cash_public[.]apk

General

Target

cash_public.apk
Size

7.9MB
MD5

eeee4373d245099ed5a38f28501d0c5f
SHA1

d9396f05cf6deaed9896fda0b5abdcbc34718858
SHA256

0476633d70dbdec5ec14c70072e764b97cddeeaaa320aef57f2bdf9afe7d8616
SHA512

99b0ecc94068f51c53d4c13f36aa5523c8c906b7bad69ec3c12093a1c3e749aee47a44204a6af6e4e8f18c43e96462fb7193ca2245c87caa590d18bba707a6f7
SSDEEP

196608:9QPRoGZ1xBxTLlmlqFIH6c9gdEQKhsbElGnFHT406LDbX96F3sAKB1:9QZpZXyH6XdpQsS440wDr4FI1

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 11 IoCs

description	ioc
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Required to be able to access the camera device.	android.permission.CAMERA
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE

Files

cash_public.apk
.apk android

com.loan.cash.pubmfic.mnjdms.lopdnmq

com.loan.cash.pubmfic.mnjdms.lopdnmq.ui.activity.ScxbjsActivity

Activities

com.loan.cash.pubmfic.mnjdms.lopdnmq.ui.activity.ScxbjsActivity

android.intent.action.MAIN
android.intent.action.VIEW
android.intent.action.VIEW

com.facebook.CustomTabActivity

android.intent.action.VIEW

Permissions

android.permission.BLUETOOTH
android.permission.BLUETOOTH_ADMIN
android.permission.READ_CLIPBOARD
android.permission.READ_SMS
android.permission.READ_CONTACTS
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.SYSTEM_ALERT_WINDOW
android.permission.HIDE_OVERLAY_WINDOWS
android.permission.READ_EXTERNAL_STORAGE
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.USE_CREDENTIALS
android.permission.GET_ACCOUNTS
android.permission.READ_PROFILE
android.permission.ACCESS_NETWORK_STATE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.BROADCAST_STICKY
android.permission.KILL_BACKGROUND_PROCESSES
android.permission.GET_TASKS
android.permission.VIBRATE
android.permission.RECORD_AUDIO
android.permission.CHANGE_NETWORK_STATE
android.permission.CALL_PHONE
android.permission.INTERNET
com.android.launcher.permission.READ_SETTINGS
android.permission.CAMERA
android.permission.READ_PHONE_STATE
android.permission.WAKE_LOCK
android.permission.FOREGROUND_SERVICE
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
android.permission.REORDER_TASKS
com.google.android.gms.permission.AD_ID
com.google.android.gms.permission.AD_ID
com.google.android.c2dm.permission.RECEIVE

Receivers

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

com.facebook.CurrentAccessTokenExpirationBroadcastReceiver

com.facebook.sdk.ACTION_CURRENT_ACCESS_TOKEN_CHANGED

Services

com.loan.cash.pubmfic.mnjdms.lopdnmq.ui.activity.Service

com.google.firebase.MESSAGING_EVENT

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

Android Permissions

cash_public.apk

Permissions

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.READ_CLIPBOARD

android.permission.READ_SMS

android.permission.READ_CONTACTS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.HIDE_OVERLAY_WINDOWS

android.permission.READ_EXTERNAL_STORAGE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.USE_CREDENTIALS

android.permission.GET_ACCOUNTS

android.permission.READ_PROFILE

android.permission.ACCESS_NETWORK_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.BROADCAST_STICKY

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.GET_TASKS

android.permission.VIBRATE

android.permission.RECORD_AUDIO

android.permission.CHANGE_NETWORK_STATE

android.permission.CALL_PHONE

android.permission.INTERNET

com.android.launcher.permission.READ_SETTINGS

android.permission.CAMERA

android.permission.READ_PHONE_STATE

android.permission.WAKE_LOCK

android.permission.FOREGROUND_SERVICE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.REORDER_TASKS

com.google.android.gms.permission.AD_ID

com.google.android.c2dm.permission.RECEIVE

Sharing

General

Malware Config

Signatures

Files

com.loan.cash.pubmfic.mnjdms.lopdnmq

com.loan.cash.pubmfic.mnjdms.lopdnmq.ui.activity.ScxbjsActivity

Activities

com.loan.cash.pubmfic.mnjdms.lopdnmq.ui.activity.ScxbjsActivity

com.facebook.CustomTabActivity

Permissions

Receivers

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.facebook.CurrentAccessTokenExpirationBroadcastReceiver

Services

com.loan.cash.pubmfic.mnjdms.lopdnmq.ui.activity.Service

com.google.firebase.messaging.FirebaseMessagingService

Android Permissions

cash_public.apk