1[.]apk | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1.apk
Size

28.0MB
MD5

6546ca8d74ac0322ca8542d9a9a44f2c
SHA1

978b1cef1a376f944615cf799bb49108b83f09d2
SHA256

d3d68cdba02c6b7ce200a6074f28799c16be5b47728f7d383ffb18b8e9202d85
SHA512

fa49981567d3755a13d2e717688bd822c917f2f09c045ddd5cc30679825e6e46c5a5dd9f23dc3d34433537bd103b9f426f09a842385d6c05f609ab40dade9bff
SSDEEP

393216:KHYXDu56f1SUngvwhfxSshfxSYNT8qMIwk3aPdWHzt/h1kuOfxCFZg88gW:J1fgzwhfcshfcc8s340ZkuYoFy9gW

Score

7^/10

pdf link

Malware Config

Signatures

Requests dangerous framework permissions 10 IoCs

description	ioc
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Required to be able to access the camera device.	android.permission.CAMERA
Allows an app to access location in the background.	android.permission.ACCESS_BACKGROUND_LOCATION

HTTP links in PDF interactive object 1 IoCs

Detects HTTP links in interactive objects within PDF files.

pdf link

resource	yara_rule
static1/unpack001/terms_final.pdf	pdf_with_link_action

One or more HTTP URLs in PDF identified
Detects presence of HTTP links in PDF files.
pdf link

Files

1.apk
.apk android arch:arm64 arch:arm

com.example.acer.ibstaff

.MainActivity

Activities

.MainActivity

android.intent.action.MAIN

Permissions

android.permission.ACCESS_FINE_LOCATION
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.INTERNET
android.permission.READ_PHONE_STATE
android.permission.ACCESS_COARSE_LOCATION
android.permission.RECEIVE_SMS
android.permission.SYSTEM_ALERT_WINDOW
android.permission.READ_SMS
android.permission.CALL_PHONE
android.permission.CAMERA
android.permission.MANAGE_EXTERNAL_STORAGE
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_BACKGROUND_LOCATION
com.example.acer.ibstaff.provider.READ

Receivers

o.isWhitespace

android.provider.Telephony.SMS_RECEIVED
e
sam.pdf
.pdf
terms.html
terms.pdf
.pdf
terms_final.pdf
.pdf
- http://www.indianbank./
- http://www.indianbank.in

Android Permissions

1.apk

Permissions

android.permission.ACCESS_FINE_LOCATION

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.RECEIVE_SMS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_SMS

android.permission.CALL_PHONE

android.permission.CAMERA

android.permission.MANAGE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_BACKGROUND_LOCATION

com.example.acer.ibstaff.provider.READ

Sharing

General

Malware Config

Signatures

Files

com.example.acer.ibstaff

.MainActivity

Activities

.MainActivity

Permissions

Receivers

o.isWhitespace

Android Permissions

1.apk