Resubmissions

07/12/2022, 02:02

221207-cgmv3aee72 7

07/12/2022, 00:20

221207-amyhmsbh3s 7

General

  • Target

    ChargeStripe- POS Processing_1.3.8.3_apkcombo.com.apk

  • Size

    34.2MB

  • MD5

    750c7c9da8275bfc1c677daec93b3691

  • SHA1

    0fd87dc09a5e5bc733c1a5b579f1ff6fcde28865

  • SHA256

    d3900cabb2178f84264853fde269a189bc5f77ab1aa840f34d5d2b3da95af22a

  • SHA512

    1db78a9252c5a03195fae0000af1ad4169e846253c919a36ed79f4c596390ceff58d59d84707fced326d4514e7250ea793fcd17392192e6e5c3d0818600a1092

  • SSDEEP

    786432:lJGywNHvMsrXZTWCZmPHDKU0XVgj+XUPy/OrrPg4Ue2:lNOrWymvDKU0XVs+EPy/UU4R2

Score
7/10

Malware Config

Signatures

  • Requests dangerous framework permissions 4 IoCs

Files

  • ChargeStripe- POS Processing_1.3.8.3_apkcombo.com.apk
    .apk android arch:arm64 arch:arm arch:mips arch:x86 arch:x64

    ironark.com.charge

    ironark.com.charge.activities.SplashScreenActivity


Android Permissions

ChargeStripe- POS Processing_1.3.8.3_apkcombo.com.apk

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.RECORD_AUDIO

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.POST_NOTIFICATIONS

android.permission.WAKE_LOCK

com.google.android.c2dm.permission.RECEIVE

com.google.android.gms.permission.AD_ID

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

ironark.com.charge.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

android.permission.CAMERA

android.permission.VIBRATE

android.permission.FOREGROUND_SERVICE