Zenprise for Employees[.]apk

General

Target

Zenprise for Employees.apk
Size

1016KB
MD5

75ea45088de33ac967af537e4bec7174
SHA1

65f0f62ebf082ce1b93051e6bb79b06ea5e3c67d
SHA256

4cc9e60030a75c539ac38ec0061449174324d1b9a94d0786e911571420c62514
SHA512

2bff1afa178adeafc2bee596738d77712483f9ffaf0058701a1f802f019ddf47ae38f149d093c0090026498088cc253bd46a9025fd99971680673e788989cd50
SSDEEP

24576:mgmcGHzpZXZdsgH/CBpXsToXmQ7j6iqNN+wc5oA/JBYtw:ZizpNggHKrXsJQ7j65NA/mw

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 4 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION

Files

Zenprise for Employees.apk
.apk android arch:arm

com.zenprise

.GuiManager

Activities

.GuiManager

android.intent.action.MAIN

.DisplayInfo

android.intent.action.DEFAULT

.Dialogue

android.intent.action.DEFAULT

.DisplayTunnel

android.intent.action.DEFAULT

.Authentication

android.intent.action.DEFAULT

.Welcome

android.intent.action.DEFAULT

Installer

android.intent.action.DEFAULT

Uninstaller

android.intent.action.DEFAULT

.LockWipe$Controller

android.intent.action.DEFAULT

.ewrs.webmodule.rs.ChatActivity

android.intent.action.DEFAULT

.ewrs.webmodule.rs.VoIPActivity

android.intent.action.DEFAULT

.ewrs.webmodule.rs.MessageActivity

android.intent.action.DEFAULT

.ewrs.webmodule.rs.FileInstallActivity

android.intent.action.DEFAULT

.ewrs.webmodule.rs.SyncAnnotationActivity

android.intent.action.DEFAULT

Permissions

android.permission.ACCESS_NETWORK_STATE
android.permission.READ_PHONE_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.WRITE_APN_SETTINGS
android.permission.INTERNET
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.GET_TASKS
android.permission.BATTERY_STATS
android.permission.VIBRATE
android.permission.KILL_BACKGROUND_PROCESSES
android.permission.RECORD_AUDIO
android.permission.ACCESS_FINE_LOCATION
android.permission.INJECT_EVENTS
android.permission.RESTART_PACKAGES

Receivers

.MyStartupIn

android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE
sparus.EveryWAN.WAKEUP
android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REPLACED

.LockWipe

android.app.action.DEVICE_ADMIN_ENABLED

Services

Android Permissions

Zenprise for Employees.apk

Permissions

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.WRITE_APN_SETTINGS

android.permission.INTERNET

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.GET_TASKS

android.permission.BATTERY_STATS

android.permission.VIBRATE

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.RECORD_AUDIO

android.permission.ACCESS_FINE_LOCATION

android.permission.INJECT_EVENTS

android.permission.RESTART_PACKAGES

Sharing

General

Malware Config

Signatures

Files

com.zenprise

.GuiManager

Activities

.GuiManager

.DisplayInfo

.Dialogue

.DisplayTunnel

.Authentication

.Welcome

Installer

Uninstaller

.LockWipe$Controller

.ewrs.webmodule.rs.ChatActivity

.ewrs.webmodule.rs.VoIPActivity

.ewrs.webmodule.rs.MessageActivity

.ewrs.webmodule.rs.FileInstallActivity

.ewrs.webmodule.rs.SyncAnnotationActivity

Permissions

Receivers

.MyStartupIn

.LockWipe

Services

Android Permissions

Zenprise for Employees.apk