7c256794dcb4f633c7cbb68d44ea05c1[.]bin | Triage

Sharing

General

Target

7c256794dcb4f633c7cbb68d44ea05c1.bin
Size

7.4MB
MD5

ad48037809c1be7ed702a131a020cab0
SHA1

4ef6e2ee9c02e99dfb576d75cd89e489cab699fb
SHA256

b5461ae4e20a3364d92a94ec9a204aae5829bea14af05e6cb019cbaf0d1d8181
SHA512

e8fb9269c6469b5f215b146e159c66c7c2621feb8019faae733b7ad4038dff7d290b27b39bdf3d3e706a689811d1f0f552d113f1795572c572ab6001c69411de
SSDEEP

196608:1ay4xeuzvRtAByuUHG7IkyEV+Ag8tnCDDnbZO1mpI+X1:4NeuzvRtAYuUHG7I4y8tynbo1oIs1

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 2 IoCs

description	ioc
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION

Files

7c256794dcb4f633c7cbb68d44ea05c1.bin
.zip

Password: infected
87250f4914a1eec6f88cae8759bdfa0d9b4760332292f180382652351197c80f.apk
.apk android

br.com.pareazul.android

br.com.pareazul.android.screens.startscreen.StartActivity

Activities

br.com.pareazul.android.activity.chat.ChatDetalheActivity

OPEN_CHAT

br.com.pareazul.android.screens.startscreen.StartActivity

android.intent.action.MAIN
android.intent.action.VIEW

Permissions

android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_COARSE_LOCATION
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.ACCESS_WIFI_STATE
android.permission.WAKE_LOCK
com.google.android.c2dm.permission.RECEIVE
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

Receivers

br.com.pareazul.android.core.BootCompletedReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.REBOOT
android.intent.action.QUICKBOOT_POWERON

br.com.pareazul.android.core.TimeChangedReceiver

android.intent.action.TIMEZONE_CHANGED
android.intent.action.TIME_SET
android.intent.action.DATE_CHANGED
android.intent.action.TIME_CHANGED

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

Services

br.com.pareazul.android.service.PareAzulFirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT