Authenticatorbaseapk[.]apk

Sharing

Copy URL Twitter E-mail

General

Target

Authenticatorbaseapk.apk
Size

84.2MB
MD5

e1c900a1bafa5330f21c411bba74e59d
SHA1

ff16e0372c8a8a43b8d7899537832edd6a97f441
SHA256

f07fc0abc11e19ab458b950da4f0f16f3f681e0f1c919f6527f1708549346fd9
SHA512

35ee5f6f915f756ef5227faaf4336b13ec09b002c3623eb321027503094eae8c4dcc33d87cb1dfe807bff9cac5b285ff8517f1d3180d88691902f7dbb1eba0f1
SSDEEP

1572864:gK5505AxTQT1TGZKN2nD4AgiFsPeT567v:tyOxo9GUN2nkAgZPe6

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 7 IoCs

description	ioc
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access location in the background.	android.permission.ACCESS_BACKGROUND_LOCATION
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS

Files

Authenticatorbaseapk.apk
.apk android arch:arm64

com.azure.authenticator

com.azure.authenticator.ui.LaunchActivity

Activities

com.azure.authenticator.ui.LaunchActivity

android.intent.action.MAIN
android.intent.action.VIEW
android.intent.action.SEND

com.azure.authenticator.ui.MainActivity

android.intent.action.VIEW
android.intent.action.VIEW

com.microsoft.workaccount.workplacejoin.core.InstallCertDeepLinkActivity

android.intent.action.VIEW

com.microsoft.identity.client.BrokerBrowserRedirectActivity

android.intent.action.VIEW
android.intent.action.VIEW

net.openid.appauth.RedirectUriReceiverActivity

android.intent.action.VIEW

com.microsoft.onlineid.ui.AddAccountActivity

com.microsoft.onlineid.internal.ADD_ACCOUNT
com.microsoft.onlineid.internal.SIGN_UP_ACCOUNT

com.microsoft.onlineid.internal.ui.AccountPickerActivity

com.microsoft.onlineid.internal.PICK_ACCOUNT

Permissions

android.permission.SYSTEM_ALERT_WINDOW
android.permission.CAMERA
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.VIBRATE
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_BACKGROUND_LOCATION
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.WAKE_LOCK
android.permission.GET_ACCOUNTS
com.azure.authenticator.knox.SUPPORT_PERMISSION
android.permission.USE_FINGERPRINT
android.permission.USE_BIOMETRIC
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
android.permission.AUTHENTICATE_ACCOUNTS
android.permission.USE_CREDENTIALS
android.permission.MANAGE_ACCOUNTS
android.permission.KILL_BACKGROUND_PROCESSES
com.samsung.android.knox.permission.KNOX_ENTERPRISE_DEVICE_ADMIN
com.samsung.android.knox.permission.KNOX_CERTIFICATE
com.samsung.android.knox.permission.KNOX_SECURITY
com.samsung.android.knox.permission.KNOX_CERT_PROVISIONING
android.permission.sec.ENTERPRISE_DEVICE_ADMIN
android.permission.sec.MDM_SECURITY
android.permission.sec.MDM_CERTIFICATE
com.google.android.c2dm.permission.RECEIVE
android.permission.FOREGROUND_SERVICE
android.permission.NFC

Receivers

com.azure.authenticator.BootReceiver

android.intent.action.BOOT_COMPLETED

com.azure.authenticator.logging.LoggingReceiver

com.microsoft.SEND_DIAGNOSTICS

com.azure.authenticator.OnAppUpgradeReceiver

android.intent.action.MY_PACKAGE_REPLACED

com.samsung.android.knox.IntentConverterReceiver

edm.intent.action.license.status

com.microsoft.workaccount.workplacejoin.core.WPJAdminReceiver

android.app.action.DEVICE_ADMIN_ENABLED
android.app.action.DEVICE_ADMIN_DISABLED
android.app.action.DEVICE_ADMIN_DISABLE_REQUESTED

com.microsoft.workaccount.workplacejoin.core.OnUpgradeReceiver

android.intent.action.MY_PACKAGE_REPLACED

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY
android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW
android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.TIME_SET
android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.work.diagnostics.REQUEST_DIAGNOSTICS

androidx.profileinstaller.ProfileInstallReceiver

androidx.profileinstaller.action.INSTALL_PROFILE
androidx.profileinstaller.action.SKIP_FILE

