336670e8dfe80292f8c2b994ce926422[.]bin | Triage

Sharing

General

Target

336670e8dfe80292f8c2b994ce926422.bin
Size

20.6MB
MD5

ab6100698dc086538ab248e4aa71af2f
SHA1

93f6e6b66a17cedcec276d9576d25cf2d1d342c2
SHA256

e5d278e3ba72b53c8a7dd84a9bf8fbda05f475d2530e5a1d7e3ae650cb40959e
SHA512

bcad5cf537cb10fbacd5afab77f632931dc98047b0c2e7610a50ac3e48a4b818c5be9a2e9642060b57c7a7e39a388f1e495d7b05a7fd76b5fc9a5a78499dd4bb
SSDEEP

393216:Wr0nH2AoE5aYS643e4BBd82s9HsZbTuJY0ec7LUawt:Wr0Kgalveyd82s9HYyi0ej9t

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 1 IoCs

description	ioc
Required to be able to access the camera device.	android.permission.CAMERA

Files

336670e8dfe80292f8c2b994ce926422.bin
.zip

Password: infected
f948fda777fcc7b3e5d7829e6a50d31b4a81a62f5d2a377ac630d7fabfe3e258.apk
.apk android arch:arm64

org.toshi

com.coinbase.wallet.application.MainActivity

Activities

com.coinbase.wallet.application.MainActivity

android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW

com.coinbase.wallet.consumer.views.UMOActivity

android.intent.action.VIEW

Permissions

android.permission.ACCESS_NETWORK_STATE
android.permission.INTERNET
android.permission.CAMERA
android.permission.USE_BIOMETRIC
android.permission.USE_FINGERPRINT
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
android.permission.WAKE_LOCK
com.google.android.c2dm.permission.RECEIVE
android.permission.ACCESS_WIFI_STATE

Receivers

com.appsflyer.MultipleInstallBroadcastReceiver

com.android.vending.INSTALL_REFERRER

io.branch.referral.InstallListener

com.android.vending.INSTALL_REFERRER

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

com.learnium.RNDeviceInfo.RNDeviceReceiver

com.android.vending.INSTALL_REFERRER

Services

com.coinbase.wallet.application.service.WalletFirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT