General

  • Target

    c14dbeb7bc28b2f4bd635abc21908aae68567c4f3eea65ad0141fc52dfa78556

  • Size

    85.7MB

  • MD5

    debb2a7bb71752d4461db7921aadddd1

  • SHA1

    ac46bd77bc386a1db3b3bd073b5e609a78063d7c

  • SHA256

    c14dbeb7bc28b2f4bd635abc21908aae68567c4f3eea65ad0141fc52dfa78556

  • SHA512

    2f5a6d266c8682b6e571a273d260b9b8fd808e8dab7a62900bfc3c1f85d0d2ce9285d99eb5eeb95d6c73884eda1de517e83145691d696dc6015e53ab2252f532

  • SSDEEP

    786432:jZXvO65pqoUOldW+d52BY06gzmc3ImVHZGV453zwXeo8ZTHMlnrAk/90EuKL+:FXW65Y+syDNuVHZ44RVrZHMRAk/90ER+

Score
10/10

Malware Config

Signatures

  • Android Xamalicious payload 2 IoCs
  • Xamalicious family
  • Requests dangerous framework permissions 7 IoCs

Files

  • c14dbeb7bc28b2f4bd635abc21908aae68567c4f3eea65ad0141fc52dfa78556
    .apk android arch:arm arch:arm64

    com.uhg.mobile.health4me

    crc641b1c91776503e649.LoginActivity


Android Permissions

c14dbeb7bc28b2f4bd635abc21908aae68567c4f3eea65ad0141fc52dfa78556

Permissions

com.google.android.providers.gsf.permission.READ_GSERVICES

android.permission.ACCESS_NETWORK_STATE

com.uhg.mobile.health4me.permission.MAPS_RECEIVE

com.google.android.c2dm.permission.RECEIVE

com.uhg.mobile.health4me.permission.C2D_MESSAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.CAMERA

android.permission.INTERNET

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.READ_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

android.permission.CALL_PHONE

android.permission.WAKE_LOCK

android.permission.USE_FINGERPRINT

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE