com[.]co[.]app[.]unica[.]latam[.]7z

Resubmissions

23/08/2023, 06:33

230823-hbalfabg61 7

23/08/2023, 06:32

230823-hapc7sbg6x 7

23/08/2023, 06:29

230823-g9eglsad29 7

Sharing

Copy URL Twitter E-mail

General

Target

com.co.app.unica.latam.7z
Size

33.2MB
MD5

a3ab2c96ff017582273a1475ed1faf82
SHA1

ee17bf01a68e060e6240f7bc45f144b28e90ee1c
SHA256

58f711934eddf6a0e9aa259b31707d09cf4a6f49f366269d8d5f3a146f13011d
SHA512

d49da534b76fc3a8e13a5c0935970ba7644421a3222054c97bed030973027cd4a85d04fb73463b57592d8dc920efbfdb6c5f9f3c16e71785ebd807a6291b492a
SSDEEP

786432:0JCH76n2lINcLTeut18Gvfqb7QD5lbECahcpqY2nMjdDlE3erFw:0W7xlImfeohvf0QPbELS8mdDhw

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 10 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to read image files from external storage.	android.permission.READ_MEDIA_IMAGES
Allows an application to read video files from external storage.	android.permission.READ_MEDIA_VIDEO
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Required to be able to access the camera device.	android.permission.CAMERA

Files

com.co.app.unica.latam.7z
.7z

Password: infected
com.co.app.unica.latam.apk
.apk android

Password: infected

com.co.app.unica.latam

com.itau.latam.ReactActivity

Activities

com.itau.latam.feature.bind.id.BindId

com.itau.latam.bind.id

com.itau.latam.ReactActivity

android.intent.action.MAIN
android.intent.action.VIEW

com.itau.latam.feature.login.LoginActivity

com.co.app.unica.latam.LOGIN

com.itau.latam.feature.internet.InternetActivity

com.co.app.unica.latam.INTERNET

com.itau.latam.feature.session.SessionActivity

com.co.app.unica.latam.SESSION_ACTIVE

com.itau.latam.feature.localstorage.LocalStorageActivity

com.co.app.unica.latam.STORAGE

com.itau.latam.feature.localstorage.SettingActivity

com.co.app.unica.latam.SETTING_APP

com.itau.latam.feature.qr.qrscanner.QRScanner

com.co.app.unica.latam.QR_READER

com.itau.latam.feature.header.HeaderActivity

com.co.app.unica.latam.HEADER

com.itau.latam.feature.terms.TermsActivity

com.co.app.unica.latam.TERMS

com.itau.latam.feature.itau.ItauWebActivity

com.co.app.unica.latam.WEBVIEWITAU

com.itau.latam.feature.main.MainActivity

com.co.app.unica.latam.MAIN

com.itau.latam.feature.nocontact.NoContactActivity

com.co.app.unica.latam.NO_CONTACT

com.itau.latam.feature.inactive.InactiveActivity

com.co.app.unica.latam.INACTIVE

com.itau.latam.feature.card.WithoutCardActivity

com.co.app.unica.latam.WITHOUT_CARD

com.itau.latam.feature.timeOut.TimeOutActivity

com.co.app.unica.latam.TIME_OUT

com.itau.latam.feature.maintenance.MaintenanceActivity

com.co.app.unica.latam.MAINTENANCE

com.itau.latam.feature.login.UserBlockedActivity

com.co.app.unica.latam.BLOCKED

com.google.androidbrowserhelper.trusted.LauncherActivity

android.intent.action.VIEW

com.itau.latam.feature.webview.WebViewActivity

com.co.app.unica.latam.WEBVIEW

Permissions

android.permission.INTERNET
android.permission.SYSTEM_ALERT_WINDOW
android.permission.READ_PHONE_STATE
android.permission.READ_CONTACTS
android.permission.WRITE_CONTACTS
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_WIFI_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_FINE_LOCATION
android.permission.READ_MEDIA_IMAGES
android.permission.READ_MEDIA_VIDEO
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.HIGH_SAMPLING_RATE_SENSORS
android.permission.CAMERA
android.permission.RECEIVE_BOOT_COMPLETED
br.com.itau.security.WDID
android.permission.FLASHLIGHT
android.hardware.camera.autofocus
android.permission.READ_LOGS
android.permission.RECORD_VIDEO
android.permission.BATTERY_STATS
android.permission.WAKE_LOCK
android.permission.FOREGROUND_SERVICE
android.permission.USE_FINGERPRINT
com.samsung.android.providers.context.permission.WRITE_USE_APP_FEATURE_SURVEY
android.permission.CHANGE_NETWORK_STATE
android.permission.CHANGE_WIFI_STATE

Receivers

br.com.itau.security.did.WeakDIDReceiver

br.com.itau.security.did.REQUEST_ID

br.com.itau.security.saph.receiver.Receiver

android.provider.Telephony.SMS_RECEIVED

o.FullLifecycleObserverAdapter$access$getPromises$p

android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED

o.FullLifecycleObserverAdapter$backDocumentScan$lambda-1

android.intent.action.BATTERY_OKAY
android.intent.action.BATTERY_LOW

o.FullLifecycleObserverAdapter$fingerPrint$lambda-4

android.intent.action.DEVICE_STORAGE_LOW
android.intent.action.DEVICE_STORAGE_OK

o.FullLifecycleObserverAdapter$BytteBridge

android.net.conn.CONNECTIVITY_CHANGE

o.CompositeGeneratedAdaptersObserver

android.intent.action.BOOT_COMPLETED
android.intent.action.TIME_SET
android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.work.diagnostics.REQUEST_DIAGNOSTICS

com.adjust.sdk.AdjustReferrerReceiver

com.android.vending.INSTALL_REFERRER

Services
0cdeec1bd494aa1cb3f4b6b7424b14c7597ff4cc8bf93c70317d31ce9ac1e521
1511_com.co.app.unica.latam2022-03-25 00_00_00.lic
16df42540f72def22995aed115516ca10e42dae001c319a4057a1d1fb93f7563
28faa99b2772329bc4d40843c9952762fd766b03aeb1df4d4942ade1cc80832f
4e29beb3b1822533fa22a2be7bfb9586ecb3d1aa0790f8f72afbda7e18216d32
51ee83ba55dbd0bcd3234b86fbc329d2f82df512fd75dcf9ff10aa8ee7842391
71ca7eb8c368a410b0d290687716b90a3b5b1365740d5473c7d29fd18af5fce6
99b2772329bc4d40843c9952762fd766b03aeb1df4d4942ade1cc80832f
ArialMT.ttf
ItauText_A_Bd.ttf
ItauText_A_Lt.ttf
ItauText_A_Rg.ttf
ItauText_A_XBd.ttf
Itau_Text_App_Light_Material_Pf.ttf
Itau_Text_App_Regular.ttf
Itau_Text_App_Regular_Material_Pf.ttf
Model_1118d9d674e23996f70c6416b2bf5a6ce6ef24a6ad2c92f0ddd1e198e5f05305.rtttl
Model_2880751121560047e6dc571bc8ff4683aeb863886f7c0789234594ceb1e23577.rtttl
Model_349432d66ef2b216155673b634f7d5c47795bed35719b954f726b5f0856740f3.rtttl
Model_36d8e94f4cb46097bd6b7385f2aa91fcdee1a5fefeec59e56d1b9e82c94b00a7.rtttl
Model_3e80772d11f448d75ee36985f5520d306a18b43c76e173096ddb44d3196d0e05.rtttl
Model_406f8d5d972cf76a9241b35abbe5758890353b9b7daa922f732c4151ff6a0d9c.rtttl
Model_473ac5f5e256623c0a6b282698c1f1b033b9fb5359e6aa142e9fb4a4022afe4e.rtttl
Model_67100bc24967ea3e516430d3fccf4dea0000eac479bf1d77a908c00d1a2b63a9.rtttl
Model_76731e0beb8c4be154467d2248a49530571c5b73a2eaef987361f75d578f576f.rtttl
Model_830c13896f96c1cb6d5cad725f44e6aae470f8672d640d20b3272ed4bb839699.rtttl
Model_8322bc53f683fdb17f42124244cf6469a82e1c00ec8c43c5d7939ae25ee8c006.rtttl
Model_840bd7ad76dab96d6ebae4afab54c9608ffe35d9f35a92e46a45924d04fee981.rtttl
Model_a5858807e9d6b351bdbe37cbb4f373b6b9dca41776e0f60a8457be92550632ed.rtttl
Model_b452fd3cd4037080cfcb4c423dba5bc58c8ceafc28427fdf9c5778fb353f088e.rtttl
Model_b9263312a9b623d1a3b75b643ccdcbc36aae52c278d721443468147c50e44583.rtttl
Model_cc1fab8df49d9a21de6c7b76ccf0dac40b17fcfb7073cc520eca073cbf8e33e9.rtttl
Model_d647a73c5ff6581d591761cdfe03eff14a830e302c92782c1d683291bea047d6.rtttl
Model_dac6fc7b40d6510f2b05716c9e63847e67e79e6664192eed937aed343c61403e.rtttl
Model_e4f1f62f68ec44b71ecad3fb3f3b48fe3790beb5ab325611e17d63af06e9f644.rtttl
Model_f132d1bd7614b1274fafb8a41ec6c047b84b2a43654ae2da5ddd78a2765601c6.rtttl
Model_faf688599c7e261a2a7404730f69ed029115bb0d3e7a3657731d88e701720efe.rtttl
Roboto-Bold.ttf
Roboto-Medium.ttf
b7ef38800be6798ba80cc28c54ffdd592bae199367f1000e0c2b2bb84c2256f1
b8ccad7247184a28cddc28cfc769315c895e00730.png
b8ccad7247184a28cddc28cfc769315c895e00730e28fbe2f7d415a21e046d81
card_templates.zzip
ccc_lookup_table.zzip
cro_address_dictionary.zzip
cro_authority_dictionary.zzip
cro_id_confusions.zzip
cro_name_dictionary.zzip
cwsq
.elf linux arm
de_address_dictionary.zzip
de_confusions.zzip
de_id_confusions.zzip
de_name_dictionary.zzip
de_surname_dictionary.zzip
device_list.json
device_list_mb.json
eb8fc39f38cf55748fd8fa7372b69631c8c866b5e03305ec6bff0c6c6f3698b3
face_detector_model.zzip
images_bg_dem_loging.webp
images_logoitau.webp
index.android.bundle
.js
indonesia_confusions.zzip
indonesia_occupation_dictionary.zzip
indonesia_province_dictionary.zzip
itau_text_bd.ttf
itau_text_rg.ttf
itaufonts_master_24px_v1.ttf
jpegtran
.elf linux arm
malaysian_confusions.zzip
malaysian_state_dictionary.zzip
mob.ilic
mob.ilic401
model_arabic.zzip
model_eudl.zzip
model_general_blink_ocr.zzip
model_malaysian.zzip
model_micr.zzip
model_mrtd.zzip
morocco_id_confusions.zzip
morocco_places_dictionary.zzip
node_modules_reactnavigationstack_lib_module_views_assets_backicon.png
.png
node_modules_reactnavigationstack_lib_module_views_assets_backiconmask.png
.png
payment_card_confusions.zzip
payment_card_dictionary.zzip
public.der
roboto_bold.ttf
roboto_light.ttf
roboto_medium.ttf
roboto_regular.ttf
sdk_template.pub
uae_confusions.zzip
uae_name_dictionary.zzip
uae_nationality_dictionary.zzip

