Password saver[.]apk | Triage

Sharing

General

Target

Password saver.apk
Size

559KB
MD5

53117c7df7e95d9b551705d8ef483f77
SHA1

c3efc1aec8347e0e11546b442edfddea1aa507ec
SHA256

33bca6cf69cb0fa794c0c141d9146f2af10e24958881f283cea9eeca1dd96bc0
SHA512

978167ba1d9fad34bc09f9f2ba5e1577048babc54e4b6b73ea873179abd3214a77637eab0bdc3da89288a2ba760287fabc9374d44be3beeccabf28c05bca7634
SSDEEP

12288:VPTzDpHlTP5EGZNc5ilEKSFZ1LBmmfqvDWbJEkO8MGPNE0pF:VbzNt5hQfT/1L7CvDENrMyNEOF

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 2 IoCs

description	ioc
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION

Files

Password saver.apk
.apk android

com.ksa.passbook

.activities.Login

Activities

.activities.Login

android.intent.action.MAIN

.activities.NewProfile

android.intent.action.MAIN

.activities.ChangeMail

android.intent.action.MAIN

.activities.ChangePassword

android.intent.action.MAIN

.activities.ListData

android.intent.action.MAIN

.activities.EditCategory

android.intent.action.MAIN

.activities.EditItem

android.intent.action.MAIN

.activities.About

android.intent.action.MAIN

Permissions

android.permission.INTERNET
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION

Receivers

com.admob.android.ads.analytics.InstallReceiver

com.android.vending.INSTALL_REFERRER

Android Permissions

Password saver.apk

Permissions

android.permission.INTERNET

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION