2fe8e194389ce7569520e06357591a84f69c34d26ec0b63b950defe02a86582d

Sharing

Copy URL Twitter E-mail

General

Target

2fe8e194389ce7569520e06357591a84f69c34d26ec0b63b950defe02a86582d
Size

18.3MB
MD5

5570a74e4f01b7a79ee709c2e56cd82f
SHA1

9c1ea427ed8c2e098cd34fd1386ffece3727b447
SHA256

2fe8e194389ce7569520e06357591a84f69c34d26ec0b63b950defe02a86582d
SHA512

3f793b66b690164b6fa25c078c7e6ffd94faf216b645810c3e810b936b7151c89d580c88d87ebc1e5ff5dd7a396ff39152ce4812273f0e8f514ad4d18b15f368
SSDEEP

393216:futViQCpj4urkFBS9FvjW7F1ilIuBorV0Szrb5i5Qc93SixBTL44AOonnnpnnnpY:fuiUurIBS9FvjGel2JQ5TCizTLNonnnY

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 14 IoCs

description	ioc
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to send SMS messages.	android.permission.SEND_SMS
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS

Files

2fe8e194389ce7569520e06357591a84f69c34d26ec0b63b950defe02a86582d
.apk android arch:arm

com.globe.gcash.android

gcash.module.splashscreen.mvp.view.SplashScreenActivity

Activities

gcash.module.splashscreen.mvp.view.SplashScreenActivity

android.intent.action.MAIN
android.intent.action.VIEW

gcash.module.otp.msisdn.OtpMsisdnActivity

android.intent.action.VIEW

com.globe.gcash.android.module.contacts.ContactSelectionActivity

android.intent.action.VIEW

com.globe.gcash.android.module.cashin.options.OptionsActivity

android.intent.action.VIEW

com.globe.gcash.android.module.cashin.bpi.authenticate.AuthenticateActivity

android.intent.action.VIEW

com.globe.gcash.android.module.cashin.paypal.cashin.CashInActivity

android.intent.action.VIEW

com.globe.gcash.android.module.cashin.rcbc.authenticate.AuthenticateActivity

android.intent.action.VIEW

com.globe.gcash.android.module.cashin.moneygram.remittancefields.RemittanceFieldsActivity

android.intent.action.VIEW

gcash.common.android.webview.WebViewActivity

android.intent.action.VIEW

com.globe.gcash.android.module.cashin.barcode.amount.InputAmountActivity

android.intent.action.VIEW

gcash.module.login.LoginActivity

android.intent.action.VIEW

gcash.module.dashboard.DashboardActivity

android.intent.action.VIEW

gcash.module.sendmoney.recipient.SendMoneyRecipientActivity

android.intent.action.VIEW

gcash.module.sendmoney.option.SendMoneyOptionsActivity

android.intent.action.VIEW

gcash.module.payqr.PayViaCodeActivity

android.intent.action.VIEW

gcash.module.gmovies.registration.RegistrationActivity

android.intent.action.VIEW

gcash.module.paybills.billerscategory.BillspayActivity

android.intent.action.VIEW

gcash.module.paybills.billerfields.BillerFieldsActivity

android.intent.action.VIEW

gcash.module.paybills.scanbarcode.ScanBarcodeActivity

android.intent.action.VIEW

gcash.module.paybills.scanbarcode.ScanBarcodeLandscapeActivity

android.intent.action.VIEW

gcash.module.paynamics.cards.CardsListActivity

android.intent.action.VIEW

gcash.module.paynamics.cashin.cardtogcash.DebitCardToGcashActivity

android.intent.action.VIEW

com.example.module_account_recovery.setup.entermpin.EnterMpinActivity

android.intent.action.VIEW

com.example.module_account_recovery.forgotmpin.recoverycode.RecoveryCodeActivity

android.intent.action.VIEW

com.globe.gcash.android.module.forgotmpin.recoveryquestions.RecoveryQuestionListActivityKt

android.intent.action.VIEW

gcash.module.unionbank.authenticate.UnionbankWebViewActivity

android.intent.action.VIEW

gcash.module.bpi.cashin.account.AccountActivity

android.intent.action.VIEW

com.gcash.iap.appcontainer.activity.GCashWebActivity

android.intent.action.MAIN

gcash.module.investment.registration.emailregistration.EmailRegistrationActivity

android.intent.action.VIEW

gcash.module.investment.investment_dashboard.dashboard.DashboardActivity

android.intent.action.VIEW

gcash.module.investment.investment_dashboard.set_reminders.SetRemindersActivity

android.intent.action.VIEW

gcash.module.reportissue.reportemail.ReporEmailActivity

android.intent.action.VIEW

gcash.module.getload.GetLoadActivity

android.intent.action.VIEW

gcash.module.getload.buyload.recipient.BuyloadRecipientActivity

android.intent.action.VIEW

gcash.module.getload.borrowload.denom.DenomBorrowLoadActivityKt

android.intent.action.VIEW

gcash.module.getload.borrowload.existingloan.payexistingloan.PayExistingLoanActivity

android.intent.action.VIEW

gcash.module.getload.borrowload.pendingloan.PendingLoanAppActivity

android.intent.action.VIEW

com.google.android.gms.appinvite.PreviewActivity

com.google.android.gms.appinvite.ACTION_PREVIEW

com.alipay.mobile.nebulacore.ui.H5Activity

android.intent.action.MAIN

Permissions

android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_FINE_LOCATION
android.permission.READ_PHONE_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.BLUETOOTH
android.permission.WAKE_LOCK
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_EXTERNAL_STORAGE
android.permission.READ_CONTACTS
android.permission.CALL_PHONE
android.permission.SEND_SMS
android.permission.CAMERA
android.permission.WRITE_SETTINGS
android.permission.RECEIVE_SMS
android.permission.READ_SMS
android.permission.ACCESS_COARSE_LOCATION
com.google.android.providers.gsf.permission.READ_GSERVICES
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.BLUETOOTH_ADMIN
com.google.android.c2dm.permission.RECEIVE
com.globe.gcash.android.permission.C2D_MESSAGE
android.permission.BROADCAST_STICKY
android.permission.GET_TASKS
android.permission.VIBRATE
android.permission.MANAGE_DOCUMENTS
android.permission.ZTE_HEARTYSERVICE_MANAGEMENT
android.permission.READ_SETTINGS
android.permission.GET_ACCOUNTS
android.permission.WRITE_CONTACTS

Receivers

com.globe.gcash.android.module.otp.code.SmsReceiver

android.provider.Telephony.SMS_RECEIVED

com.google.android.gms.measurement.AppMeasurementInstallReferrerReceiver

com.android.vending.INSTALL_REFERRER

com.pulseid.sdk.services.BootCompletedIntentReceiver

android.intent.action.BOOT_COMPLETED

com.pulseid.sdk.jobs.JobCreatorAddReceiver

com.evernote.android.job.ADD_JOB_CREATOR

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

com.evernote.android.job.v14.PlatformAlarmReceiver

com.evernote.android.job.v14.RUN_JOB
net.vrallev.android.job.v14.RUN_JOB

com.evernote.android.job.JobBootReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.QUICKBOOT_POWERON
com.htc.intent.action.QUICKBOOT_POWERON
android.intent.action.MY_PACKAGE_REPLACED

Services

com.example.module_account_recovery.service.RecoveryCodeResendTimerIntentService

android.intent.action.VIEW

com.globe.gcash.android.service.notification.GcashFirebaseInstanceIdService

com.google.firebase.INSTANCE_ID_EVENT

com.globe.gcash.android.service.notification.GcashFirebaseMessaging

com.google.firebase.MESSAGING_EVENT

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

com.google.firebase.iid.FirebaseInstanceIdService

com.google.firebase.INSTANCE_ID_EVENT

com.evernote.android.job.gcm.PlatformGcmService

com.google.android.gms.gcm.ACTION_TASK_READY

Android Permissions

2fe8e194389ce7569520e06357591a84f69c34d26ec0b63b950defe02a86582d

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_FINE_LOCATION

android.permission.READ_PHONE_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.BLUETOOTH

android.permission.WAKE_LOCK

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.READ_CONTACTS

android.permission.CALL_PHONE

android.permission.SEND_SMS

android.permission.CAMERA

android.permission.WRITE_SETTINGS

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.permission.ACCESS_COARSE_LOCATION

