General

  • Target

    com.dbs.sg.iwealth.apk

  • Size

    95.9MB

  • MD5

    45bf116c25c73137faad1f07bb224f46

  • SHA1

    91ce24f70bc2665b818552d354390fe914d81d32

  • SHA256

    47cc7b8938593b2da9f1cd2cf4e9b962de81e7b22d0fc76e8dbec75ac44f1e1e

  • SHA512

    bc5cbe59e5778a7d8388a8acbabeed72a49c049e76e7954c4c465e5b0bdb580f652e31bccf2b335be2f7187f9f614da06b770ca6de10f3522e3ec9a778e48480

  • SSDEEP

    1572864:PtFEppFs64SdqUE3H0G1XSBGBtxYcLRwX0S1Etm970Fii5++OIRqa1hOpxrzjF:P7EppFs64ejE300JtScLRwkS4i7eb4+O

Score
7/10

Malware Config

Signatures

  • Requests dangerous framework permissions 14 IoCs

Files

  • com.dbs.sg.iwealth.apk
    .apk android arch:arm64 arch:arm

    com.dbs.sg.iwealth

    com.dbs.sg.digibank.ui.demo.SplashActivity


  • 3des_obf.js
    .js
  • Activate_CC.json
  • Activate_DC.json
  • BannerRequest.json
  • BannerResponse.json
  • CA.cer
  • CorporateActionSubmitResponse.json
  • CountryCode.json
  • CrashDetector.default.3_3.tflite
  • CrossCellResponse.json
  • CustomerOccupationGroup.json
  • DB1.dat
  • DB2.dat
  • DBSLogin.js
    .js
  • DividendFundOrder.json
  • DividendFundVerification.json
  • DormancyUpliftAATagging.json
  • EA_AATagingMapping.json
  • EAdviceAATagingMapping.json
  • EsgRatingAATagging.json
  • ExportAATagging.json
  • FontIcons.ttf
  • GetRandom.json
  • Get_Enquiry_CC.json
  • Get_Enquiry_DC.json
  • IOSRenewalAATagging.json
  • IkeRenewalAATagging.json
  • ImpressionRequest.json
  • IncomeExpenseAATagging.json
  • InitiateRSPFund.json
  • InitiateRedeemFund.json
  • MaturityAATagging.json
  • MenuList.json
  • POST_CARDS_INSTALMENT.json
  • POST_DP_INSTALMENT_PLANS.json
  • POST_ELIGIBLE_TRANSACTIONS.json
  • POST_INSTALMENT_PLANS.json
  • POST_MP3_COMPLETION.json
  • PPUEmploymentDetails.json
  • PPUPersonalDetails.json
  • PWEBUAT01-SG-Cert.cer
  • PerformanceAATagging.json
  • PinDialog.html
    .js
  • PnLAATagging.json
  • Post_CardDetails_Enquiry.json
  • Put_Control_Update_CC.json
  • Put_Control_Update_DC.json
  • Put_Lock_Control_Update_DC.json
  • RIBLogon.js
    .js
  • Redeemcompleteresponse.json
  • ResearchAATagingMapping.json
  • RetrieveAccountNew.json
  • RetrieveCorporateEadviceResponse.json
  • Roboto-Bold.ttf
  • Roboto-Medium.ttf
  • Roboto-Regular.ttf
  • SeptRel_Traveltips_new.json
  • StatusInfo.html
    .html .js
  • TZDB.dat
  • TipsAATagingMapping.json
  • WMASTPAATagging.json
  • WebConfigBase_SG.json
  • Webmfe_PROD.json
  • Webmfe_UAT.json
  • WebviewSocket.html
    .html .js
  • appsflyer_config_version.json
  • appsflyer_event_tag.json
  • atCountryList.json
  • baseline.prof
  • bottom_sheet_template.json
  • canada_landing_info.json
  • car_landing_info.json
  • chatcom.min.js
    .js
  • cka_questionnaire.json
  • crypto_icon.json
  • cui_close.png
    .png
  • cui_flash.png
    .png
  • cui_flash_close.png
    .png
  • data_stream_index.html
    .html .js
  • dbs-mb.ttf
  • dbs-mb_native.ttf
  • dbsweb-s01-www-prv.dbs.com.cer
  • dbsweb-s01-www.dbs.com.crt
  • dbsweb-s02-www.dbs.com.crt
  • dbsweb-u01-www-prv.dbs.com.sg-2023.crt
  • dbsweb-u01-www-prv.dbs.com.sg.crt
  • dbsweb-u01-www.dbs.com.crt
  • dbsweb-u01-www.dbs.com.sg-2023.crt
  • dbsweb-u01-www.dbs.com.sg.cer
  • dbsweb-u01-www.dbs.com.sg.crt
  • dbsweb-u02-www-prv.dbs.com.crt
  • dbsweb-u02-www-prv.dbs.com.sg-2023.crt
  • dbsweb-u02-www-prv.dbs.com.sg.crt
  • dbsweb-u02-www.dbs.com.crt
  • dbsweb-u02-www.dbs.com.sg-2023.crt
  • dbsweb-u02-www.dbs.com.sg.crt
  • dbsweb-u03-www-prv.dbs.com.cer
  • dbsweb-u03-www-prv.dbs.com.sg-2023.crt
  • dbsweb-u03-www-prv.dbs.com.sg.cf.cer
  • dbsweb-u03-www-prv.dbs.com.sg.crt
  • dbsweb-u03-www.dbs.com.cer
  • dbsweb-u03-www.dbs.com.crt
  • dbsweb-u03-www.dbs.com.sg-2023.crt
  • dbsweb-u03-www.dbs.com.sg.cf.cer
  • dbsweb-u03-www.dbs.com.sg.crt
  • dbsweb-u04-www.dbs.com.crt
  • dbsweb-u04-www.dbs.com.sg-2023.crt
  • dbsweb-u04-www.dbs.com.sg.crt
  • dbswebsitak-www.dbs.com.sg.cer
  • dbswebsitak-www.dbs.com.sg.crt
  • dividendPayouts.json
  • dormancy_activate_account.json
  • dormancy_get_accounts.json
  • eadvice-template.html
  • encryptUserPin.js
    .js
  • endpoint.json
  • equity-esg-ratings.json
  • ewss_country_list.json
  • ex_dividend.json
  • firmware
  • fonticon-iwealth.ttf
  • getAirportList0.json
  • getAirportList1.json
  • getConciergeContactDetails.json
  • getCurrencyList.json
  • getEAdvicePdfUrlResponse.json
  • getFlightCabin.json
  • getHotelRequestList.json
  • getHotelRoomTypeList.json
  • getLanguageList.json
  • getLimoAirportList0.json
  • getLimoAirportList1.json
  • getLimoAirportTermsList.json
  • getLoungeForexCurrencyList.json
  • getLoungeList.json
  • getMultipleAddressesResponse.json
  • getPrivilegeCategoryList.json
  • getTravelPreferenceList.json
  • getTreatmentCountryList0.json
  • getTreatmentCountryList1.json
  • getrecommendations_mock.json
  • ib_feedback_option_template.json
  • ib_menu.json
  • ike_response.json
  • index_new.html
  • investment_account.json
  • joint_account_holder.json
  • jsbn_obf.js
    .js
  • l3template_mock.json
  • mailing_address_response.json
  • mca_fx_tutorial_1.json
  • mfe_pe.js
    .js
  • new_fund_search_result.json
  • oet_activation_failed.json
  • oet_activation_rejected.json
  • oet_activation_success.json
  • oet_declaration_done.json
  • overseas_listed_investment_landing.json
  • paylah_encryptor.js
    .js
  • pending_applicatons_response.json
  • perf_measure_config.json
  • personalDetailReview.json
  • personalized_response.json
  • personalized_wealth_response.json
  • personalized_wealth_response_forced.json
  • profile
  • promotions_response.json
  • purchaseInput.json
  • purchasefundsubmit.json
  • purchasepreviewresponse.json
  • remittracker_complete.json
  • remittracker_failed.json
  • remittracker_process.json
  • remittracker_sent.json
  • report_an_issue.json
  • retrieveEadviceDetailsResponse.json
  • retrieveInvestmentAccountHoldings.json
  • retrieveInvestmentAccounts.json
  • rpq_questionnaire.json
  • rsa_obf.js
    .js
  • sib.cer
  • signature
  • similar_stock_response.json
  • simplemode_ql_response.json
  • slowloader_dark.json
  • slowloader_gold_6px.json
  • slowloader_red_6px.json
  • slowloader_white.json
  • sm_quicklinks_non_wpholders.json
  • sm_quicklinks_wpholders.json
  • stock_price_movement.json
  • tealium_config.json
  • templates_mock.json
  • travel_tips_response.json
  • travelmode_personalized.json
  • traveltips_get_ready.json
  • updateEadviceStatusResponse.json
  • us_landing_info.json
  • util_obf.js
    .js
  • vkeylicensepack
  • vkeylicensepack.json
  • voscodesign.vky
  • w8ben_declaration_response.json
  • wds3_js_api.js
    .js
  • wmastp_account_status_response.json
  • wmastp_customer_profile_response.json
  • wmastp_submit_response.json
  • www.dbs.com-2023.crt
  • www.dbs.com.crt
  • www.dbs.com.sg-2023-intermediate.crt
  • www.dbs.com.sg-2023.crt
  • www.dbs.com.sg.cer
  • www.dbs.com.sg.cf.cer
  • www.dbs.com.sg.crt
  • www.dbs.com.sg.sep2021.crt
  • www.posb.com.sg-2023.crt
  • www.prv.dbs.com.cer
  • www.prv.dbs.com.old.cer
  • www.prv.dbs.com.sg.cer
  • www.prv.dbs.com.sg.cf.cer
  • www.prv.dbs.com.sg.sep2022.crt
  • youngInvestor.json

Android Permissions

com.dbs.sg.iwealth.apk

Permissions

com.dbs.dbspaylah.provider.WRITE

com.dbs.dbspaylah.provider.READ

android.permission.FOREGROUND_SERVICE

android.permission.CALL_PHONE

android.permission.INTERNET

android.permission.GET_TASKS

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.CAMERA

android.permission.USE_FINGERPRINT

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.READ_PHONE_STATE

android.permission.VIBRATE

android.permission.ACCESS_WIFI_STATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_MEDIA_IMAGES

android.permission.POST_NOTIFICATIONS

com.google.android.gms.permission.AD_ID

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

com.cellcity.dbsIndulge.permission.C2E_READ

com.cellcity.dbsIndulge.permission.C2E_WRITE

android.permission.ACTIVITY_RECOGNITION

android.permission.ACCESS_BACKGROUND_LOCATION

android.permission.HIGH_SAMPLING_RATE_SENSORS

android.permission.READ_CONTACTS

android.permission.USE_BIOMETRIC

android.permission.WAKE_LOCK

com.google.android.c2dm.permission.RECEIVE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

com.google.android.gms.permission.ACTIVITY_RECOGNITION

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.SCHEDULE_EXACT_ALARM

com.personetics.module.permission.C2D_MESSAGE

com.samsung.android.providers.context.permission.WRITE_USE_APP_FEATURE_SURVEY

android.permission.camera

android.permission.READ_MEDIA_AUDIO

android.permission.READ_MEDIA_VIDEO

android.permission.READ_DEVICE_CONFIG

com.google.android.providers.gsf.permission.READ_GSERVICES

android.permission.QUERY_ALL_PACKAGES