8764bc4e837d06366bbdb2e888e52f5c27bd6d9014499034c744def4febcc1c6[.]apk[.]zip

Sharing

Copy URL

Twitter E-mail

General

Target

8764bc4e837d06366bbdb2e888e52f5c27bd6d9014499034c744def4febcc1c6.apk.zip
Size

21.3MB
MD5

bb19f0f3d2440faea31e49ba648c6e07
SHA1

90ee79facecf766007d58a8893bab12b182d4d42
SHA256

1f49a949057ed10a2068372dac3861642521ebf4595bac6ff72942907f3babf9
SHA512

7bf5a45c0fb2feb5508785e14c2aee7a96592efc72c321cf9b791139469e37d237a9418a9b153e3d1e4cc57a453a2375ced20d13e89f45cf8778b3f5303147cf
SSDEEP

393216:GSwhEZcz8lSaOTlvtFKakQJpBkeNE6YvlzQhqsHXWDQJuZehHYnFoEEOYh3nTo:GMZcglSf1tFK3QDSeNE6Y929HXWEJusI

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 5 IoCs

description	ioc
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Required to be able to access the camera device.	android.permission.CAMERA

Files

8764bc4e837d06366bbdb2e888e52f5c27bd6d9014499034c744def4febcc1c6.apk.zip
.zip

Password: infected
8764bc4e837d06366bbdb2e888e52f5c27bd6d9014499034c744def4febcc1c6.apk
.apk android arch:arm64 arch:arm arch:mips arch:x86 arch:x64

cm.aptoide.pt

cm.aptoide.pt.view.entry.EntryActivity

Activities

cm.aptoide.pt.view.entry.EntryActivity

android.intent.action.MAIN

cm.aptoide.pt.billing.view.BillingActivity

android.intent.action.VIEW

cm.aptoide.pt.DeepLinkIntentReceiver

android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW

com.adyen.ui.activities.RedirectHandlerActivity

android.intent.action.VIEW

Permissions

android.permission.WAKE_LOCK
android.permission.READ_SYNC_STATS
com.android.launcher.permission.INSTALL_SHORTCUT
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.INSTALL_PACKAGES
android.permission.CHANGE_WIFI_MULTICAST_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.READ_SYNC_SETTINGS
android.permission.WRITE_SYNC_SETTINGS
android.permission.READ_CONTACTS
android.permission.AUTHENTICATE_ACCOUNTS
android.permission.GET_ACCOUNTS
android.permission.MANAGE_ACCOUNTS
android.permission.INTERNET
android.permission.USE_CREDENTIALS
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.CAMERA
android.permission.ACCESS_NETWORK_STATE
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

Receivers

cm.aptoide.pt.install.InstalledBroadcastReceiver

android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED
android.intent.action.PACKAGE_REPLACED

cm.aptoide.pt.notification.NotificationReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.QUICKBOOT_POWERON

cm.aptoide.pt.install.CheckRootOnBoot

android.intent.action.BOOT_COMPLETED
android.intent.action.REBOOT
android.intent.action.QUICKBOOT_POWERON

cm.aptoide.pt.widget.SearchWidgetProvider

android.appwidget.action.APPWIDGET_UPDATE
android.appwidget.action.ACTION_WIDGET_RECEIVER

com.startapp.android.publish.common.metaData.BootCompleteListener

android.intent.action.BOOT_COMPLETED

com.adyen.ui.RedirectionHandlerReceiver

adyen.core.utils.DISABLE_REDIRECTION_HANDLER

com.vungle.warren.NetworkStateReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.appnext.base.receivers.AppnextBootReciever

android.intent.action.BOOT_COMPLETED

Services

cm.aptoide.pt.account.AccountAuthenticatorService

android.accounts.AccountAuthenticator

cm.aptoide.pt.iab.InAppBillingService

cm.aptoide.pt.iab.action.BIND
crashlytics-build.properties
filedownloader.properties
logo.svg
logo_vert.svg
master.css
uk.png
.jpg

Sharing

General

Malware Config

Signatures

Files

Password: infected

cm.aptoide.pt

cm.aptoide.pt.view.entry.EntryActivity

Activities

cm.aptoide.pt.view.entry.EntryActivity

cm.aptoide.pt.billing.view.BillingActivity

cm.aptoide.pt.DeepLinkIntentReceiver

com.adyen.ui.activities.RedirectHandlerActivity

Permissions

Receivers

cm.aptoide.pt.install.InstalledBroadcastReceiver

cm.aptoide.pt.notification.NotificationReceiver

cm.aptoide.pt.install.CheckRootOnBoot

cm.aptoide.pt.widget.SearchWidgetProvider

com.startapp.android.publish.common.metaData.BootCompleteListener

com.adyen.ui.RedirectionHandlerReceiver

com.vungle.warren.NetworkStateReceiver

com.appnext.base.receivers.AppnextBootReciever

Services

cm.aptoide.pt.account.AccountAuthenticatorService

cm.aptoide.pt.iab.InAppBillingService