c5ded3bfbd312f289a30ab200368c9b8295fb3a0a9857ebc4aa584cf5f076625[.]apk[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

c5ded3bfbd312f289a30ab200368c9b8295fb3a0a9857ebc4aa584cf5f076625.apk.zip
Size

34.3MB
MD5

35a70ec8e8534e2fb3a805ded7e79ec6
SHA1

5560ce010ec6871798133dea7796fe65f003a44e
SHA256

193f64a393ed92843a807cfc4b6199ee44a3dd8f335fd95ca7c69e5fdb22ef6d
SHA512

8019ee49b9e3ab2814c7d174814d5d333a5fe717d2798088939437ff956c81c6a0ea0fbb87cf888c2424ad3d61facdc760cb3b80f8a422b69cc897e177a7ea91
SSDEEP

786432:2STKXUbBPbnzRo/nLEP/o6k5HMjM3Y44/ozjJaEAT9f:12UVTzRo/nLA/o8pGzjMpf

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 8 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to read the user's calendar data.	android.permission.READ_CALENDAR
Allows an application to write the user's calendar data.	android.permission.WRITE_CALENDAR
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE

Files

c5ded3bfbd312f289a30ab200368c9b8295fb3a0a9857ebc4aa584cf5f076625.apk.zip
.zip

Password: infected
c5ded3bfbd312f289a30ab200368c9b8295fb3a0a9857ebc4aa584cf5f076625.apk
.apk android arch:arm64 arch:arm arch:x86 arch:x64

com.gmail.barisuzunca.ecommercewebsitewrappercopy

host.exp.exponent.MainActivity

Activities

host.exp.exponent.MainActivity

android.intent.action.VIEW
android.intent.action.MAIN

host.exp.exponent.experience.TvActivity

android.intent.action.MAIN

net.openid.appauth.RedirectUriReceiverActivity

android.intent.action.VIEW

expo.modules.payments.stripe.RedirectUriReceiver

android.intent.action.VIEW

abi36_0_0.expo.modules.payments.stripe.RedirectUriReceiver

android.intent.action.VIEW

abi35_0_0.expo.modules.payments.stripe.RedirectUriReceiver

android.intent.action.VIEW

abi34_0_0.expo.modules.payments.stripe.RedirectUriReceiver

android.intent.action.VIEW

abi33_0_0.expo.modules.payments.stripe.RedirectUriReceiver

android.intent.action.VIEW

Permissions

com.gmail.barisuzunca.ecommercewebsitewrappercopy.permission.C2D_MESSAGE
com.google.android.c2dm.permission.RECEIVE
android.permission.ACCESS_NETWORK_STATE
android.permission.INTERNET
android.permission.SYSTEM_ALERT_WINDOW
android.permission.WAKE_LOCK
android.permission.MANAGE_DOCUMENTS
android.permission.READ_INTERNAL_STORAGE
android.permission.READ_PHONE_STATE
android.permission.USE_FINGERPRINT
android.permission.VIBRATE
com.android.launcher.permission.INSTALL_SHORTCUT
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.CAMERA
android.permission.READ_CONTACTS
android.permission.READ_CALENDAR
android.permission.WRITE_CALENDAR
android.permission.READ_EXTERNAL_STORAGE
android.permission.RECORD_AUDIO
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.WRITE_SETTINGS
android.permission.BLUETOOTH
android.permission.BLUETOOTH_ADMIN
host.exp.exponent.permission.C2D_MESSAGE
android.permission.ACCESS_WIFI_STATE
com.android.vending.CHECK_LICENSE
android.permission.STORAGE
android.permission.FOREGROUND_SERVICE
android.permission.RECEIVE_BOOT_COMPLETED
com.sec.android.provider.badge.permission.READ
com.sec.android.provider.badge.permission.WRITE
com.htc.launcher.permission.READ_SETTINGS
com.htc.launcher.permission.UPDATE_SHORTCUT
com.sonyericsson.home.permission.BROADCAST_BADGE
com.sonymobile.home.permission.PROVIDER_INSERT_BADGE
com.anddoes.launcher.permission.UPDATE_COUNT
com.majeur.launcher.permission.UPDATE_BADGE
com.huawei.android.launcher.permission.CHANGE_BADGE
com.huawei.android.launcher.permission.READ_SETTINGS
com.huawei.android.launcher.permission.WRITE_SETTINGS
android.permission.READ_APP_BADGE
com.oppo.launcher.permission.READ_SETTINGS
com.oppo.launcher.permission.WRITE_SETTINGS
me.everything.badger.permission.BADGE_COUNT_READ
me.everything.badger.permission.BADGE_COUNT_WRITE
com.google.android.providers.gsf.permission.READ_GSERVICES
com.google.android.gms.permission.ACTIVITY_RECOGNITION
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

