VerseAndroid_12[.]0[.]22_202305251921_flexNet[.]apk

Sharing

Copy URL Twitter E-mail

General

Target

VerseAndroid_12.0.22_202305251921_flexNet.apk
Size

45.6MB
MD5

92003c6eb4eb912ed2bf1d7b14938571
SHA1

ce707fb3cf3577becfc3cc0f5ec3b84b5db21e2a
SHA256

61c364633606f1cbdfd43e7e46b5212f9fea34371e15d5c97a9df77681fac86f
SHA512

c0e9177508b71282c9309540eb0572f323fe46eeae94522e36fe23e49b5bb9e6f1792b5385867c4bcee6c8b2b201e1c068cc4778aeabe496e39e3164d92e9360
SSDEEP

786432:7xTObRk4T1+zuksj+n7ezF7bUWx0fQHK2:1OdbUz27zF1gv2

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 4 IoCs

description	ioc
Required by remote views services to bind with the system. Allows apps to share and display views across different processes.	android.permission.BIND_REMOTEVIEWS
Required by remote views services to bind with the system. Allows apps to share and display views across different processes.	android.permission.BIND_REMOTEVIEWS
Required by remote views services to bind with the system. Allows apps to share and display views across different processes.	android.permission.BIND_REMOTEVIEWS
Required by remote views services to bind with the system. Allows apps to share and display views across different processes.	android.permission.BIND_REMOTEVIEWS

Requests dangerous framework permissions 12 IoCs

description	ioc
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read the user's calendar data.	android.permission.READ_CALENDAR
Allows an application to write the user's calendar data.	android.permission.WRITE_CALENDAR
Allows applications to use exact alarm APIs.	android.permission.SCHEDULE_EXACT_ALARM
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an application to collect component usage statistics.	android.permission.PACKAGE_USAGE_STATS
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE

Files

VerseAndroid_12.0.22_202305251921_flexNet.apk
.apk android arch:arm64 arch:arm arch:x86 arch:x64

com.lotus.sync.traveler

com.lotus.sync.traveler.LotusTraveler

Activities

com.lotus.sync.traveler.LotusTraveler

android.intent.action.MAIN
android.intent.action.VIEW

com.lotus.sync.traveler.LotusMail

android.intent.action.MAIN
android.intent.action.VIEW
android.intent.action.SEND
android.intent.action.SEND_MULTIPLE
android.intent.action.VIEW
android.intent.action.SEND
android.intent.action.SEND_MULTIPLE
android.intent.action.VIEW
android.intent.action.SEND
android.intent.action.SEND_MULTIPLE

com.lotus.sync.traveler.LotusMailNeedsAction

android.intent.action.MAIN

com.lotus.sync.traveler.LotusMailWaitingFor

android.intent.action.MAIN

com.lotus.sync.traveler.LotusActions

android.intent.action.MAIN
android.intent.action.VIEW

com.lotus.sync.traveler.LotusActionsNeedsAction

android.intent.action.MAIN

com.lotus.sync.traveler.LotusActionsWaitingFor

android.intent.action.MAIN

com.lotus.sync.traveler.SearchActivity

android.intent.action.SEARCH

com.lotus.sync.traveler.mail.Compose

android.intent.action.SENDTO
android.intent.action.SEND
android.intent.action.SEND_MULTIPLE
android.intent.action.VIEW

com.lotus.sync.traveler.contacts.ContactsLauncherActivity

android.intent.action.MAIN

com.lotus.sync.traveler.contacts.ContactsActivity

android.intent.action.VIEW

com.lotus.sync.traveler.contacts.ContactDetailsActivity

com.lotus.sync.traveler.VIEW_CONTACT
android.provider.action.QUICK_CONTACT

com.lotus.sync.traveler.contacts.ContactEditorActivity

android.intent.action.INSERT
android.intent.action.INSERT
android.intent.action.EDIT

com.lotus.sync.traveler.calendar.LotusCalendar

android.intent.action.MAIN
android.intent.action.VIEW

com.lotus.sync.traveler.calendar.EventEditorActivity

android.intent.action.MAIN

com.lotus.sync.traveler.calendar.EventViewActivity

android.intent.action.MAIN
android.provider.calendar.action.HANDLE_CUSTOM_EVENT
android.intent.action.VIEW

