com_global_foodpanda_android_v24[.]7[.]1[.]apk

General

Target

com_global_foodpanda_android_v24.7.1.apk
Size

29.1MB
MD5

53d9af87e92a59cbb275ff85a44a89f3
SHA1

c2781ede3903d50666c144d341f4277cf20478dd
SHA256

5b0b31266a24748ce4d94b2d5c4ba8b617047906f66de13edc63e4ee299fa954
SHA512

b4000ce2a07473bd6a9c740c48d414b720a3502375eccbfe708e8fc0a61e8ae977893da8601f6697bc3639f0531a8aa0c659dadd2b701049b2194fc3ab31fa7a
SSDEEP

786432:zQOXLNUkWIt5Rz78/7+bsZQNWN4PEMS2IfNjvx:zQOXa9mDz7sthNbpX7

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE

Requests dangerous framework permissions 12 IoCs

description	ioc
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an application to read the user's calendar data.	android.permission.READ_CALENDAR
Allows an application to write the user's calendar data.	android.permission.WRITE_CALENDAR
Required to be able to access the camera device.	android.permission.CAMERA
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read image files from external storage.	android.permission.READ_MEDIA_IMAGES
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to record audio.	android.permission.RECORD_AUDIO
Required to be able to connect to paired Bluetooth devices.	android.permission.BLUETOOTH_CONNECT

Files

com_global_foodpanda_android_v24.7.1.apk
.apk android

com.global.foodpanda.android

com.deliveryhero.applaunch.launcher.LauncherActivity

Activities

com.deliveryhero.auth.oauth.OauthActivity

android.intent.action.VIEW
android.intent.action.VIEW

com.facebook.CustomTabActivity

android.intent.action.VIEW

com.deliveryhero.payment.cashier.PaymentActivity

android.intent.action.VIEW

com.deliveryhero.cobrandedcard.applink.ui.CobrandedCardDeepLinkActivity

android.intent.action.VIEW

com.deliveryhero.inapprating.InAppRatingActivity

android.intent.action.VIEW

com.google.android.gms.tagmanager.TagManagerPreviewActivity

android.intent.action.VIEW

Permissions

android.permission.FOREGROUND_SERVICE_DATA_SYNC
android.permission.FOREGROUND_SERVICE_MICROPHONE
android.permission.FOREGROUND_SERVICE_PHONE_CALL
com.adjust.preinstall.READ_PERMISSION
com.global.foodpanda.android.permission.A4S_SEND
.permission.MAPS_RECEIVE
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
com.google.android.providers.gsf.permission.READ_GSERVICES
android.permission.ACCESS_WIFI_STATE
android.permission.VIBRATE
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.READ_CONTACTS
android.permission.POST_NOTIFICATIONS
android.permission.READ_CALENDAR
android.permission.WRITE_CALENDAR
android.permission.CAMERA
android.permission.WAKE_LOCK
android.permission.READ_PHONE_STATE
android.permission.HIGH_SAMPLING_RATE_SENSORS
android.permission.READ_MEDIA_IMAGES
android.permission.READ_EXTERNAL_STORAGE
android.permission.FOREGROUND_SERVICE
android.permission.USE_BIOMETRIC
android.permission.USE_FINGERPRINT
com.google.android.c2dm.permission.RECEIVE
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
com.google.android.gms.permission.AD_ID
android.permission.ACCESS_ADSERVICES_ATTRIBUTION
android.permission.ACCESS_ADSERVICES_AD_ID
android.permission.BLUETOOTH
android.permission.BROADCAST_STICKY
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.RECORD_AUDIO
android.permission.USE_FULL_SCREEN_INTENT
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.BLUETOOTH_CONNECT
android.permission.CHANGE_NETWORK_STATE
com.global.foodpanda.android.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Receivers

com.deliveryhero.marketing.braze.BrazeBroadcastReceiver

com.braze.push.intent.NOTIFICATION_RECEIVED
com.braze.push.intent.NOTIFICATION_OPENED

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

com.facebook.CurrentAccessTokenExpirationBroadcastReceiver

com.facebook.sdk.ACTION_CURRENT_ACCESS_TOKEN_CHANGED

com.facebook.AuthenticationTokenManager$CurrentAuthenticationTokenChangedBroadcastReceiver

com.facebook.sdk.ACTION_CURRENT_AUTHENTICATION_TOKEN_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY
android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW
android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.TIME_SET
android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.work.diagnostics.REQUEST_DIAGNOSTICS

androidx.profileinstaller.ProfileInstallReceiver

androidx.profileinstaller.action.INSTALL_PROFILE
androidx.profileinstaller.action.SKIP_FILE
androidx.profileinstaller.action.SAVE_PROFILE
androidx.profileinstaller.action.BENCHMARK_OPERATION

com.instacart.library.truetime.BootCompletedBroadcastReceiver

android.intent.action.BOOT_COMPLETED

Services

com.deliveryhero.push.service.sp.PushMessagingService

com.google.firebase.MESSAGING_EVENT

com.shakebugs.shake.internal.shake.notification.ShakeNotificationListenerService

android.service.notification.NotificationListenerService

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

Android Permissions

com_global_foodpanda_android_v24.7.1.apk

Permissions

android.permission.FOREGROUND_SERVICE_DATA_SYNC

android.permission.FOREGROUND_SERVICE_MICROPHONE

android.permission.FOREGROUND_SERVICE_PHONE_CALL

com.adjust.preinstall.READ_PERMISSION

com.global.foodpanda.android.permission.A4S_SEND

.permission.MAPS_RECEIVE

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

com.google.android.providers.gsf.permission.READ_GSERVICES

android.permission.ACCESS_WIFI_STATE

android.permission.VIBRATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.READ_CONTACTS

android.permission.POST_NOTIFICATIONS

android.permission.READ_CALENDAR

android.permission.WRITE_CALENDAR

android.permission.CAMERA

android.permission.WAKE_LOCK

android.permission.READ_PHONE_STATE

android.permission.HIGH_SAMPLING_RATE_SENSORS

android.permission.READ_MEDIA_IMAGES

android.permission.READ_EXTERNAL_STORAGE

android.permission.FOREGROUND_SERVICE

android.permission.USE_BIOMETRIC

android.permission.USE_FINGERPRINT

com.google.android.c2dm.permission.RECEIVE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

com.google.android.gms.permission.AD_ID

android.permission.ACCESS_ADSERVICES_ATTRIBUTION

android.permission.ACCESS_ADSERVICES_AD_ID

android.permission.BLUETOOTH

android.permission.BROADCAST_STICKY

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.RECORD_AUDIO

android.permission.USE_FULL_SCREEN_INTENT

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.BLUETOOTH_CONNECT

android.permission.CHANGE_NETWORK_STATE

com.global.foodpanda.android.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Sharing

General

Malware Config

Signatures

Files