Resubmissions

Sharing

General

Malware Config

Signatures

Files

Password: infected

Password: infected

com.co.app.unica.latam

com.itau.latam.ReactActivity

Activities

com.itau.latam.feature.bind.id.BindId

com.itau.latam.ReactActivity

com.itau.latam.feature.login.LoginActivity

com.itau.latam.feature.internet.InternetActivity

com.itau.latam.feature.session.SessionActivity

com.itau.latam.feature.localstorage.LocalStorageActivity

com.itau.latam.feature.localstorage.SettingActivity

com.itau.latam.feature.qr.qrscanner.QRScanner

com.itau.latam.feature.header.HeaderActivity

com.itau.latam.feature.terms.TermsActivity

com.itau.latam.feature.itau.ItauWebActivity

com.itau.latam.feature.main.MainActivity

com.itau.latam.feature.nocontact.NoContactActivity

com.itau.latam.feature.inactive.InactiveActivity

com.itau.latam.feature.card.WithoutCardActivity

com.itau.latam.feature.timeOut.TimeOutActivity

com.itau.latam.feature.maintenance.MaintenanceActivity

com.itau.latam.feature.login.UserBlockedActivity

com.google.androidbrowserhelper.trusted.LauncherActivity

com.itau.latam.feature.webview.WebViewActivity

Permissions

Receivers

br.com.itau.security.did.WeakDIDReceiver

br.com.itau.security.saph.receiver.Receiver

o.FullLifecycleObserverAdapter$access$getPromises$p

o.FullLifecycleObserverAdapter$backDocumentScan$lambda-1

o.FullLifecycleObserverAdapter$fingerPrint$lambda-4

o.FullLifecycleObserverAdapter$BytteBridge

o.CompositeGeneratedAdaptersObserver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.diagnostics.DiagnosticsReceiver

com.adjust.sdk.AdjustReferrerReceiver

Services