Services

com.microsoft.authenticator.notifications.controller.FcmListenerService

com.google.firebase.MESSAGING_EVENT

com.microsoft.brooklyn.module.autofill.BrooklynAutofillService

android.service.autofill.AutofillService

com.microsoft.brooklyn.module.accessibility.BrooklynAccessibilityService

android.accessibilityservice.AccessibilityService

com.microsoft.workaccount.authenticatorservice.AuthenticatorService

android.accounts.AccountAuthenticator

com.microsoft.aad.adal.BrokerAccountService

com.microsoft.workaccount.BrokerAccount

com.microsoft.identity.client.MicrosoftAuthService

com.microsoft.identity.client.MicrosoftAuth

com.microsoft.workaccount.workplacejoin.WPJService

com.microsoft.workaccount.workplacejoin.WPJService

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

com.microsoft.onlineid.internal.sso.client.BackupService

com.microsoft.onlineid.internal.sso.client.PUSH_BACKUP
com.microsoft.onlineid.internal.sso.client.PUSH_BACKUP_IF_NEEDED

com.microsoft.onlineid.internal.MsaService

com.microsoft.onlineid.internal.GET_TICKET
com.microsoft.onlineid.internal.GET_USER_KEY
com.microsoft.onlineid.internal.UPDATE_PROFILE
com.microsoft.onlineid.internal.SIGN_OUT
com.microsoft.onlineid.internal.SIGN_OUT_ALL_APPS

com.microsoft.onlineid.internal.sso.service.MsaSsoService

com.microsoft.msa.action.SSO_SERVICE

com.microsoft.tokenshare.TokenSharingService

com.microsoft.tokenshare.TokenSharingService
AuthenticatorLoadAnim.json
TZDB.dat
baseline.prof
baseline.profm
difwordlist.txt
.vbs
icomoon.ttf
index.android.bundle
.js
ppcrlconfig600-int.timestamp
ppcrlconfig600-int.xml
.xml
ppcrlconfig600-production.timestamp
ppcrlconfig600-production.xml
.xml
proguard-project.txt
thirdpartynotices.txt
ts_configuration.jwt

Android Permissions

Authenticatorbaseapk.apk

Permissions

android.permission.SYSTEM_ALERT_WINDOW

android.permission.CAMERA

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.VIBRATE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_BACKGROUND_LOCATION

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WAKE_LOCK

android.permission.GET_ACCOUNTS

com.azure.authenticator.knox.SUPPORT_PERMISSION

android.permission.USE_FINGERPRINT

android.permission.USE_BIOMETRIC

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.AUTHENTICATE_ACCOUNTS

android.permission.USE_CREDENTIALS

android.permission.MANAGE_ACCOUNTS

android.permission.KILL_BACKGROUND_PROCESSES

com.samsung.android.knox.permission.KNOX_ENTERPRISE_DEVICE_ADMIN

com.samsung.android.knox.permission.KNOX_CERTIFICATE

com.samsung.android.knox.permission.KNOX_SECURITY

com.samsung.android.knox.permission.KNOX_CERT_PROVISIONING

android.permission.sec.ENTERPRISE_DEVICE_ADMIN

android.permission.sec.MDM_SECURITY

android.permission.sec.MDM_CERTIFICATE

com.google.android.c2dm.permission.RECEIVE

android.permission.FOREGROUND_SERVICE

android.permission.NFC

Sharing

General

Malware Config

Signatures

Files

com.azure.authenticator

com.azure.authenticator.ui.LaunchActivity

Activities

com.azure.authenticator.ui.LaunchActivity

com.azure.authenticator.ui.MainActivity

com.microsoft.workaccount.workplacejoin.core.InstallCertDeepLinkActivity

com.microsoft.identity.client.BrokerBrowserRedirectActivity

net.openid.appauth.RedirectUriReceiverActivity

com.microsoft.onlineid.ui.AddAccountActivity

com.microsoft.onlineid.internal.ui.AccountPickerActivity

Permissions

Receivers

com.azure.authenticator.BootReceiver

com.azure.authenticator.logging.LoggingReceiver

com.azure.authenticator.OnAppUpgradeReceiver

com.samsung.android.knox.IntentConverterReceiver

com.microsoft.workaccount.workplacejoin.core.WPJAdminReceiver

com.microsoft.workaccount.workplacejoin.core.OnUpgradeReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.profileinstaller.ProfileInstallReceiver

Services

com.microsoft.authenticator.notifications.controller.FcmListenerService

com.microsoft.brooklyn.module.autofill.BrooklynAutofillService

com.microsoft.brooklyn.module.accessibility.BrooklynAccessibilityService

com.microsoft.workaccount.authenticatorservice.AuthenticatorService

com.microsoft.aad.adal.BrokerAccountService

com.microsoft.identity.client.MicrosoftAuthService

com.microsoft.workaccount.workplacejoin.WPJService

com.google.firebase.messaging.FirebaseMessagingService

com.microsoft.onlineid.internal.sso.client.BackupService

com.microsoft.onlineid.internal.MsaService

com.microsoft.onlineid.internal.sso.service.MsaSsoService

com.microsoft.tokenshare.TokenSharingService

Android Permissions

Authenticatorbaseapk.apk