Petrobras_Premmia_v3[.]3[.]19_www[.]9apps[.]com_[.]7z

Sharing

Copy URL Twitter E-mail

General

Target

Petrobras_Premmia_v3.3.19_www.9apps.com_.7z
Size

37.2MB
MD5

7dafeb7bcc8c715cacc78401b0dd82d5
SHA1

2973d9559c80e4f952623b7a3d5dd39439059092
SHA256

57541303816885b9f1332a243cd19a7daeecc132edd3c40bda352856b5dd90c3
SHA512

1716fe7253f7c951d79b16bcfa5615b78df345dba6ee558010d7479f67078788a1dd6b964b330d24e8f11d23eab4c895d1b9158cb3ee83fcaddb797aa1721b4f
SSDEEP

786432:MTfejjLbrV1n/YtRG86MNldkQn0FmmzZ3BsMh0kyXDYkHzwYXvSjhswCAatd0FRu:aWjjLbngPf6ud3n0MCRuTYk8YpwCp0fu

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 5 IoCs

description	ioc
Allows an app to access location in the background.	android.permission.ACCESS_BACKGROUND_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE

Files

Petrobras_Premmia_v3.3.19_www.9apps.com_.7z
.7z
Petrobras_Premmia_v3.3.19_www.9apps.com_.apk
.apk android arch:arm64 arch:arm arch:x86 arch:x64

br.com.petrobras.br.ma02

com.zoontek.rnbootsplash.RNBootSplashActivity

Activities

br.com.petrobras.br.ma02.MainActivity

android.intent.action.VIEW

com.zoontek.rnbootsplash.RNBootSplashActivity

android.intent.action.MAIN
android.intent.action.VIEW

Permissions

android.permission.ACCESS_BACKGROUND_LOCATION
android.permission.BLUETOOTH_ADMIN
android.permission.ACCESS_WIFI_STATE
android.permission.FOREGROUND_SERVICE
android.permission.INTERNET
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.WAKE_LOCK
android.permission.VIBRATE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.CAMERA
android.permission.ACCESS_NETWORK_STATE
android.permission.BLUETOOTH
com.android.alarm.permission.SET_ALARM
android.permission.USE_FULL_SCREEN_INTENT
android.permission.SYSTEM_ALERT_WINDOW
android.permission.USE_BIOMETRIC
android.permission.USE_FINGERPRINT
com.android.vending.CHECK_LICENSE
android.permission.WRITE_EXTERNAL_STORAGE
com.google.android.c2dm.permission.RECEIVE
android.permission.POST_NOTIFICATIONS
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
com.sec.android.provider.badge.permission.READ
com.sec.android.provider.badge.permission.WRITE
com.htc.launcher.permission.READ_SETTINGS
com.htc.launcher.permission.UPDATE_SHORTCUT
com.sonyericsson.home.permission.BROADCAST_BADGE
com.sonymobile.home.permission.PROVIDER_INSERT_BADGE
com.anddoes.launcher.permission.UPDATE_COUNT
com.majeur.launcher.permission.UPDATE_BADGE
com.huawei.android.launcher.permission.CHANGE_BADGE
com.huawei.android.launcher.permission.READ_SETTINGS
com.huawei.android.launcher.permission.WRITE_SETTINGS
android.permission.READ_APP_BADGE
com.oppo.launcher.permission.READ_SETTINGS
com.oppo.launcher.permission.WRITE_SETTINGS
me.everything.badger.permission.BADGE_COUNT_READ
me.everything.badger.permission.BADGE_COUNT_WRITE

Receivers

com.andriod.lib.jd.ScanAlarm

com.grouplinknetwork..action.ALARM

com.andriod.lib.receivers.IBeaconReceiver

com.grouplink.ble.ACTION_FOUND2
com.grouplink.ble.ACTION_FOUND

com.andriod.lib.receivers.BluetoothStateReceiver

android.intent.action.ACTION_POWER_CONNECTED
android.bluetooth.adapter.action.STATE_CHANGED
android.location.PROVIDERS_CHANGED

com.andriod.lib.bluetoothConnection.BleConnectionBroadcastReceiver

android.intent.action.ACTION_POWER_CONNECTED
android.bluetooth.adapter.action.STATE_CHANGED
android.location.PROVIDERS_CHANGED

com.andriod.lib.receivers.OnBootReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.QUICKBOOT_POWERON
android.intent.action.LOCKED_BOOT_COMPLETED

no.nordicsemi.android.support.v18.scanner.PendingIntentReceiver

no.nordicsemi.android.support.v18.ACTION_FOUND

io.invertase.firebase.messaging.ReactNativeFirebaseMessagingReceiver

com.google.android.c2dm.intent.RECEIVE

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY
android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW
android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.TIME_SET
android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.work.diagnostics.REQUEST_DIAGNOSTICS

Services

io.invertase.firebase.messaging.ReactNativeFirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

Sharing

General

Malware Config

Signatures

Files

br.com.petrobras.br.ma02

com.zoontek.rnbootsplash.RNBootSplashActivity

Activities

br.com.petrobras.br.ma02.MainActivity

com.zoontek.rnbootsplash.RNBootSplashActivity

Permissions

Receivers

com.andriod.lib.jd.ScanAlarm

com.andriod.lib.receivers.IBeaconReceiver

com.andriod.lib.receivers.BluetoothStateReceiver

com.andriod.lib.bluetoothConnection.BleConnectionBroadcastReceiver

com.andriod.lib.receivers.OnBootReceiver

no.nordicsemi.android.support.v18.scanner.PendingIntentReceiver

io.invertase.firebase.messaging.ReactNativeFirebaseMessagingReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.diagnostics.DiagnosticsReceiver

Services

io.invertase.firebase.messaging.ReactNativeFirebaseMessagingService

com.google.firebase.messaging.FirebaseMessagingService