fed4640c9fcbac0a01c9ab434d24515fa2860b449680e858cbad5477cef833dc[.]apk[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

fed4640c9fcbac0a01c9ab434d24515fa2860b449680e858cbad5477cef833dc.apk.zip
Size

78.2MB
MD5

1502aadcfe4c6af058fb23c3c3dfc5b5
SHA1

523ed578027465a7badcf02f0e1e9c99f3dafbfd
SHA256

88502f2063283e4d9f599ff10f4591a965baf0bca93af5cafbfcf8eed158d404
SHA512

d60aeb817a21af9bf4fbf199fa07ebdcbfee9d8c8fd92d4f4e254f5cc023ca3b2b204032e6899c369dbb25cd27c3dafb50bb7e23221763dad50982457ff38173
SSDEEP

1572864:vHBSctYq9HY29qg7B6CjdHM3ZTLCu39kag/JRFNG426e:vHYYTV7jpHMpT2u39SRFNk6e

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 6 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an app to access location in the background.	android.permission.ACCESS_BACKGROUND_LOCATION

Files

fed4640c9fcbac0a01c9ab434d24515fa2860b449680e858cbad5477cef833dc.apk.zip
.zip

Password: infected
fed4640c9fcbac0a01c9ab434d24515fa2860b449680e858cbad5477cef833dc.apk
.apk android arch:arm64 arch:arm arch:x86 arch:x64

com.bercel.malvauxwms

com.bercel.malvauxwms.wdgen.GWDPMalvaux_WMS$WDLanceur

Activities

com.bercel.malvauxwms.wdgen.GWDPMalvaux_WMS$WDLanceur

android.intent.action.MAIN

fr.pcsoft.wdjava.ui.searchbar.WDSearchActivity

android.intent.action.SEARCH

Permissions

android.permission.WAKE_LOCK
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.CAMERA
android.permission.ACCESS_WIFI_STATE
android.permission.MANAGE_EXTERNAL_STORAGE
android.permission.RECORD_AUDIO
android.permission.ACCESS_FINE_LOCATION
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.CLEAR_APP_USER_DATA
android.permission.WRITE_OWNER_DATA
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.ACCESS_NETWORK_STATE
android.permission.INSTALL_PACKAGES
android.permission.DELETE_CACHE_FILES
android.permission.INTERNET
android.permission.READ_EXTERNAL_STORAGE
android.permission.ACCESS_BACKGROUND_LOCATION
android.permission.MODIFY_PHONE_STATE
android.permission.REQUEST_INSTALL_PACKAGES

Receivers

fr.pcsoft.wdjava.geo.WDGeoTracking$BootReceiver

android.intent.action.BOOT_COMPLETED

Services
PageBaseChampEditeurHtml.htm
.js
WDSaisieAPI.js
.js
WDSaisieAPI_wlexecute.js
.js
WDUtil.js
.js
WWConstante3.js
.js
WWConstante5.js
WWConstante7.js
.js
jquery-3.js
.js
pcs_sans_serif.ttf
pcs_sans_serif_bold.ttf
pcs_sans_serif_bold_italic.ttf
pcs_sans_serif_italic.ttf
static.css

Sharing

General

Malware Config

Signatures

Files

Password: infected

com.bercel.malvauxwms

com.bercel.malvauxwms.wdgen.GWDPMalvaux_WMS$WDLanceur

Activities

com.bercel.malvauxwms.wdgen.GWDPMalvaux_WMS$WDLanceur

fr.pcsoft.wdjava.ui.searchbar.WDSearchActivity

Permissions

Receivers

fr.pcsoft.wdjava.geo.WDGeoTracking$BootReceiver

Services