63d96466c4b53bebe6b0f258053dbf46[.]bin

General

Target

63d96466c4b53bebe6b0f258053dbf46.bin
Size

17.5MB
MD5

fde4c9023688e0b3b0fe3d73e265fb50
SHA1

c3d8055e89c65813a9327253f27a1b2d3e9c87b3
SHA256

fc359cd5cbe9424595fd03b5348ebc0b3f54c5e74bcbe558be79efda8fc2bf89
SHA512

3d2b7094bd69f09663768133e7c06e75b5f1ea7bd4353e5517e382783104e0770906f4b36ab3cc4e0e6d67ed0988a52f8284b6bc84bbfb5a3a9e483c446cea13
SSDEEP

393216:UB8AaAe7M3lyjZqwFD/Cc/zvkG1y6HZLmSwVZp9lutYKs7jclu:wbabA3kUXcTvy6UtVZpGm7jcA

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 1 IoCs

description	ioc
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS

Files

63d96466c4b53bebe6b0f258053dbf46.bin
.zip

Password: infected
2dedf00fa0e173e923d45f7ecb4dc1894f22ac61d600c5023f321ab9227f8ea9.apk
.apk android

Password: infected

com.einnovation.temu

com.baogong.splash.activity.MainFrameActivity

Activities

com.adyen.threeds2.internal.ui.activity.ChallengeActivity

android.intent.action.VIEW

com.baogong.activity.NewPageActivity

com.einnovation.whaleco.ACTION_NEW_PAGE_ACTIVITY

com.baogong.activity.NewPageActivity2

com.einnovation.whaleco.ACTION_NEW_PAGE_ACTIVITY2

com.baogong.activity.NewPageMaskActivity

com.einnovation.whaleco.ACTION_NEW_PAGE_MASK_ACTIVITY

com.facebook.CustomTabActivity

android.intent.action.VIEW
android.intent.action.VIEW

com.baogong.splash.activity.MainFrameActivity

android.intent.action.MAIN
xmg.mobilebase.router.ACTION_NEW_PAGE_ACTIVITY
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW

com.einnovation.whaleco.pay.auth.braintree.BraintreeSdkActivity

android.intent.action.VIEW

com.linecorp.linesdk.auth.internal.LineAuthenticationCallbackActivity

android.intent.action.VIEW

com.braintreepayments.api.BraintreeDeepLinkActivity

android.intent.action.VIEW

Permissions

android.permission.INTERNET
android.permission.ACCESS_WIFI_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.WAKE_LOCK
com.google.android.gms.permission.AD_ID
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
android.permission.VIBRATE
android.permission.POST_NOTIFICATIONS
com.adjust.preinstall.READ_PERMISSION
android.permission.RECEIVE_BOOT_COMPLETED
com.google.android.c2dm.permission.RECEIVE
com.einnovation.temu.remote_config

Receivers

com.adyen.threeds2.internal.AppUpgradeBroadcastReceiver

android.intent.action.MY_PACKAGE_REPLACED

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

com.einnovation.temu.receiver.tea.SystemReceiver

android.intent.action.MEDIA_MOUNTED
android.intent.action.MEDIA_CHECKING
android.intent.action.MEDIA_EJECT
android.intent.action.TIME_SET
android.intent.action.TIMEZONE_CHANGED
android.intent.action.BOOT_COMPLETED
android.intent.action.USER_PRESENT
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED

com.einnovation.temu.receiver.tea.SystemReceiver2

android.app.action.NEXT_ALARM_CLOCK_CHANGED

com.facebook.CurrentAccessTokenExpirationBroadcastReceiver

com.facebook.sdk.ACTION_CURRENT_ACCESS_TOKEN_CHANGED

com.facebook.AuthenticationTokenManager$CurrentAuthenticationTokenChangedBroadcastReceiver

com.facebook.sdk.ACTION_CURRENT_AUTHENTICATION_TOKEN_CHANGED

com.einnovation.whaleco.web.resourceprefetch.ResourcePrefetchBroadcastReceiver

com.einnovation.whaleco.uno.TRY_INIT_WEBVIEW_KERNEL

meco.sdk.core.dex.MecoBroadcastManager

com.android.meco.MECO_DEX_PATH_ERROR

Services

com.baogong.push.WhaleCoFirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

com.einnovation.temu.service.tide.UserAuthService

android.accounts.AccountAuthenticator

com.einnovation.temu.service.tide.UserModuleService

android.content.SyncAdapter

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

Sharing

General

Malware Config

Signatures

Files

Password: infected

Password: infected

com.einnovation.temu

com.baogong.splash.activity.MainFrameActivity

Activities

com.adyen.threeds2.internal.ui.activity.ChallengeActivity

com.baogong.activity.NewPageActivity

com.baogong.activity.NewPageActivity2

com.baogong.activity.NewPageMaskActivity

com.facebook.CustomTabActivity

com.baogong.splash.activity.MainFrameActivity

com.einnovation.whaleco.pay.auth.braintree.BraintreeSdkActivity

com.linecorp.linesdk.auth.internal.LineAuthenticationCallbackActivity

com.braintreepayments.api.BraintreeDeepLinkActivity

Permissions

Receivers

com.adyen.threeds2.internal.AppUpgradeBroadcastReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.einnovation.temu.receiver.tea.SystemReceiver

com.einnovation.temu.receiver.tea.SystemReceiver2

com.facebook.CurrentAccessTokenExpirationBroadcastReceiver

com.facebook.AuthenticationTokenManager$CurrentAuthenticationTokenChangedBroadcastReceiver

com.einnovation.whaleco.web.resourceprefetch.ResourcePrefetchBroadcastReceiver

meco.sdk.core.dex.MecoBroadcastManager

Services

com.baogong.push.WhaleCoFirebaseMessagingService

com.einnovation.temu.service.tide.UserAuthService

com.einnovation.temu.service.tide.UserModuleService

com.google.firebase.messaging.FirebaseMessagingService