com.lotus.sync.traveler.todo.LotusToDo

android.intent.action.MAIN

com.lotus.sync.traveler.todo.SearchTodosActivity

android.intent.action.SEARCH

com.lotus.sync.traveler.widgets.LotusWidget$InitialConfigActivity

android.appwidget.action.APPWIDGET_CONFIGURE

com.lotus.sync.traveler.widgets.MailWidget$DynamicLaunchActivity

android.appwidget.action.APPWIDGET_CONFIGURE

com.lotus.sync.traveler.widgets.MailWidget$MailInitialConfigActivity

android.appwidget.action.APPWIDGET_CONFIGURE

com.lotus.sync.traveler.widgets.ToDoWidget$DynamicLaunchActivity

android.appwidget.action.APPWIDGET_CONFIGURE

com.lotus.sync.traveler.widgets.ToDoWidget$TodoInitialConfigActivity

android.appwidget.action.APPWIDGET_CONFIGURE

com.lotus.android.common.mdm.SecureBrowserLauncherActivity

android.intent.action.VIEW
android.intent.action.VIEW

com.lotus.sync.traveler.android.common.FeatureToggleActivity

android.intent.action.VIEW

Permissions

android.permission.INTERNET
android.permission.REQUEST_PASSWORD_COMPLEXITY
android.permission.ACCESS_NETWORK_STATE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.READ_CONTACTS
android.permission.WRITE_CONTACTS
android.permission.GET_ACCOUNTS
android.permission.MANAGE_ACCOUNTS
android.permission.AUTHENTICATE_ACCOUNTS
android.permission.READ_PHONE_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.GET_TASKS
android.permission.RESTART_PACKAGES
android.permission.READ_SYNC_SETTINGS
android.permission.WRITE_SYNC_SETTINGS
android.permission.VIBRATE
android.permission.CALL_PHONE
android.permission.WAKE_LOCK
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.READ_CALENDAR
android.permission.WRITE_CALENDAR
com.lotus.sync.traveler.problemReport
com.lotus.android.common.integration.ACCESS
android.permission.FOREGROUND_SERVICE
android.permission.REQUEST_DELETE_PACKAGES
android.permission.SCHEDULE_EXACT_ALARM
android.permission.USE_EXACT_ALARM
android.permission.POST_NOTIFICATIONS
android.permission.PACKAGE_USAGE_STATS
android.permission.READ_EXTERNAL_STORAGE
com.google.android.c2dm.permission.RECEIVE
com.google.android.gms.permission.AD_ID
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
com.lotus.sync.traveler.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Receivers

com.lotus.sync.traveler.android.service.BroadcastReceiver

android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED
android.intent.action.ACTION_AIRPLANE_MODE_CHANGED
android.intent.action.BATTERY_LOW
android.intent.action.DEVICE_STORAGE_OK
android.intent.action.TIMEZONE_CHANGED
com.lotus.sync.traveler.android.service.SheduledSyncIntervalCrossover
com.lotus.sync.traveler.android.service.ControllerWait
com.lotus.sync.traveler.broadcast.needsActionAlarmExpired
android.intent.action.PACKAGE_REPLACED

com.lotus.sync.traveler.DeviceAdmin

android.app.action.DEVICE_ADMIN_ENABLED

com.lotus.sync.traveler.widgets.TodayWidget$TodayLotusWidget

android.appwidget.action.APPWIDGET_UPDATE

com.lotus.sync.traveler.widgets.MailWidget$MailWidget4x1

android.appwidget.action.APPWIDGET_UPDATE

com.lotus.sync.traveler.widgets.MailWidget$MailWidget3x3

android.appwidget.action.APPWIDGET_UPDATE

com.lotus.sync.traveler.widgets.MailWidget$MailWidget2x2

android.appwidget.action.APPWIDGET_UPDATE

com.lotus.sync.traveler.widgets.CalendarWidgetProvider$CalendarWidget4x1

android.appwidget.action.APPWIDGET_UPDATE

com.lotus.sync.traveler.widgets.CalendarWidgetProvider$CalendarWidget3x3

android.appwidget.action.APPWIDGET_UPDATE

com.lotus.sync.traveler.widgets.CalendarWidgetProvider$CalendarWidget2x2

android.appwidget.action.APPWIDGET_UPDATE

com.lotus.sync.traveler.widgets.ToDoWidget$ToDoWidget4x1

android.appwidget.action.APPWIDGET_UPDATE

com.lotus.sync.traveler.widgets.ToDoWidget$ToDoWidget3x3

android.appwidget.action.APPWIDGET_UPDATE

com.lotus.sync.traveler.widgets.ToDoWidget$ToDoWidget2x2

android.appwidget.action.APPWIDGET_UPDATE

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY
android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW
android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.TIME_SET
android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.work.diagnostics.REQUEST_DIAGNOSTICS

androidx.profileinstaller.ProfileInstallReceiver

androidx.profileinstaller.action.INSTALL_PROFILE
androidx.profileinstaller.action.SKIP_FILE
androidx.profileinstaller.action.SAVE_PROFILE
androidx.profileinstaller.action.BENCHMARK_OPERATION

Services

com.lotus.sync.traveler.AuthenticatorService

android.accounts.AccountAuthenticator

com.lotus.sync.traveler.ContactsSyncAdapterService

android.content.SyncAdapter

com.lotus.sync.traveler.android.service.MyFcmListenerService

com.google.firebase.MESSAGING_EVENT

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

Android Permissions

VerseAndroid_12.0.22_202305251921_flexNet.apk

Permissions

android.permission.INTERNET

android.permission.REQUEST_PASSWORD_COMPLEXITY

android.permission.ACCESS_NETWORK_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

android.permission.GET_ACCOUNTS

android.permission.MANAGE_ACCOUNTS

android.permission.AUTHENTICATE_ACCOUNTS

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.GET_TASKS

android.permission.RESTART_PACKAGES

android.permission.READ_SYNC_SETTINGS

android.permission.WRITE_SYNC_SETTINGS

android.permission.VIBRATE

android.permission.CALL_PHONE

android.permission.WAKE_LOCK

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.READ_CALENDAR

android.permission.WRITE_CALENDAR

com.lotus.sync.traveler.problemReport

com.lotus.android.common.integration.ACCESS

android.permission.FOREGROUND_SERVICE

android.permission.REQUEST_DELETE_PACKAGES

android.permission.SCHEDULE_EXACT_ALARM

android.permission.USE_EXACT_ALARM

android.permission.POST_NOTIFICATIONS

android.permission.PACKAGE_USAGE_STATS

android.permission.READ_EXTERNAL_STORAGE

com.google.android.c2dm.permission.RECEIVE

com.google.android.gms.permission.AD_ID

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

com.lotus.sync.traveler.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Sharing

General

Malware Config

Signatures

Files

com.lotus.sync.traveler

com.lotus.sync.traveler.LotusTraveler

Activities

com.lotus.sync.traveler.LotusTraveler

com.lotus.sync.traveler.LotusMail

com.lotus.sync.traveler.LotusMailNeedsAction

com.lotus.sync.traveler.LotusMailWaitingFor

com.lotus.sync.traveler.LotusActions

com.lotus.sync.traveler.LotusActionsNeedsAction

com.lotus.sync.traveler.LotusActionsWaitingFor

com.lotus.sync.traveler.SearchActivity

com.lotus.sync.traveler.mail.Compose

com.lotus.sync.traveler.contacts.ContactsLauncherActivity

com.lotus.sync.traveler.contacts.ContactsActivity

com.lotus.sync.traveler.contacts.ContactDetailsActivity

com.lotus.sync.traveler.contacts.ContactEditorActivity

com.lotus.sync.traveler.calendar.LotusCalendar

com.lotus.sync.traveler.calendar.EventEditorActivity

com.lotus.sync.traveler.calendar.EventViewActivity

com.lotus.sync.traveler.todo.LotusToDo

com.lotus.sync.traveler.todo.SearchTodosActivity

com.lotus.sync.traveler.widgets.LotusWidget$InitialConfigActivity

com.lotus.sync.traveler.widgets.MailWidget$DynamicLaunchActivity

com.lotus.sync.traveler.widgets.MailWidget$MailInitialConfigActivity

com.lotus.sync.traveler.widgets.ToDoWidget$DynamicLaunchActivity

com.lotus.sync.traveler.widgets.ToDoWidget$TodoInitialConfigActivity

com.lotus.android.common.mdm.SecureBrowserLauncherActivity

com.lotus.sync.traveler.android.common.FeatureToggleActivity

Permissions

Receivers

com.lotus.sync.traveler.android.service.BroadcastReceiver

com.lotus.sync.traveler.DeviceAdmin

com.lotus.sync.traveler.widgets.TodayWidget$TodayLotusWidget

com.lotus.sync.traveler.widgets.MailWidget$MailWidget4x1

com.lotus.sync.traveler.widgets.MailWidget$MailWidget3x3

com.lotus.sync.traveler.widgets.MailWidget$MailWidget2x2

com.lotus.sync.traveler.widgets.CalendarWidgetProvider$CalendarWidget4x1

com.lotus.sync.traveler.widgets.CalendarWidgetProvider$CalendarWidget3x3

com.lotus.sync.traveler.widgets.CalendarWidgetProvider$CalendarWidget2x2

com.lotus.sync.traveler.widgets.ToDoWidget$ToDoWidget4x1

com.lotus.sync.traveler.widgets.ToDoWidget$ToDoWidget3x3

com.lotus.sync.traveler.widgets.ToDoWidget$ToDoWidget2x2

com.google.firebase.iid.FirebaseInstanceIdReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.profileinstaller.ProfileInstallReceiver

Services

com.lotus.sync.traveler.AuthenticatorService

com.lotus.sync.traveler.ContactsSyncAdapterService

com.lotus.sync.traveler.android.service.MyFcmListenerService

com.google.firebase.messaging.FirebaseMessagingService

Android Permissions

VerseAndroid_12.0.22_202305251921_flexNet.apk