D3F5796629FAC2104CC77B8E17AC52B9C7A8C7FB3FF6EA1D4F071011224773B8[.]apk

Sharing

Copy URL Twitter E-mail

General

Target

D3F5796629FAC2104CC77B8E17AC52B9C7A8C7FB3FF6EA1D4F071011224773B8.apk
Size

47.7MB
MD5

10566a25dd21e1429949a14468bd80a5
SHA1

88cda8305ee56ddbb8264ab5bacd5cd4e14bb766
SHA256

d3f5796629fac2104cc77b8e17ac52b9c7a8c7fb3ff6ea1d4f071011224773b8
SHA512

fbc76de6abd231737fa36af6023ade4cec9bc64ca7bd77643fabd43f9feedafa605af73527ad65d2afe38ed45750fa135551a65919cc8516710019c704bd9cfc
SSDEEP

786432:TLbDl30eukisSgW6S0ynj9t5hiW1RbU1pVb:/bDlE7xsPXGiW1RbUxb

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by remote views services to bind with the system. Allows apps to share and display views across different processes.	android.permission.BIND_REMOTEVIEWS
Required by remote views services to bind with the system. Allows apps to share and display views across different processes.	android.permission.BIND_REMOTEVIEWS

Requests dangerous framework permissions 11 IoCs

description	ioc
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to read the user's calendar data.	android.permission.READ_CALENDAR
Allows an application to write the user's calendar data.	android.permission.WRITE_CALENDAR
Allows an application to read image files from external storage.	android.permission.READ_MEDIA_IMAGES
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Required to be able to access the camera device.	android.permission.CAMERA
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE

Files

D3F5796629FAC2104CC77B8E17AC52B9C7A8C7FB3FF6EA1D4F071011224773B8.apk
.apk android

com.discoverfinancial.mobile

s4e59fe37.ec1477b93.s505225f7.tdd32f9a7

Activities

s4e59fe37.ec1477b93.s505225f7.tdd32f9a7

android.intent.action.MAIN
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW

Permissions

com.discoverfinancial.mobile.permission.C2D_MESSAGE
com.google.android.c2dm.permission.RECEIVE
android.permission.WAKE_LOCK
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.INTERNET
android.permission.ACCESS_FINE_LOCATION
android.permission.VIBRATE
android.permission.ACCESS_NETWORK_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_EXTERNAL_STORAGE
android.permission.READ_CALENDAR
android.permission.WRITE_CALENDAR
android.permission.READ_MEDIA_IMAGES
android.permission.POST_NOTIFICATIONS
android.permission.CAMERA
android.permission.BLUETOOTH
android.permission.BLUETOOTH_ADMIN
android.permission.INTERACT_ACROSS_USERS_FULL
android.permission.FOREGROUND_SERVICE
android.permission.USE_BIOMETRIC
com.samsung.android.providers.context.permission.WRITE_USE_APP_FEATURE_SURVEY
com.google.android.providers.gsf.permission.READ_GSERVICES
org.fidoalliance.uaf.permissions.FIDO_CLIENT
android.permission.READ_PHONE_STATE
android.permission.USE_FINGERPRINT
android.permission.READ_CONTACTS
android.permission.CALL_PHONE
android.permission.ACCESS_WIFI_STATE
android.permission.DOWNLOAD_WITHOUT_NOTIFICATION
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
com.discoverfinancial.mobile.deveventspermission

Receivers

com.discoverfinancial.mobile.core.watson.MceEventReceiver

co.acoustic.mobile.push.sdk.EVENT_NCK
com.discover.mobile.notificationdismiss
com.discover.mobile.androidwear.notificationdismiss
com.discover.mobile.notificationactionpress

com.discoverfinancial.mobile.core.watson.MceNotifier

co.acoustic.mobile.push.sdk.NOTIFIER
co.acoustic.mobile.push.sdk.EVENT_NCK

co.w3827b74d.s505225f7.r75bfb513.s2c3d9100.wi.r113f0721

android.intent.action.BOOT_COMPLETED
android.intent.action.TIMEZONE_CHANGED
android.intent.action.LOCALE_CHANGED
android.intent.action.PACKAGE_REPLACED

s4e59fe37.ec1477b93.s505225f7.s855c7e33.b0c504330.a7baa4d11

com.discover.mobile.card.WearQuickView
com.discover.mobile.card.WearSettings
com.discover.mobile.card.WearSettingsEnabledorDisabled
com.discover.mobile.card.analytics.normalUserAccountSummary
com.discover.mobile.card.analytics.ssoUserAccountSummary
com.discover.mobile.card.analytics.turnOnSettingsPage
com.discover.mobile.card.analytics.appLaunch

