General

  • Target

    e7873a1af0dd823b6b45bad331666c31561d0554f300a539a52859f03d3d4059

  • Size

    85.7MB

  • MD5

    0fbf430746e715af26967fc101df7188

  • SHA1

    7c3e1827e2851fd5dad011dd6f4554954144a38c

  • SHA256

    e7873a1af0dd823b6b45bad331666c31561d0554f300a539a52859f03d3d4059

  • SHA512

    485a1423442c58275d10fc540cac041b8319e78a402c167181380aca71e2b83c24f7b6abbd5c69e2e8d4166308edb4a994c052ca1db0472e5a855acc3ef2cb45

  • SSDEEP

    786432:jZXvO65pqoUOldW+d52BY06gzmc3ImVHZGV453zwXeo8ZTHMlnrAk/90EuKLm:FXW65Y+syDNuVHZ44RVrZHMRAk/90ERm

Score
10/10

Malware Config

Signatures

  • Android Xamalicious payload 2 IoCs
  • Xamalicious family
  • Requests dangerous framework permissions 7 IoCs

Files

  • e7873a1af0dd823b6b45bad331666c31561d0554f300a539a52859f03d3d4059
    .apk android arch:arm arch:arm64

    com.uhg.mobile.health4me

    crc641b1c91776503e649.LoginActivity


Android Permissions

e7873a1af0dd823b6b45bad331666c31561d0554f300a539a52859f03d3d4059

Permissions

com.google.android.providers.gsf.permission.READ_GSERVICES

android.permission.ACCESS_NETWORK_STATE

com.uhg.mobile.health4me.permission.MAPS_RECEIVE

com.google.android.c2dm.permission.RECEIVE

com.uhg.mobile.health4me.permission.C2D_MESSAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.CAMERA

android.permission.INTERNET

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.READ_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

android.permission.CALL_PHONE

android.permission.WAKE_LOCK

android.permission.USE_FINGERPRINT

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE