d6ebcd9bddf28db234064ade3fa30824dc96dc93e5e1dbbb6ba2796f8cbc97d9

Sharing

Copy URL

Twitter E-mail

General

Target

d6ebcd9bddf28db234064ade3fa30824dc96dc93e5e1dbbb6ba2796f8cbc97d9
Size

24.3MB
MD5

cd9b9d31f43df1c65d5722d873b4d578
SHA1

bcec1ad0b26fee7ff71d680b881ce93df4ea45b0
SHA256

d6ebcd9bddf28db234064ade3fa30824dc96dc93e5e1dbbb6ba2796f8cbc97d9
SHA512

eb15bb6c4d67a709d920331bc345a557fea17b2fdccc668449e69220070ddc3f35511c9291e983b92347ace41d741f879697afbd76c8cb2fc4d6e9b3b3f74479
SSDEEP

393216:5eQ2DaR8HLGgIj8/K5abb6f78ueDiyJYUZnLe9zoLzoWIGH+VdJZpxa:5eQz4LfIyOZT8LfJ35LepwLIGHCZpU

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 5 IoCs

description	ioc
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE

Files

d6ebcd9bddf28db234064ade3fa30824dc96dc93e5e1dbbb6ba2796f8cbc97d9
.apk android arch:arm64 arch:arm arch:x86 arch:x64

com.bookmark.money

com.zoostudio.moneylover.ui.ActivitySplash

Activities

com.zoostudio.moneylover.widget.ActivityPickerWalletForWidget

android.appwidget.action.APPWIDGET_CONFIGURE

com.zoostudio.moneylover.ui.ActivitySplash

android.intent.action.MAIN
com.zoostudio.intent.action.RUN_SHORTCUT_WALLET

com.zoostudio.moneylover.ui.ActivityBase

com.zoostudio.intent.action.RUN_SHORTCUT
com.zoostudio.intent.action.RUN_SHORTCUT_WALLET

com.facebook.CustomTabActivity

android.intent.action.VIEW

com.zoostudio.moneylover.ui.ActivityRestoreFileBackup

android.intent.action.VIEW

com.zoostudio.moneylover.linkedWallet.ui.activitys.ActivityLinkRemoteAccount

android.intent.action.VIEW

com.zoostudio.moneylover.ui.ActivityReceiverDeepLink

android.intent.action.VIEW

com.google.android.gms.appinvite.PreviewActivity

com.google.android.gms.appinvite.ACTION_PREVIEW

Permissions

android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.INTERNET
android.permission.READ_EXTERNAL_STORAGE
android.permission.READ_CONTACTS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.VIBRATE
android.permission.WAKE_LOCK
android.permission.WRITE_EXTERNAL_STORAGE
com.android.launcher.permission.INSTALL_SHORTCUT
com.android.launcher.permission.UNINSTALL_SHORTCUT
com.android.vending.BILLING
com.google.android.c2dm.permission.RECEIVE
com.google.android.providers.gsf.permission.READ_GSERVICES
android.permission.VIBRATE
android.permission.USE_FINGERPRINT
android.permission.FOREGROUND_SERVICE
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

Receivers

com.zoostudio.moneylover.widget.MoneyWidgetAccountDark

android.appwidget.action.APPWIDGET_UPDATE
UPDATE_APPLICATION_FOR_CURRENT_USERITEM_BECAUSE_OF_SYNCING
UPDATE_APPLICATION_FOR_CURRENT_ACCOUNT_BECAUSE_OF_EDITING_TRANSACTIONS
UPDATE_CURRENT_WALLET_IN_USERITEM

com.zoostudio.moneylover.widget.MoneyAccountWidgetLight

android.appwidget.action.APPWIDGET_UPDATE
UPDATE_APPLICATION_FOR_CURRENT_USERITEM_BECAUSE_OF_SYNCING
UPDATE_APPLICATION_FOR_CURRENT_ACCOUNT_BECAUSE_OF_EDITING_TRANSACTIONS
UPDATE_CURRENT_WALLET_IN_USERITEM

com.zoostudio.moneylover.broadcast.InitReceiver

com.zoostudio.moneylover.utils.INIT

com.zoostudio.moneylover.broadcast.BootUpReceiver

android.intent.action.BOOT_COMPLETED

com.google.android.gms.analytics.AnalyticsReceiver

com.google.android.gms.analytics.ANALYTICS_DISPATCH

com.zoostudio.moneylover.ui.ActivityReceiverSmsBanking

com.zoostudio.moneylover.SMS_BANKING_RECEIVER

com.zoostudio.moneylover.broadcast.BroadcastSyncTimeout

com.zoostudio.moneylover.db.sync.MoneyCloud.TIMEOUT_ERROR

com.zoostudio.moneylover.ui.ActivitySendListWalletToSMSDetector

com.zoostudio.moneylover.GET_LIST_RECEIVER

com.zoostudio.moneylover.widget.AddTransactionWidget

android.appwidget.action.APPWIDGET_UPDATE

com.zoostudio.moneylover.broadcast.BroadcastUpdateBalanceQuickAdd

android.appwidget.action.APPWIDGET_UPDATE

com.zoostudio.moneylover.broadcast.BroadcastDownloadIconDone

android.intent.action.DOWNLOAD_COMPLETE

com.google.android.gms.analytics.AnalyticsReceiver

com.google.android.gms.analytics.ANALYTICS_DISPATCH

com.zoostudio.moneylover.broadcast.BroadcastInstallReferrer

com.android.vending.INSTALL_REFERRER

com.zoostudio.moneylover.widget.MoneyWidgetAccountDark

android.appwidget.action.APPWIDGET_UPDATE
UPDATE_APPLICATION_FOR_CURRENT_USERITEM_BECAUSE_OF_SYNCING
UPDATE_APPLICATION_FOR_CURRENT_ACCOUNT_BECAUSE_OF_EDITING_TRANSACTIONS
UPDATE_CURRENT_WALLET_IN_USERITEM