s4e59fe37.ec1477b93.s505225f7.s855c7e33.b0c504330.hd502ca25

com.discover.mobile.androidwear.NAV_DEEPLINK

com.discover.mobile.card.fastcheck.LargeQuickViewWidgetProvider

android.appwidget.action.APPWIDGET_UPDATE
android.appwidget.action.APPWIDGET_ENABLED
com.discover.mobile.card.QuickViewEnabled
com.discover.mobile.card.QuickViewDisabled
com.discover.mobile.card.QuickViewOrientationChanged

com.discover.mobile.card.fastcheck.widget.uni.helper.BankQuickviewWidgetProvider

android.appwidget.action.APPWIDGET_UPDATE
android.appwidget.action.APPWIDGET_ENABLED
com.discover.mobile.bank.QuickViewEnabled
com.discover.mobile.bank.QuickViewDisabled
com.discover.mobile.bank.ui.widgets.TOAST_ACTION

s4e59fe37.mc0517eaf.abb270287.s2c3d9100.f2bccb580.h6cb70114

android.intent.action.BOOT_COMPLETED
android.intent.action.LOCALE_CHANGED
android.intent.action.MY_PACKAGE_REPLACED

s4e59fe37.mc0517eaf.abb270287.s2c3d9100.f2bccb580.s15945ea6

android.net.conn.CONNECTIVITY_CHANGE

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY
android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW
android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.TIME_SET
android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.work.diagnostics.REQUEST_DIAGNOSTICS

Services

s4e59fe37.ec1477b93.s505225f7.s855c7e33.b0c504330.b1a14555a

com.google.android.gms.wearable.DATA_CHANGED
com.google.android.gms.wearable.MESSAGE_RECEIVED

com.discoverfinancial.mobile.core.watson.DFSMessagingService

com.google.firebase.MESSAGING_EVENT

co.w3827b74d.s505225f7.r75bfb513.s2c3d9100.s71e58944.k07c5082a.e33cf0cbd

com.google.firebase.MESSAGING_EVENT

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

Android Permissions

D3F5796629FAC2104CC77B8E17AC52B9C7A8C7FB3FF6EA1D4F071011224773B8.apk

Permissions

com.discoverfinancial.mobile.permission.C2D_MESSAGE

com.google.android.c2dm.permission.RECEIVE

android.permission.WAKE_LOCK

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.INTERNET

android.permission.ACCESS_FINE_LOCATION

android.permission.VIBRATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.READ_CALENDAR

android.permission.WRITE_CALENDAR

android.permission.READ_MEDIA_IMAGES

android.permission.POST_NOTIFICATIONS

android.permission.CAMERA

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.INTERACT_ACROSS_USERS_FULL

android.permission.FOREGROUND_SERVICE

android.permission.USE_BIOMETRIC

com.samsung.android.providers.context.permission.WRITE_USE_APP_FEATURE_SURVEY

com.google.android.providers.gsf.permission.READ_GSERVICES

org.fidoalliance.uaf.permissions.FIDO_CLIENT

android.permission.READ_PHONE_STATE

android.permission.USE_FINGERPRINT

android.permission.READ_CONTACTS

android.permission.CALL_PHONE

android.permission.ACCESS_WIFI_STATE

android.permission.DOWNLOAD_WITHOUT_NOTIFICATION

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

com.discoverfinancial.mobile.deveventspermission

Sharing

General

Malware Config

Signatures

Files

com.discoverfinancial.mobile

s4e59fe37.ec1477b93.s505225f7.tdd32f9a7

Activities

s4e59fe37.ec1477b93.s505225f7.tdd32f9a7

Permissions

Receivers

com.discoverfinancial.mobile.core.watson.MceEventReceiver

com.discoverfinancial.mobile.core.watson.MceNotifier

co.w3827b74d.s505225f7.r75bfb513.s2c3d9100.wi.r113f0721

s4e59fe37.ec1477b93.s505225f7.s855c7e33.b0c504330.a7baa4d11

s4e59fe37.ec1477b93.s505225f7.s855c7e33.b0c504330.hd502ca25

com.discover.mobile.card.fastcheck.LargeQuickViewWidgetProvider

com.discover.mobile.card.fastcheck.widget.uni.helper.BankQuickviewWidgetProvider

s4e59fe37.mc0517eaf.abb270287.s2c3d9100.f2bccb580.h6cb70114

s4e59fe37.mc0517eaf.abb270287.s2c3d9100.f2bccb580.s15945ea6

com.google.firebase.iid.FirebaseInstanceIdReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.diagnostics.DiagnosticsReceiver

Services

s4e59fe37.ec1477b93.s505225f7.s855c7e33.b0c504330.b1a14555a

com.discoverfinancial.mobile.core.watson.DFSMessagingService

co.w3827b74d.s505225f7.r75bfb513.s2c3d9100.s71e58944.k07c5082a.e33cf0cbd

com.google.firebase.messaging.FirebaseMessagingService

Android Permissions

D3F5796629FAC2104CC77B8E17AC52B9C7A8C7FB3FF6EA1D4F071011224773B8.apk