General

  • Target

    iPKO_biznes-1.15.9.apk

  • Size

    45.9MB

  • MD5

    7edd73da489713f38cd6adecd21feb89

  • SHA1

    84157eb9f69b5ba30a2a42cddc7c2038a59c4122

  • SHA256

    53fde9e522501fd0bb950e470b491d101ed14abdc6657258b79cea328538340b

  • SHA512

    5391e71f8c73090d723cc499c59acb742f3de65854fcd8a2066362833c65cee688476b6bb218f8d6aabc808a2288169deeb26f43efdfa81673ab04e4b30c0898

  • SSDEEP

    786432:Le7vmrJy4fsM53HoJ2whpfJ21pIrlCWXLYUQOPQa1awaVekGwdZaeN:LeDmFy4fZX2fciXEYPQa1a7ekGw7vN

Score
7/10

Malware Config

Signatures

  • Requests dangerous framework permissions 3 IoCs

Files

  • iPKO_biznes-1.15.9.apk
    .apk android arch:arm64 arch:arm

    pl.pkobp.ipkobiznes

    pl.pkobp.ipkobiznes.splash.activity.SplashActivity


  • DateLocalizationL0.caffemodel
  • DateLocalizationL0.prototxt
  • DateLocalizationL1.caffemodel
  • DateLocalizationL1.prototxt
  • DateRecognition.caffemodel
  • DateRecognition.prototxt
  • NameLocalizationX.caffemodel
  • NameLocalizationX.prototxt
  • NameSpaceCharRecognition.caffemodel
  • NameSpaceCharRecognition.prototxt
  • NumberRecognition.caffemodel
  • NumberRecognition.prototxt
  • OCRAStd.otf
  • PKOBANKPOLSKI-BLACK.OTF
  • PKOBANKPOLSKI-BOLD.OTF
  • PKOBANKPOLSKI-ITALIC.OTF
  • PKOBANKPOLSKI-LIGHT.OTF
  • PKOBANKPOLSKI-REGULAR.OTF
  • baseline.prof
  • baseline.profm
  • cascade_date.xml
    .xml
  • cascade_name.xml
    .xml
  • loc_x.caffemodel
  • loc_x.prototxt
  • loc_y.caffemodel
  • loc_y.prototxt
  • names.txt

Android Permissions

iPKO_biznes-1.15.9.apk

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.WRITE_SETTINGS

android.permission.QUERY_ALL_PACKAGES

android.permission.CAMERA

android.permission.POST_NOTIFICATIONS

android.permission.WAKE_LOCK

com.google.android.c2dm.permission.RECEIVE

android.permission.FLASHLIGHT

android.permission.USE_BIOMETRIC

android.permission.USE_FINGERPRINT

com.google.android.gms.permission.AD_ID

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

pl.pkobp.ipkobiznes.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION