Overview

overview

7

Static

static

7

Mercado_Pa....5.apk

android-9-x86

6

05ca79e2-9...d.avif

windows7-x64

3

05ca79e2-9...d.avif

windows10-2004-x64

4

1684336310067.png

windows7-x64

3

1684336310067.png

windows10-2004-x64

3

6340165.png

windows7-x64

3

6340165.png

windows10-2004-x64

3

63624bc390...90.jpg

windows7-x64

3

63624bc390...90.jpg

windows10-2004-x64

3

96285-loading.json

windows7-x64

3

96285-loading.json

windows10-2004-x64

3

AssetManifest.json

windows7-x64

3

AssetManifest.json

windows10-2004-x64

3

AssetManifest.smcbin

windows7-x64

3

AssetManifest.smcbin

windows10-2004-x64

3

Beneficios.png

windows7-x64

3

Beneficios.png

windows10-2004-x64

3

Claro.svg.png

windows7-x64

3

Claro.svg.png

windows10-2004-x64

3

CupertinoIcons.ttf

windows7-x64

3

CupertinoIcons.ttf

windows10-2004-x64

7

FontManifest.json

windows7-x64

3

FontManifest.json

windows10-2004-x64

3

Icono_Celularr.png

windows7-x64

3

Icono_Celularr.png

windows10-2004-x64

3

Lato-Regular.ttf

windows7-x64

3

Lato-Regular.ttf

windows10-2004-x64

7

MaterialIc...ar.otf

windows7-x64

3

MaterialIc...ar.otf

windows10-2004-x64

7

Montserrat-Medium.ttf

windows7-x64

3

Montserrat-Medium.ttf

windows10-2004-x64

7

Montserrat...ar.ttf

windows7-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    Mercado_Pago_2.4.5.apk

  • Size

    13.3MB

  • MD5

    84ae2c32cb44010b3731a2b28353aa7f

  • SHA1

    81cfd84f809597d3e05e66e05402ea5a93a3bfb7

  • SHA256

    a9b65ade66204860592309c83a1480be2359185813c6de827999e195ab5daed7

  • SHA512

    239d0ca7067b2df22209bf58fc1a205d56b93c8b1dcdf3f0a3268e9a6112d8c5b02afc52b395975dc2db74904e375e537cceaf23a6ee9a6189a4f8c763b6290c

  • SSDEEP

    393216:6NDhC85nZ72IYwyHAUFb0Ej6gvF3GIUPbzu21E8kBoc4:qC8uRHAUFb0C93PKbaoE5/4

Score
7/10

Malware Config

Signatures

  • Requests dangerous framework permissions 3 IoCs

Files

  • Mercado_Pago_2.4.5.apk
    .apk android arch:arm

    com.mycompany.mercadopago

    com.mycompany.mercadopago.MainActivity


  • 05ca79e2-9cce-4ba0-95ca-f448942db91d.avif
  • 1684336310067.png
    .png
  • 6340165.png
    .png
  • 63624bc390762__838x390.jpg
    .jpg
  • 96285-loading.json
  • AssetManifest.json
  • AssetManifest.smcbin
  • Beneficios.png
    .png
  • Claro.svg.png
    .png
  • CupertinoIcons.ttf
  • FontManifest.json
  • Icono_Celularr.png
    .png
  • Lato-Regular.ttf
  • MaterialIcons-Regular.otf
  • Montserrat-Medium.ttf
  • Montserrat-Regular.ttf
  • NOTICES.Z
    .gz
  • NOTICES.Z
  • Poppins-Medium.ttf
  • Poppins-Regular.ttf
  • Roboto-Regular.ttf
  • SALDOOO.jpg
    .jpg
  • Screenshot_20230517-115745~2.png
    .png
  • Screenshot_20230517-213435.png
    .png
  • Screenshot_20230523-192833.png
    .png
  • Screenshot_20230606-183538.png
  • Screenshot_20230630-002139~2.png
    .png
  • Screenshot_20231001-202034~4.png
    .png
  • WhatsApp_Image_2023-07-18_at_21.29.24.jpeg
    .jpg
  • WhatsApp_Image_2023-07-18_at_21.30.12.jpeg
    .jpg
  • aasas.png
    .png
  • activation_congrats_success.mp3
  • app_launcher_icon.png
    .png
  • baseline.prof
  • baseline.profm
  • botton.json
  • cash-register-fake-88639.mp3
  • clock.png
    .png
  • cobrar.png
    .png
  • cobrar_poin.png
    .png
  • copiar_(1).png
    .png
  • descarga.jpg
    .jpg
  • descarga_(1).png
    .png
  • dinero.png
    .png
  • fa-brands-400.ttf
  • fa-regular-400.ttf
  • fa-solid-900.ttf
  • favicon.png
    .png
  • icono_cuentas.png
    .png
  • icono_tren.png
    .png
  • ink_sparkle.frag
  • licencia-de-conducir.png
    .png
  • mercadopago.png
    .png
  • mixkit-interface-click-1126.wav
  • mp.png
    .png
  • opcion-de-retiro.png
    .png
  • player.html
    .html .js
  • section-2022-lg.png
    .png
  • sound.m4a
  • susefull.mp4.lottie_(1).json
  • telegram-icon-free-png.webp

Android Permissions

Mercado_Pago_2.4.5.apk

Permissions

android.permission.INTERNET

android.permission.CAMERA

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.FLASHLIGHT

android.permission.ACCESS_NETWORK_STATE

com.mycompany.mercadopago.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION