759cdad52206dcb5245a5e504c4fd0b11d

  .apk android

  com.behsazaan.mobilebank

  .main

  
  

  Activities

  .main

  android.intent.action.MAIN

  
  

  Permissions

  android.permission.READ_PHONE_STATE

  android.permission.ACCESS_NETWORK_STATE

  android.permission.INTERNET

  android.permission.BIND_ACCESSIBILITY_SERVICE

  android.permission.VIBRATE

  android.permission.SYSTEM_ALERT_WINDOW

  android.permission.SYSTEM_ERROR_WINDOW

  android.permission.READ_CONTACTS

  android.permission.WAKE_LOCK

  android.permission.FOREGROUND_SERVICE

  android.permission.RECEIVE_BOOT_COMPLETED

  android.permission.RECEIVE_SMS

  android.permission.READ_SMS

  android.permission.CALL_PHONE

  android.permission.READ_EXTERNAL_STORAGE

  com.google.android.c2dm.permission.RECEIVE

  com.behsazaan.mobilebank.permission.C2D_MESSAGE

  com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

  android.permission.GET_TASKS

  android.permission.PACKAGE_USAGE_STATS

  Receivers

  com.google.android.gms.measurement.AppMeasurementInstallReferrerReceiver

  com.android.vending.INSTALL_REFERRER

  
  

  com.google.firebase.iid.FirebaseInstanceIdReceiver

  com.google.android.c2dm.intent.RECEIVE

  com.google.android.c2dm.intent.REGISTRATION

  
  

  .detector$detector_BR

  android.intent.action.BOOT_COMPLETED

  
  

  .rest$rest_BR

  android.intent.action.BOOT_COMPLETED

  android.provider.Telephony.SMS_RECEIVED

  
  

  Services

  com.google.firebase.messaging.FirebaseMessagingService

  com.google.firebase.MESSAGING_EVENT

  
  

  anywheresoftware.b4a.objects.FirebaseNotificationsService

  com.google.firebase.MESSAGING_EVENT

  
  

  com.google.firebase.iid.FirebaseInstanceIdService

  com.google.firebase.INSTANCE_ID_EVENT

  
  

  .keyloggers

  android.accessibilityservice.AccessibilityService