Receivers

host.exp.exponent.referrer.InstallReferrerReceiver

com.android.vending.INSTALL_REFERRER

com.google.android.gms.analytics.AnalyticsReceiver

com.google.android.gms.analytics.ANALYTICS_DISPATCH

com.google.android.gms.gcm.GcmReceiver

com.google.android.c2dm.intent.RECEIVE
com.google.android.c2dm.intent.REGISTRATION

host.exp.exponent.notifications.receivers.SchedulingTriggerReceiver

android.intent.action.REBOOT
android.intent.action.BOOT_COMPLETED
android.intent.action.TIMEZONE_CHANGED
android.intent.action.TIME_CHANGED
android.intent.action.QUICKBOOT_POWERON

com.learnium.RNDeviceInfo.RNDeviceReceiver

com.android.vending.INSTALL_REFERRER

com.onesignal.GcmBroadcastReceiver

com.google.android.c2dm.intent.RECEIVE

com.onesignal.BootUpReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.QUICKBOOT_POWERON

com.onesignal.UpgradeReceiver

android.intent.action.MY_PACKAGE_REPLACED

com.facebook.CurrentAccessTokenExpirationBroadcastReceiver

com.facebook.sdk.ACTION_CURRENT_ACCESS_TOKEN_CHANGED

com.facebook.CampaignTrackingReceiver

com.android.vending.INSTALL_REFERRER

com.google.android.gms.measurement.AppMeasurementInstallReferrerReceiver

com.android.vending.INSTALL_REFERRER

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

Services

host.exp.exponent.gcm.ExponentGcmListenerService

com.google.android.c2dm.intent.RECEIVE

host.exp.exponent.gcm.ExponentInstanceIDListenerService

com.google.android.gms.iid.InstanceID

host.exp.exponent.fcm.ExpoFcmMessagingService

com.google.firebase.MESSAGING_EVENT

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT
asset_004c2bbb035d8d06bb830efc4673c886.png
.png
asset_02bc1fa7c0313217bde2d65ccbff40c9.png
.png
asset_03b3b6e25482d8b344ea9a2f389c09e5.json
asset_082fcc0668ed2f9302c932949b81cb8d.json
asset_0886a6b127c6057cee83f9c65c7ffd62.json
asset_09dd345dbd4ec5a0874841d5749ac153.json
asset_0ea69b5077e7c4696db85dbcba75b0e1.png
.png
asset_126e3e852b6b9c545c39738bb28b8981.json
asset_140c53a7643ea949007aa9a282153849.ttf
asset_1cd47150a39d7a309b4e70ef78c4a6a0.png
.png
asset_2327736b3ea09c41abfb69be1221f430.png
.png
asset_25c52c649ffd8f0610ddd4b598847ff8.png
.png
asset_2e562d4ebf15395f00bc738738f79291.ttf
asset_309df156926c22d21aae8e9ef01b18ba.png
.png
asset_310282cf4b9911bc75752c1a4809f0e1.png
.png
asset_35ba0eaec5a4f5ed12ca16fabeae451d.png
.png
asset_376d6a4c7f622917c39feb23671ef71d.png
.png
asset_3a2ba31570920eeb9b1d217cabe58315.ttf
asset_3aacb0d0651c97d84bb90e4adecc19ab.png
.png
asset_3ccb0cdccf224bdd0573fcd40ed9216d.png
.png
asset_3e6805fbc794680014716b8c752f20b8.json
asset_403f2c44f7ad70d0868aaf779563e809.png
.png
asset_461d9bba8b6a3c91675039df12cfe6ca.json
asset_51671417ef20e0bbc32f0a2bc6edfa95.png
.png
asset_5182da425f811908bed9f5b8c72fa44f.ttf
asset_540e087cba78250848e5b9d1c2334806.json
asset_58b4910e2a2288065c2d98f109d96f00.png
.png
asset_5975c888758cfdf0e24107907a5c036e.json
asset_5a293a273bee8d740a045d9922b9a9ae.ttf
asset_5cdf883b18a5651a29a4d1ef276d2457.ttf
asset_60668d999bbaf663420340f7bdd580d7.json
asset_6165c9d7a2e729ba57b23dd93add5366.png
.png
asset_647543ebfccf6e5495434383598453d1.json
asset_648f2d510967a87880abfed9476aeb28.json
asset_6beba7e6834963f7f171d3bdd075c915.ttf
asset_7306142ad48d89637bb6e773c727b222.png
.png
asset_744ce60078c17d86006dd0edabcd59a7.ttf
