0bf2c2a0f156ca60e6d9b528b70713ad3b2b1c3cd37ad6914f9b891db0ba799d

General

Target

0bf2c2a0f156ca60e6d9b528b70713ad3b2b1c3cd37ad6914f9b891db0ba799d
Size

17.3MB
MD5

614f26956aac6dae6275a2023719607c
SHA1

aa7c750326221202e05453be97630b001c6e2080
SHA256

0bf2c2a0f156ca60e6d9b528b70713ad3b2b1c3cd37ad6914f9b891db0ba799d
SHA512

6d1351a23efbfc46a60d27e98cc9f37e078c2b9c3d5b35ce7d47ad4264f979bae33638ba0730c6bfdb83b9ca09baca41489f44ea94d29ebc5ba438c565c43e42
SSDEEP

393216:+Qc1Zh1vG2ddQLylqfZh3ZNIYwAlWaoyS/MGg+3acN6IGrMXezH7cwE:oH1vG2gLycBRZ2VAlWXpUGX3acN6IGrs

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 2 IoCs

description	ioc
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE

Files

0bf2c2a0f156ca60e6d9b528b70713ad3b2b1c3cd37ad6914f9b891db0ba799d
.apk android arch:arm arch:x86

io.wormate

io.wormate.app.AndroidLauncher

Activities

io.wormate.app.AndroidLauncher

android.intent.action.MAIN

io.presage.activities.PresageActivity

io.presage.intent.action.LAUNCH_WEBVIEW

Permissions

android.permission.ACCESS_NETWORK_STATE
android.permission.INTERNET
android.permission.WAKE_LOCK
android.permission.ACCESS_COARSE_LOCATION
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_WIFI_STATE
com.android.vending.BILLING
org.onepf.openiab.permission.BILLING
com.sec.android.iap.permission.BILLING
com.nokia.payment.BILLING
com.slideme.sam.manager.inapp.permission.BILLING
com.google.android.c2dm.permission.RECEIVE
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
io.wormate.permission.C2D_MESSAGE

Receivers

com.appodeal.ads.AppodealPackageAddedReceiver

android.intent.action.PACKAGE_ADDED

com.startapp.android.publish.common.metaData.BootCompleteListener

android.intent.action.BOOT_COMPLETED

com.yandex.metrica.MetricaEventHandler

com.android.vending.INSTALL_REFERRER

com.evernote.android.job.v14.PlatformAlarmReceiver

com.evernote.android.job.v14.RUN_JOB
net.vrallev.android.job.v14.RUN_JOB

com.evernote.android.job.JobBootReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.QUICKBOOT_POWERON
com.htc.intent.action.QUICKBOOT_POWERON
android.intent.action.MY_PACKAGE_REPLACED

io.presage.receiver.NetworkChangeReceiver

android.net.conn.CONNECTIVITY_CHANGE
android.net.wifi.WIFI_STATE_CHANGED
io.presage.receiver.NetworkChangeReceiver.ONDESTROY

com.google.android.gms.measurement.AppMeasurementInstallReferrerReceiver

com.android.vending.INSTALL_REFERRER

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

Services

com.yandex.metrica.MetricaService

com.yandex.metrica.IMetricaService

com.yandex.metrica.ConfigurationService

com.yandex.metrica.configuration.ACTION_START

com.evernote.android.job.gcm.PlatformGcmService

com.google.android.gms. gcm.ACTION_TASK_READY

com.mobvista.msdk.shell.MVService

com.mobvista.msdk.download.action

io.presage.PresageService

io.presage.PresageService.PIVOT

com.google.firebase.iid.FirebaseInstanceIdService

com.google.firebase.INSTANCE_ID_EVENT

Android Permissions

0bf2c2a0f156ca60e6d9b528b70713ad3b2b1c3cd37ad6914f9b891db0ba799d

Permissions

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.WAKE_LOCK

android.permission.ACCESS_COARSE_LOCATION

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_WIFI_STATE

com.android.vending.BILLING

org.onepf.openiab.permission.BILLING

com.sec.android.iap.permission.BILLING

com.nokia.payment.BILLING

com.slideme.sam.manager.inapp.permission.BILLING

com.google.android.c2dm.permission.RECEIVE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

io.wormate.permission.C2D_MESSAGE

Sharing

General

Malware Config

Signatures

Files

io.wormate

io.wormate.app.AndroidLauncher

Activities

io.wormate.app.AndroidLauncher

io.presage.activities.PresageActivity

Permissions

Receivers

com.appodeal.ads.AppodealPackageAddedReceiver

com.startapp.android.publish.common.metaData.BootCompleteListener

com.yandex.metrica.MetricaEventHandler

com.evernote.android.job.v14.PlatformAlarmReceiver

com.evernote.android.job.JobBootReceiver

io.presage.receiver.NetworkChangeReceiver

com.google.android.gms.measurement.AppMeasurementInstallReferrerReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

Services

com.yandex.metrica.MetricaService

com.yandex.metrica.ConfigurationService

com.evernote.android.job.gcm.PlatformGcmService

com.mobvista.msdk.shell.MVService

io.presage.PresageService

com.google.firebase.iid.FirebaseInstanceIdService

Android Permissions

0bf2c2a0f156ca60e6d9b528b70713ad3b2b1c3cd37ad6914f9b891db0ba799d