f92badbf34379abf8b7f7fe94ebf274a7bef005cc08dca0611d44c4794d5254e[.]apk[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

f92badbf34379abf8b7f7fe94ebf274a7bef005cc08dca0611d44c4794d5254e.apk.zip
Size

78.2MB
MD5

44aa536844b652299a002852268ea7d3
SHA1

1891551426e8f5363b35bd240a2b90657df8b5ff
SHA256

63e6375459b3d9e2b060eace8b84bf4c5390c64b90e0ec2e5627cbd9dc32b412
SHA512

86f7f177b5ca15e33abd380999247357327030024b6aa27b4be8ea467aa884ebce40ffd580bae4a46f6b215b30491e12680cbe72473de0a0b3b5df4c173762a2
SSDEEP

1572864:1PnRY9eudtkImh82tJ9iitK1sRU6Dpy/yGYcHR0W:1vRSeudtkhm+9iiRPD+LYcHn

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 6 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an app to access location in the background.	android.permission.ACCESS_BACKGROUND_LOCATION

Files

f92badbf34379abf8b7f7fe94ebf274a7bef005cc08dca0611d44c4794d5254e.apk.zip
.zip

Password: infected
f92badbf34379abf8b7f7fe94ebf274a7bef005cc08dca0611d44c4794d5254e.apk
.apk android arch:arm64 arch:arm arch:x86 arch:x64

com.bercel.malvauxwms

com.bercel.malvauxwms.wdgen.GWDPMalvaux_WMS$WDLanceur

Activities

com.bercel.malvauxwms.wdgen.GWDPMalvaux_WMS$WDLanceur

android.intent.action.MAIN

fr.pcsoft.wdjava.ui.searchbar.WDSearchActivity

android.intent.action.SEARCH

Permissions

android.permission.WAKE_LOCK
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.CAMERA
android.permission.ACCESS_WIFI_STATE
android.permission.MANAGE_EXTERNAL_STORAGE
android.permission.RECORD_AUDIO
android.permission.ACCESS_FINE_LOCATION
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.CLEAR_APP_USER_DATA
android.permission.WRITE_OWNER_DATA
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.ACCESS_NETWORK_STATE
android.permission.INSTALL_PACKAGES
android.permission.DELETE_CACHE_FILES
android.permission.INTERNET
android.permission.READ_EXTERNAL_STORAGE
android.permission.ACCESS_BACKGROUND_LOCATION
android.permission.MODIFY_PHONE_STATE
android.permission.REQUEST_INSTALL_PACKAGES

Receivers

fr.pcsoft.wdjava.geo.WDGeoTracking$BootReceiver

android.intent.action.BOOT_COMPLETED

Services
PageBaseChampEditeurHtml.htm
.js
WDSaisieAPI.js
.js
WDSaisieAPI_wlexecute.js
.js
WDUtil.js
.js
WWConstante3.js
.js
WWConstante5.js
WWConstante7.js
.js
jquery-3.js
.js
pcs_sans_serif.ttf
pcs_sans_serif_bold.ttf
pcs_sans_serif_bold_italic.ttf
pcs_sans_serif_italic.ttf
static.css

Sharing

General

Malware Config

Signatures

Files

Password: infected

com.bercel.malvauxwms

com.bercel.malvauxwms.wdgen.GWDPMalvaux_WMS$WDLanceur

Activities

com.bercel.malvauxwms.wdgen.GWDPMalvaux_WMS$WDLanceur

fr.pcsoft.wdjava.ui.searchbar.WDSearchActivity

Permissions

Receivers

fr.pcsoft.wdjava.geo.WDGeoTracking$BootReceiver

Services