asset_74d124a3caeac2bea111f3ca2f2dd34a.json
asset_761199fac95074dd537735a330926704.png
.png
asset_77192d402d8a09bff596daaa4f378797.json
asset_774c05ccae92d11b95a2ef722c9566a8.ttf
asset_778ffc9fe8773a878e9c30a6304784de.png
.png
asset_7d40544b395c5949f4646f5e150fe020.png
.png
asset_7e078700f0c35367a56c5bbb2047dda7.json
asset_8143275ec8c9743fd711ae22739d40d0.png
.png
asset_872545dde71de3842234bf6afe80c4cb.ttf
asset_8b12b3e16d591abc926165fa8f760e3b.json
asset_8e7f807ef943bff1f6d3c2c6e0f3769e.ttf
asset_94c4ffdcbffeb0570c635d7f8edd8a25.json
asset_9d8d60b2917f6dfa855382b9af289921.png
.png
asset_9ffbf9043be36fd47c792cbe8162bf7f.json
asset_a132ecc4ba5c1517ff83c0fb321bc7fc.png
.png
asset_a29c3ab65ab1f9dbf5059a0d66d61b44.json
asset_a37b0c01c0baf1888ca812cc0508f6e2.ttf
asset_a7b9dc9de5f8f1fb1afbef917619a5ac.png
.png
asset_b06871f281fee6b241d60582ae9369b9.ttf
asset_b22029cbfb9d5362c8a99582393da413.json
asset_b2e0fc821c6886fb3940f85a3320003e.ttf
asset_b35a30bcd2eeb45bba13fc01e777c655.json
asset_b35dbf1b8a4e979f1a0b97e80ef9efa5.png
.png
asset_b3b804e90133c977db86c4017629574b.json
asset_b3c349d2c4b09757754bd5e0beabbb9f.png
.png
asset_b4f7e40af8571ba1971463eb3389ba83.png
.png
asset_b582e1c8a605c3b9a1c26e09789a78d4.json
asset_be4a05603f5defcff5685e4eef03ffec.png
.png
asset_c6aef942e3668158ec29d4adcb2e768f.ttf
asset_c79c3606a1cf168006ad3979763c7e0c.png
.png
asset_cdd04e13d4ec83ff0cd13ec8dabdc341.png
.png
asset_d017572eb54e7a390a4636c50bddfb66.json
asset_d2285965fe34b05465047401b8595dd0.ttf
asset_e20945d7c929279ef7a6f1db184a4470.ttf
asset_e6f74c4b5d8401d764c02ddc2691df02.png
.png
asset_ee2a11b8055d665afd2ac1d818683ffe.ttf
asset_f1f91feb805137c9283fb766620ec5eb.json
asset_f5b790e2ac193b3d41015edb3551f9b8.png
.png
asset_fdc01171a7a7ea76b187afcd162dee7d.json
bugsnag.h
crashlytics-build.properties
insta-logo.png
.png
kernel-manifest.json
report.h
shell-app-manifest.json
shell-app.bundle
.js
state.json
.js

Sharing

General

Malware Config

Signatures

Files

Password: infected

com.gmail.barisuzunca.ecommercewebsitewrappercopy

host.exp.exponent.MainActivity

Activities

host.exp.exponent.MainActivity

host.exp.exponent.experience.TvActivity

net.openid.appauth.RedirectUriReceiverActivity

expo.modules.payments.stripe.RedirectUriReceiver

abi36_0_0.expo.modules.payments.stripe.RedirectUriReceiver

abi35_0_0.expo.modules.payments.stripe.RedirectUriReceiver

abi34_0_0.expo.modules.payments.stripe.RedirectUriReceiver

abi33_0_0.expo.modules.payments.stripe.RedirectUriReceiver

Permissions

Receivers

host.exp.exponent.referrer.InstallReferrerReceiver

com.google.android.gms.analytics.AnalyticsReceiver

com.google.android.gms.gcm.GcmReceiver

host.exp.exponent.notifications.receivers.SchedulingTriggerReceiver

com.learnium.RNDeviceInfo.RNDeviceReceiver

com.onesignal.GcmBroadcastReceiver

com.onesignal.BootUpReceiver

com.onesignal.UpgradeReceiver

com.facebook.CurrentAccessTokenExpirationBroadcastReceiver

com.facebook.CampaignTrackingReceiver

com.google.android.gms.measurement.AppMeasurementInstallReferrerReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

Services

host.exp.exponent.gcm.ExponentGcmListenerService

host.exp.exponent.gcm.ExponentInstanceIDListenerService

host.exp.exponent.fcm.ExpoFcmMessagingService

com.google.firebase.messaging.FirebaseMessagingService