com.zoostudio.moneylover.widget.MoneyAccountWidgetLight

android.appwidget.action.APPWIDGET_UPDATE
UPDATE_APPLICATION_FOR_CURRENT_USERITEM_BECAUSE_OF_SYNCING
UPDATE_APPLICATION_FOR_CURRENT_ACCOUNT_BECAUSE_OF_EDITING_TRANSACTIONS
UPDATE_CURRENT_WALLET_IN_USERITEM

com.zoostudio.moneylover.broadcast.InitReceiver

com.zoostudio.moneylover.utils.INIT

com.zoostudio.moneylover.broadcast.BootUpReceiver

android.intent.action.BOOT_COMPLETED

com.evernote.android.job.v14.PlatformAlarmReceiver

com.evernote.android.job.v14.RUN_JOB
net.vrallev.android.job.v14.RUN_JOB

com.evernote.android.job.JobBootReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.QUICKBOOT_POWERON
com.htc.intent.action.QUICKBOOT_POWERON
android.intent.action.MY_PACKAGE_REPLACED

com.google.android.gms.measurement.AppMeasurementInstallReferrerReceiver

com.android.vending.INSTALL_REFERRER

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

com.facebook.CurrentAccessTokenExpirationBroadcastReceiver

com.facebook.sdk.ACTION_CURRENT_ACCESS_TOKEN_CHANGED

Services

com.zoostudio.moneylover.utils.AutoFillService

android.service.autofill.AutofillService

com.zoostudio.moneylover.service.DashClockExtensionService

com.google.android.apps.dashclock.Extension

com.bookmark.money.fcm.MLFirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

com.bookmark.money.fcm.MLFirebaseInstanceIDService

com.google.firebase.INSTANCE_ID_EVENT

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

com.evernote.android.job.gcm.PlatformGcmService

com.google.android.gms.gcm.ACTION_TASK_READY

com.google.firebase.iid.FirebaseInstanceIdService

com.google.firebase.INSTANCE_ID_EVENT

Android Permissions

d6ebcd9bddf28db234064ade3fa30824dc96dc93e5e1dbbb6ba2796f8cbc97d9

Permissions

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.INTERNET

android.permission.READ_EXTERNAL_STORAGE

android.permission.READ_CONTACTS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.VIBRATE

android.permission.WAKE_LOCK

android.permission.WRITE_EXTERNAL_STORAGE

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.UNINSTALL_SHORTCUT

com.android.vending.BILLING

com.google.android.c2dm.permission.RECEIVE

com.google.android.providers.gsf.permission.READ_GSERVICES

android.permission.VIBRATE

android.permission.USE_FINGERPRINT

android.permission.FOREGROUND_SERVICE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

Sharing

General

Malware Config

Signatures

Files

com.bookmark.money

com.zoostudio.moneylover.ui.ActivitySplash

Activities

com.zoostudio.moneylover.widget.ActivityPickerWalletForWidget

com.zoostudio.moneylover.ui.ActivitySplash

com.zoostudio.moneylover.ui.ActivityBase

com.facebook.CustomTabActivity

com.zoostudio.moneylover.ui.ActivityRestoreFileBackup

com.zoostudio.moneylover.linkedWallet.ui.activitys.ActivityLinkRemoteAccount

com.zoostudio.moneylover.ui.ActivityReceiverDeepLink

com.google.android.gms.appinvite.PreviewActivity

Permissions

Receivers

com.zoostudio.moneylover.widget.MoneyWidgetAccountDark

com.zoostudio.moneylover.widget.MoneyAccountWidgetLight

com.zoostudio.moneylover.broadcast.InitReceiver

com.zoostudio.moneylover.broadcast.BootUpReceiver

com.google.android.gms.analytics.AnalyticsReceiver

com.zoostudio.moneylover.ui.ActivityReceiverSmsBanking

com.zoostudio.moneylover.broadcast.BroadcastSyncTimeout

com.zoostudio.moneylover.ui.ActivitySendListWalletToSMSDetector

com.zoostudio.moneylover.widget.AddTransactionWidget

com.zoostudio.moneylover.broadcast.BroadcastUpdateBalanceQuickAdd

com.zoostudio.moneylover.broadcast.BroadcastDownloadIconDone

com.google.android.gms.analytics.AnalyticsReceiver

com.zoostudio.moneylover.broadcast.BroadcastInstallReferrer

com.zoostudio.moneylover.widget.MoneyWidgetAccountDark

com.zoostudio.moneylover.widget.MoneyAccountWidgetLight

com.zoostudio.moneylover.broadcast.InitReceiver

com.zoostudio.moneylover.broadcast.BootUpReceiver

com.evernote.android.job.v14.PlatformAlarmReceiver

com.evernote.android.job.JobBootReceiver

com.google.android.gms.measurement.AppMeasurementInstallReferrerReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.facebook.CurrentAccessTokenExpirationBroadcastReceiver

Services

com.zoostudio.moneylover.utils.AutoFillService

com.zoostudio.moneylover.service.DashClockExtensionService

com.bookmark.money.fcm.MLFirebaseMessagingService

com.bookmark.money.fcm.MLFirebaseInstanceIDService

com.google.firebase.messaging.FirebaseMessagingService

com.evernote.android.job.gcm.PlatformGcmService

com.google.firebase.iid.FirebaseInstanceIdService

Android Permissions

d6ebcd9bddf28db234064ade3fa30824dc96dc93e5e1dbbb6ba2796f8cbc97d9