com.google.android.providers.gsf.permission.READ_GSERVICES

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.BLUETOOTH_ADMIN

com.google.android.c2dm.permission.RECEIVE

com.globe.gcash.android.permission.C2D_MESSAGE

android.permission.BROADCAST_STICKY

android.permission.GET_TASKS

android.permission.VIBRATE

android.permission.MANAGE_DOCUMENTS

android.permission.ZTE_HEARTYSERVICE_MANAGEMENT

android.permission.READ_SETTINGS

android.permission.GET_ACCOUNTS

android.permission.WRITE_CONTACTS

Sharing

General

Malware Config

Signatures

Files

com.globe.gcash.android

gcash.module.splashscreen.mvp.view.SplashScreenActivity

Activities

gcash.module.splashscreen.mvp.view.SplashScreenActivity

gcash.module.otp.msisdn.OtpMsisdnActivity

com.globe.gcash.android.module.contacts.ContactSelectionActivity

com.globe.gcash.android.module.cashin.options.OptionsActivity

com.globe.gcash.android.module.cashin.bpi.authenticate.AuthenticateActivity

com.globe.gcash.android.module.cashin.paypal.cashin.CashInActivity

com.globe.gcash.android.module.cashin.rcbc.authenticate.AuthenticateActivity

com.globe.gcash.android.module.cashin.moneygram.remittancefields.RemittanceFieldsActivity

gcash.common.android.webview.WebViewActivity

com.globe.gcash.android.module.cashin.barcode.amount.InputAmountActivity

gcash.module.login.LoginActivity

gcash.module.dashboard.DashboardActivity

gcash.module.sendmoney.recipient.SendMoneyRecipientActivity

gcash.module.sendmoney.option.SendMoneyOptionsActivity

gcash.module.payqr.PayViaCodeActivity

gcash.module.gmovies.registration.RegistrationActivity

gcash.module.paybills.billerscategory.BillspayActivity

gcash.module.paybills.billerfields.BillerFieldsActivity

gcash.module.paybills.scanbarcode.ScanBarcodeActivity

gcash.module.paybills.scanbarcode.ScanBarcodeLandscapeActivity

gcash.module.paynamics.cards.CardsListActivity

gcash.module.paynamics.cashin.cardtogcash.DebitCardToGcashActivity

com.example.module_account_recovery.setup.entermpin.EnterMpinActivity

com.example.module_account_recovery.forgotmpin.recoverycode.RecoveryCodeActivity

com.globe.gcash.android.module.forgotmpin.recoveryquestions.RecoveryQuestionListActivityKt

gcash.module.unionbank.authenticate.UnionbankWebViewActivity

gcash.module.bpi.cashin.account.AccountActivity

com.gcash.iap.appcontainer.activity.GCashWebActivity

gcash.module.investment.registration.emailregistration.EmailRegistrationActivity

gcash.module.investment.investment_dashboard.dashboard.DashboardActivity

gcash.module.investment.investment_dashboard.set_reminders.SetRemindersActivity

gcash.module.reportissue.reportemail.ReporEmailActivity

gcash.module.getload.GetLoadActivity

gcash.module.getload.buyload.recipient.BuyloadRecipientActivity

gcash.module.getload.borrowload.denom.DenomBorrowLoadActivityKt

gcash.module.getload.borrowload.existingloan.payexistingloan.PayExistingLoanActivity

gcash.module.getload.borrowload.pendingloan.PendingLoanAppActivity

com.google.android.gms.appinvite.PreviewActivity

com.alipay.mobile.nebulacore.ui.H5Activity

Permissions

Receivers

com.globe.gcash.android.module.otp.code.SmsReceiver

com.google.android.gms.measurement.AppMeasurementInstallReferrerReceiver

com.pulseid.sdk.services.BootCompletedIntentReceiver

com.pulseid.sdk.jobs.JobCreatorAddReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.evernote.android.job.v14.PlatformAlarmReceiver

com.evernote.android.job.JobBootReceiver

Services

com.example.module_account_recovery.service.RecoveryCodeResendTimerIntentService

com.globe.gcash.android.service.notification.GcashFirebaseInstanceIdService

com.globe.gcash.android.service.notification.GcashFirebaseMessaging

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.iid.FirebaseInstanceIdService

com.evernote.android.job.gcm.PlatformGcmService

Android Permissions

2fe8e194389ce7569520e06357591a84f69c34d26ec0b63b950defe02a86582d