21694ebc5f9dd1291c0f991da69b4e31079ccf0694c5eaaaf3206716a4070ab4

General

Target

21694ebc5f9dd1291c0f991da69b4e31079ccf0694c5eaaaf3206716a4070ab4
Size

12.7MB
MD5

77e2e56d98ab4b6c5a1e1b91d04ec0d8
SHA1

5a800ec8fd8ecaa3700b631b40b7ed84e866d2e2
SHA256

21694ebc5f9dd1291c0f991da69b4e31079ccf0694c5eaaaf3206716a4070ab4
SHA512

35fc4be58bf655227170dc6b352887f6f6f0796c3e0c7021dd895f47ddce57fc2959fb3ef050623c5f36b6725247f405a6c699883066b3d5bdeecf10dad27deb
SSDEEP

196608:MY/NNDFS0Td7iRCZiqYcypRteyoPZoVQtM2C9hh4sLXiKJvufDcajx:MY5SyoIiqh6iRRnCLtbi9QaN

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by remote views services to bind with the system. Allows apps to share and display views across different processes.	android.permission.BIND_REMOTEVIEWS

Requests dangerous framework permissions 8 IoCs

description	ioc
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE

Files

21694ebc5f9dd1291c0f991da69b4e31079ccf0694c5eaaaf3206716a4070ab4
.apk android arch:arm64 arch:arm arch:mips arch:mips64 arch:x86 arch:x64

com.groupme.android

com.groupme.android.HomeActivity

Activities

com.groupme.android.HomeActivity

android.intent.action.MAIN
android.intent.action.VIEW

com.groupme.android.group.JoinGroupActivity

android.intent.action.VIEW

com.groupme.android.message.MessageDetailActivity

android.intent.action.VIEW
android.intent.action.VIEW

com.groupme.android.profile.ProfileActivity

android.intent.action.VIEW

com.groupme.android.sharing.SharingActivity

android.intent.action.SEND
android.intent.action.SEND
android.intent.action.SEND

com.groupme.android.powerup.store.PowerUpStoreActivity

android.intent.action.VIEW

Permissions

com.groupme.android.permission.C2D_MESSAGE
com.groupme.android.permission.CONTENT_PROVIDER
android.permission.UPDATE_APP_OPS_STATS
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_FINE_LOCATION
android.permission.READ_PHONE_STATE
android.permission.GET_ACCOUNTS
android.permission.MANAGE_ACCOUNTS
android.permission.AUTHENTICATE_ACCOUNTS
android.permission.READ_SYNC_SETTINGS
android.permission.WRITE_SYNC_SETTINGS
android.permission.USE_CREDENTIALS
android.permission.SEND_SMS
android.permission.RECEIVE_SMS
android.permission.READ_CONTACTS
android.permission.WAKE_LOCK
com.google.android.c2dm.permission.RECEIVE
android.permission.MANAGE_DOCUMENTS
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_EXTERNAL_STORAGE
android.permission.VIBRATE
com.android.launcher.permission.INSTALL_SHORTCUT
com.android.vending.BILLING

Receivers

com.groupme.android.push.GcmBroadcastReceiver

com.google.android.c2dm.intent.RECEIVE
com.google.android.c2dm.intent.REGISTRATION

com.groupme.android.push.UpgradeReceiver

android.intent.action.PACKAGE_REPLACED

com.groupme.android.widget.ChatListWidgetProvider

android.appwidget.action.APPWIDGET_UPDATE
com.groupme.android.widget.action.REFRESH
com.groupme.android.widget.action.MARK_READ

com.AdX.tag.AdXAppTracker

com.android.vending.INSTALL_REFERRER

Services

com.groupme.android.account.AccountAuthenticatorService

android.accounts.AccountAuthenticator

com.groupme.android.conversation.ConversationSyncService

android.content.SyncAdapter

com.groupme.android.powerup.PowerUpSyncService

android.content.SyncAdapter

com.groupme.android.profile.ProfileSyncService

android.content.SyncAdapter

com.groupme.android.relationship.RelationshipSyncService

android.content.SyncAdapter

com.groupme.android.contacts.ContactSyncService

android.content.SyncAdapter

com.groupme.android.util.CleanUpSyncService

android.content.SyncAdapter

Android Permissions

21694ebc5f9dd1291c0f991da69b4e31079ccf0694c5eaaaf3206716a4070ab4

Permissions

com.groupme.android.permission.C2D_MESSAGE

com.groupme.android.permission.CONTENT_PROVIDER

android.permission.UPDATE_APP_OPS_STATS

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_FINE_LOCATION

android.permission.READ_PHONE_STATE

android.permission.GET_ACCOUNTS

android.permission.MANAGE_ACCOUNTS

android.permission.AUTHENTICATE_ACCOUNTS

android.permission.READ_SYNC_SETTINGS

android.permission.WRITE_SYNC_SETTINGS

android.permission.USE_CREDENTIALS

android.permission.SEND_SMS

android.permission.RECEIVE_SMS

android.permission.READ_CONTACTS

android.permission.WAKE_LOCK

com.google.android.c2dm.permission.RECEIVE

android.permission.MANAGE_DOCUMENTS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.VIBRATE

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.vending.BILLING

Sharing

General

Malware Config

Signatures

Files

com.groupme.android

com.groupme.android.HomeActivity

Activities

com.groupme.android.HomeActivity

com.groupme.android.group.JoinGroupActivity

com.groupme.android.message.MessageDetailActivity

com.groupme.android.profile.ProfileActivity

com.groupme.android.sharing.SharingActivity

com.groupme.android.powerup.store.PowerUpStoreActivity

Permissions

Receivers

com.groupme.android.push.GcmBroadcastReceiver

com.groupme.android.push.UpgradeReceiver

com.groupme.android.widget.ChatListWidgetProvider

com.AdX.tag.AdXAppTracker

Services

com.groupme.android.account.AccountAuthenticatorService

com.groupme.android.conversation.ConversationSyncService

com.groupme.android.powerup.PowerUpSyncService

com.groupme.android.profile.ProfileSyncService

com.groupme.android.relationship.RelationshipSyncService

com.groupme.android.contacts.ContactSyncService

com.groupme.android.util.CleanUpSyncService

Android Permissions

21694ebc5f9dd1291c0f991da69b4e31079ccf0694c5eaaaf3206716a4070ab4