OfficeSuite_v13[.]5[.]45375_MOD_mmundoperfecto[.]net[.]apk

Sharing

Copy URL Twitter E-mail

General

Target

OfficeSuite_v13.5.45375_MOD_mmundoperfecto.net.apk
Size

116.0MB
MD5

09bbb3ab0631cc615fd2fa410f6f098e
SHA1

69b53502c3d80dd6d641729ece109d3eb41945c9
SHA256

c37bd1d87a1ae0c9c2a5a68d39bbdd269f98fff625738267bb22dd3d4fa6d465
SHA512

4197ea90c51a63469ae2c132972fc4af1e62979a1c1c9e713386ee3adb4ec8a8c063dbf6865399c6e020dd28866514a3eb4f881d02c6c469feef0924fa62878b
SSDEEP

3145728:D2rLTZjUrRaTdvYTXIWAbXImxioI6YQO9ULep+9WBW+WYM:DEZawdgTYWZxl6YQ22ep+9WBZzM

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 2 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE

Files

OfficeSuite_v13.5.45375_MOD_mmundoperfecto.net.apk
.apk android arch:arm64 arch:arm

com.mobisystems.office

com.microsoft.identity.client.BrowserTabActivity

Activities

com.microsoft.identity.client.BrowserTabActivity

android.intent.action.VIEW

com.mobisystems.office.files.FileBrowser

android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.QUICK_VIEW
android.intent.action.EDIT
android.intent.action.GET_CONTENT
android.intent.action.VIEW
android.intent.action.QUICK_VIEW
android.intent.action.EDIT
android.intent.action.GET_CONTENT
android.intent.action.VIEW
android.intent.action.QUICK_VIEW
android.intent.action.EDIT
android.intent.action.GET_CONTENT
com.mobisystems.office.OPEN_DIR

com.mobisystems.android.ui.modaltaskservice.FBNotificationActivity

ms_dismiss_category

com.mobisystems.web.WebViewActivity

android.intent.action.VIEW

com.mobisystems.web.CustomBrowserActivity

android.intent.action.VIEW

com.mobisystems.office.exceptions.ErrorActivity

android.intent.action.VIEW

com.mobisystems.dropbox.MsDropboxAuthActivity

android.intent.action.VIEW

com.mobisystems.office.EditorLauncher

android.intent.action.VIEW
android.intent.action.QUICK_VIEW
android.intent.action.EDIT
android.intent.action.GET_CONTENT
android.intent.action.VIEW
android.intent.action.QUICK_VIEW
android.intent.action.EDIT
android.intent.action.GET_CONTENT
android.intent.action.VIEW
android.intent.action.QUICK_VIEW
android.intent.action.EDIT
android.intent.action.GET_CONTENT
android.intent.action.VIEW
android.intent.action.QUICK_VIEW
android.intent.action.EDIT
android.intent.action.GET_CONTENT
android.intent.action.VIEW
android.intent.action.QUICK_VIEW
android.intent.action.EDIT
android.intent.action.GET_CONTENT

com.facebook.CustomTabActivity

android.intent.action.VIEW
android.intent.action.VIEW

com.mobisystems.libfilemng.FcOfficeFiles

android.intent.action.VIEW
android.intent.action.QUICK_VIEW
android.intent.action.EDIT
android.intent.action.GET_CONTENT
android.intent.action.VIEW
android.intent.action.QUICK_VIEW
android.intent.action.EDIT
android.intent.action.GET_CONTENT
android.intent.action.VIEW
android.intent.action.QUICK_VIEW
android.intent.action.EDIT
android.intent.action.GET_CONTENT
android.intent.action.VIEW
android.intent.action.QUICK_VIEW
android.intent.action.EDIT
android.intent.action.GET_CONTENT
android.intent.action.VIEW
android.intent.action.QUICK_VIEW
android.intent.action.EDIT
android.intent.action.GET_CONTENT
android.intent.action.VIEW
android.intent.action.QUICK_VIEW
android.intent.action.EDIT
android.intent.action.GET_CONTENT
android.intent.action.VIEW
android.intent.action.QUICK_VIEW
android.intent.action.EDIT
android.intent.action.GET_CONTENT
android.intent.action.VIEW
android.intent.action.QUICK_VIEW
android.intent.action.EDIT
android.intent.action.GET_CONTENT
android.intent.action.VIEW
android.intent.action.QUICK_VIEW
android.intent.action.EDIT
android.intent.action.GET_CONTENT
android.intent.action.VIEW
android.intent.action.QUICK_VIEW
android.intent.action.EDIT
android.intent.action.GET_CONTENT
android.intent.action.VIEW
android.intent.action.QUICK_VIEW
android.intent.action.EDIT
android.intent.action.GET_CONTENT
android.intent.action.VIEW
android.intent.action.QUICK_VIEW
android.intent.action.EDIT
android.intent.action.GET_CONTENT

Permissions

android.permission.INTERNET
android.permission.READ_PHONE_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.REORDER_TASKS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.WRITE_MEDIA_STORAGE
com.google.android.providers.gmail.permission.READ_GMAIL
android.permission.WAKE_LOCK
android.permission.ACCESS_NETWORK_STATE
android.permission.WRITE_USER_DICTIONARY
android.permission.MANAGE_DOCUMENTS
android.permission.VIBRATE
com.android.launcher.permission.INSTALL_SHORTCUT
android.permission.POST_NOTIFICATIONS
android.permission.FOREGROUND_SERVICE

Receivers

com.mobisystems.office.OsBootReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.MY_PACKAGE_REPLACED

com.mobisystems.office.fonts.UserFontScanner$RefreshUserFontsReceiver

com.mobisystems.office.Intent.USER_FONT_SCAN_INTENT

com.mobisystems.office.mobidrive.DeleteNotificationBroadcastReceiver

com.mobisystems.office.mobidrive.NOTIFICATION

com.mobisystems.android.SmsVerificationRetriever

com.google.android.gms.auth.api.phone.SMS_RETRIEVED

com.mobisystems.monetization.subscription.notifications.SubscriptionNotificationDismissedReceiver

com.mobisystems.monetization.subscription.notifications.NOTIFICATION_DELETE

com.mobisystems.connect.client.auth.AccountChangeReceiver

android.accounts.LOGIN_ACCOUNTS_CHANGED

com.facebook.CurrentAccessTokenExpirationBroadcastReceiver

com.facebook.sdk.ACTION_CURRENT_ACCESS_TOKEN_CHANGED

com.facebook.AuthenticationTokenManager$CurrentAuthenticationTokenChangedBroadcastReceiver

com.facebook.sdk.ACTION_CURRENT_AUTHENTICATION_TOKEN_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY
android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW
android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.TIME_SET
android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.work.diagnostics.REQUEST_DIAGNOSTICS

Services

com.mobisystems.connect.client.auth.AccountAuthenticatorService

android.accounts.AccountAuthenticator

Android Permissions

OfficeSuite_v13.5.45375_MOD_mmundoperfecto.net.apk

Permissions

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.REORDER_TASKS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.WRITE_MEDIA_STORAGE

com.google.android.providers.gmail.permission.READ_GMAIL

android.permission.WAKE_LOCK

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_USER_DICTIONARY

android.permission.MANAGE_DOCUMENTS

android.permission.VIBRATE

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.POST_NOTIFICATIONS

android.permission.FOREGROUND_SERVICE

Sharing

General

Malware Config

Signatures

Files

com.mobisystems.office

com.microsoft.identity.client.BrowserTabActivity

Activities

com.microsoft.identity.client.BrowserTabActivity

com.mobisystems.office.files.FileBrowser

com.mobisystems.android.ui.modaltaskservice.FBNotificationActivity

com.mobisystems.web.WebViewActivity

com.mobisystems.web.CustomBrowserActivity

com.mobisystems.office.exceptions.ErrorActivity

com.mobisystems.dropbox.MsDropboxAuthActivity

com.mobisystems.office.EditorLauncher

com.facebook.CustomTabActivity

com.mobisystems.libfilemng.FcOfficeFiles

Permissions

Receivers

com.mobisystems.office.OsBootReceiver

com.mobisystems.office.fonts.UserFontScanner$RefreshUserFontsReceiver

com.mobisystems.office.mobidrive.DeleteNotificationBroadcastReceiver

com.mobisystems.android.SmsVerificationRetriever

com.mobisystems.monetization.subscription.notifications.SubscriptionNotificationDismissedReceiver

com.mobisystems.connect.client.auth.AccountChangeReceiver

com.facebook.CurrentAccessTokenExpirationBroadcastReceiver

com.facebook.AuthenticationTokenManager$CurrentAuthenticationTokenChangedBroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.diagnostics.DiagnosticsReceiver

Services

com.mobisystems.connect.client.auth.AccountAuthenticatorService

Android Permissions

OfficeSuite_v13.5.45375_MOD_mmundoperfecto.net.apk