07380f750df8a55c81d0bf00ddbac687266a653a6e106a86a8230f2c743a2d68[.]apk[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

07380f750df8a55c81d0bf00ddbac687266a653a6e106a86a8230f2c743a2d68.apk.zip
Size

78.2MB
MD5

f360274bf8c0f6ff85b36bc0ff59a15f
SHA1

2866204102430697785cef8cb63efdf7e0c4745f
SHA256

282fdec24a7741ea820bee915defc6c4fcaae8826dfcfe4497b5ba7a9439bbdc
SHA512

be8564f2ffb2050e4cfaca8b836c0063b6f8d9c6e760b88201d5a09910c261e1ea0d73e65dfd08b540a9b4002c14189a441ed4b64edee57e288a12b2c49fea7e
SSDEEP

1572864:IU4B8sRsnR1a97XTFA0d+dx95zNoSx1tQxKFS7MgEH8sYAXnS/n:IFSqPFA0AdpGSx1tQxIS7M3H8tvn

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 6 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an app to access location in the background.	android.permission.ACCESS_BACKGROUND_LOCATION

Files

07380f750df8a55c81d0bf00ddbac687266a653a6e106a86a8230f2c743a2d68.apk.zip
.zip

Password: infected
07380f750df8a55c81d0bf00ddbac687266a653a6e106a86a8230f2c743a2d68.apk
.apk android arch:arm64 arch:arm arch:x86 arch:x64

com.bercel.malvauxwms

com.bercel.malvauxwms.wdgen.GWDPMalvaux_WMS$WDLanceur

Activities

com.bercel.malvauxwms.wdgen.GWDPMalvaux_WMS$WDLanceur

android.intent.action.MAIN

fr.pcsoft.wdjava.ui.searchbar.WDSearchActivity

android.intent.action.SEARCH

Permissions

android.permission.WAKE_LOCK
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.CAMERA
android.permission.ACCESS_WIFI_STATE
android.permission.MANAGE_EXTERNAL_STORAGE
android.permission.RECORD_AUDIO
android.permission.ACCESS_FINE_LOCATION
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.CLEAR_APP_USER_DATA
android.permission.WRITE_OWNER_DATA
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.ACCESS_NETWORK_STATE
android.permission.INSTALL_PACKAGES
android.permission.DELETE_CACHE_FILES
android.permission.INTERNET
android.permission.READ_EXTERNAL_STORAGE
android.permission.ACCESS_BACKGROUND_LOCATION
android.permission.MODIFY_PHONE_STATE
android.permission.REQUEST_INSTALL_PACKAGES

Receivers

fr.pcsoft.wdjava.geo.WDGeoTracking$BootReceiver

android.intent.action.BOOT_COMPLETED

Services
PageBaseChampEditeurHtml.htm
.js
WDSaisieAPI.js
.js
WDSaisieAPI_wlexecute.js
.js
WDUtil.js
.js
WWConstante3.js
.js
WWConstante5.js
WWConstante7.js
.js
jquery-3.js
.js
pcs_sans_serif.ttf
pcs_sans_serif_bold.ttf
pcs_sans_serif_bold_italic.ttf
pcs_sans_serif_italic.ttf
static.css

Sharing

General

Malware Config

Signatures

Files

Password: infected

com.bercel.malvauxwms

com.bercel.malvauxwms.wdgen.GWDPMalvaux_WMS$WDLanceur

Activities

com.bercel.malvauxwms.wdgen.GWDPMalvaux_WMS$WDLanceur

fr.pcsoft.wdjava.ui.searchbar.WDSearchActivity

Permissions

Receivers

fr.pcsoft.wdjava.geo.WDGeoTracking$BootReceiver

Services