small_credit_2024_1017[.]apk

General

Target
small_credit_2024_1017.apk
Size 35.2MB
Sample240604-k6fr2scc72
SHA256 c753b7b932a3b6097efe2cc55af03d1d63b3c3cf1edee6acf41ff77050d8cc8e
MD5 4be09eb69c27ed670aff1f9d96b58f04
SHA1 3c30ad247f1754cb62aecf87098a22de8000dc4a
SHA512 aa041b5e11a3f5e86b2c3c727fd39f6f31acdcb5546d03e168e5364e5254787ffd8bb439aca0acfd648bb7cfd966f8cf4651ebf9d61474d187971293206aa654
SSDEEP 786432:uUTdXb9oqZzVO+8wBwQexjDQ1Vx9+hoUN+6umyoeTFQMgNp:uQdXxokBO+N3exySoUNBrAFQMgNp
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 11 IoCs

description	ioc
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application a broad access to external storage in scoped storage.	android.permission.MANAGE_EXTERNAL_STORAGE
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS

File Explorer

small_credit_2024_1017.apk

.apk 35.2MB

small_credit_2024_1017.apk

SHA256 c753b7b932a3b6097efe2cc55af03d1d63b3c3cf1edee6acf41ff77050d8cc8e
MD5 4be09eb69c27ed670aff1f9d96b58f04
SHA1 3c30ad247f1754cb62aecf87098a22de8000dc4a
SHA512 aa041b5e11a3f5e86b2c3c727fd39f6f31acdcb5546d03e168e5364e5254787ffd8bb439aca0acfd648bb7cfd966f8cf4651ebf9d61474d187971293206aa654
SSDEEP 786432:uUTdXb9oqZzVO+8wBwQexjDQ1Vx9+hoUN+6umyoeTFQMgNp:uQdXxokBO+N3exySoUNBrAFQMgNp
MD5 SHA1 SHA512 SSDEEP

android arch:arm64 arch:arm arch:x64

com.small.loan.buddy.credit.one.advance

Android Permissions

small_credit_2024_1017.apk

Permissions

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.CAMERA

android.permission.READ_SMS

android.permission.CALL_PHONE

android.permission.READ_PHONE_STATE

android.permission.READ_CLIPBOARD

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.HIDE_OVERLAY_WINDOWS

android.permission.BLUETOOTH

android.permission.READ_CONTACTS

android.permission.MANAGE_EXTERNAL_STORAGE

android.permission.RECORD_AUDIO

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

com.android.vending.CHECK_LICENSE

android.permission.WAKE_LOCK

com.google.android.gms.permission.AD_ID

android.permission.POST_NOTIFICATIONS

com.google.android.c2dm.permission.RECEIVE

small_credit_2024_1017.apk

com.small.loan.buddy.credit.one.advance.MainActivity

io.flutter.plugins.urllauncher.WebViewActivity

com.liveness.dflivenesslibrary.liveness.DFLivenessBaseActivity

com.liveness.dflivenesslibrary.liveness.DFSilentLivenessActivity

com.facebook.FacebookActivity

com.facebook.CustomTabMainActivity

com.facebook.CustomTabActivity

com.google.android.gms.common.api.GoogleApiActivity

com.small.loan.buddy.credit.one.advance.FbService

com.google.android.gms.measurement.AppMeasurementService

com.google.android.gms.measurement.AppMeasurementJobService

com.google.firebase.components.ComponentDiscoveryService

com.google.firebase.messaging.FirebaseMessagingService

com.google.android.datatransport.runtime.backends.TransportBackendDiscovery

com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService

com.google.android.gms.measurement.AppMeasurementReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

com.facebook.CurrentAccessTokenExpirationBroadcastReceiver

com.google.firebase.provider.FirebaseInitProvider

com.facebook.internal.FacebookInitProvider

Sharing

General

Malware Config

Signatures

File Explorer

small_credit_2024_1017.apk

com.small.loan.buddy.credit.one.advance.MainActivity

io.flutter.plugins.urllauncher.WebViewActivity

com.liveness.dflivenesslibrary.liveness.DFLivenessBaseActivity

com.liveness.dflivenesslibrary.liveness.DFSilentLivenessActivity

com.facebook.FacebookActivity

com.facebook.CustomTabMainActivity

com.facebook.CustomTabActivity

com.google.android.gms.common.api.GoogleApiActivity

com.small.loan.buddy.credit.one.advance.FbService

com.google.android.gms.measurement.AppMeasurementService

com.google.android.gms.measurement.AppMeasurementJobService

com.google.firebase.components.ComponentDiscoveryService

com.google.firebase.messaging.FirebaseMessagingService

com.google.android.datatransport.runtime.backends.TransportBackendDiscovery

com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService

com.google.android.gms.measurement.AppMeasurementReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

com.facebook.CurrentAccessTokenExpirationBroadcastReceiver

com.google.firebase.provider.FirebaseInitProvider

com.facebook.internal.FacebookInitProvider

Android Permissions

small_credit_2024_1017.apk