9519a250adc5a9237759ba61a8dbaa344e2545ca78e7ba32cee9a1bd27bae5f4[.]apk[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

9519a250adc5a9237759ba61a8dbaa344e2545ca78e7ba32cee9a1bd27bae5f4.apk.zip
Size

56.6MB
MD5

3835077252b6467c00bb7f8c9dba2153
SHA1

1d5f7a967959fdc937ef2df7d0832b100e84026c
SHA256

23038bc8ab3245ec9b4fe98c53c834ea19d6328361ba1b651a378c28fc7579fd
SHA512

bbd50ff770d15c54738fb9f23030b90212131f8c158748035249dc54afe6ae8eb23c04270936cc23e13d2df17dc4ccfdcedc7437870fa74bba39621fb5caeedb
SSDEEP

1572864:cHKd8P0VHiRrKnTm1sjxPG7ex0uj41Rbq8ft7Rw:AwrVHQ/1sjxPG7extcXbqeRw

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 6 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an app to access location in the background.	android.permission.ACCESS_BACKGROUND_LOCATION

Files

9519a250adc5a9237759ba61a8dbaa344e2545ca78e7ba32cee9a1bd27bae5f4.apk.zip
.zip

Password: infected
9519a250adc5a9237759ba61a8dbaa344e2545ca78e7ba32cee9a1bd27bae5f4.apk
.apk android arch:arm64 arch:arm arch:x86 arch:x64

com.bercel.sequoiamobileproduction

com.bercel.sequoiamobileproduction.wdgen.GWDPSequoiaProduction$WDLanceur

Activities

com.bercel.sequoiamobileproduction.wdgen.GWDPSequoiaProduction$WDLanceur

android.intent.action.MAIN

fr.pcsoft.wdjava.ui.searchbar.WDSearchActivity

android.intent.action.SEARCH

Permissions

android.permission.WAKE_LOCK
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.CAMERA
android.permission.ACCESS_WIFI_STATE
android.permission.MANAGE_EXTERNAL_STORAGE
android.permission.RECORD_AUDIO
android.permission.ACCESS_FINE_LOCATION
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.CLEAR_APP_USER_DATA
android.permission.WRITE_OWNER_DATA
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.ACCESS_NETWORK_STATE
android.permission.INSTALL_PACKAGES
android.permission.DELETE_CACHE_FILES
android.permission.INTERNET
android.permission.READ_EXTERNAL_STORAGE
android.permission.ACCESS_BACKGROUND_LOCATION
android.permission.MODIFY_PHONE_STATE
android.permission.REQUEST_INSTALL_PACKAGES

Receivers

fr.pcsoft.wdjava.geo.WDGeoTracking$BootReceiver

android.intent.action.BOOT_COMPLETED

Services
PageBaseChampEditeurHtml.htm
.js
WDSaisieAPI.js
.js
WDSaisieAPI_wlexecute.js
.js
WDUtil.js
.js
WWConstante3.js
.js
WWConstante5.js
WWConstante7.js
.js
jquery-3.js
.js
pcs_sans_serif.ttf
pcs_sans_serif_bold.ttf
pcs_sans_serif_bold_italic.ttf
pcs_sans_serif_italic.ttf
static.css

Sharing

General

Malware Config

Signatures

Files

Password: infected

com.bercel.sequoiamobileproduction

com.bercel.sequoiamobileproduction.wdgen.GWDPSequoiaProduction$WDLanceur

Activities

com.bercel.sequoiamobileproduction.wdgen.GWDPSequoiaProduction$WDLanceur

fr.pcsoft.wdjava.ui.searchbar.WDSearchActivity

Permissions

Receivers

fr.pcsoft.wdjava.geo.WDGeoTracking$BootReceiver

Services