test[.]zip | Triage

General

Target

test.zip
Size

106.8MB
MD5

9eca5c553c75608e37d552f2465d24f6
SHA1

74c58c398795c5d6c365857f3f498a61cd35f6de
SHA256

087dc82746cd87b1028eda8dd89c259ff708c99e258153f061e33fd2c96b779d
SHA512

5f9468f31142ea7e830f60a1f4f77c15e223ef37b723df22f952af00e18db57de8a49785b8f5d15ff0f03319b07fc64bb0286f939c8c2a5b002d6662ac474c69
SSDEEP

3145728:f2Zm4DUOEo2J/TxZoFaszVWRmPwGWMDBubij:fgbexaFrWRmPwGWkubij

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE

Requests dangerous framework permissions 4 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS

Files

test.zip
.zip
Seguranca Santander.apk
.apk android

com.viberotion1414.app

com.viberotion1414.app.MainActivity

Activities

com.viberotion1414.app.MainActivity

android.intent.action.MAIN

Permissions

android.permission.KILL_BACKGROUND_PROCESSES
android.permission.REQUEST_DELETE_PACKAGES
android.permission.INTERNET
android.permission.READ_PHONE_STATE
android.permission.SYSTEM_ALERT_WINDOW
android.permission.ACTION_ACCESSIBILITY_SETTINGS
android.permission.WAKE_LOCK
com.google.android.c2dm.permission.RECEIVE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.REQUEST_INSTALL_PACKAGES
android.permission.ACCESS_NETWORK_STATE
android.permission.POST_NOTIFICATIONS
com.viberotion1414.app.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Receivers

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

androidx.profileinstaller.ProfileInstallReceiver

androidx.profileinstaller.action.INSTALL_PROFILE
androidx.profileinstaller.action.SKIP_FILE
androidx.profileinstaller.action.SAVE_PROFILE
androidx.profileinstaller.action.BENCHMARK_OPERATION

Services

com.viberotion1414.app.MyAccessibilityService

android.accessibilityservice.AccessibilityService

com.viberotion1414.app.FirebaseService

com.google.firebase.MESSAGING_EVENT

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT
com.santander.app_100108_apps.evozi.com.apk
.apk android arch:arm64 arch:arm arch:mips arch:x86 arch:x64

com.santander.app

com.santander.app.splash.SplashScreenActivity

Activities

com.santander.app.splash.SplashScreenActivity

android.intent.action.MAIN
android.intent.action.VIEW

com.santander.app.deeplink.DeepLinkActivity

android.intent.action.VIEW

br.com.santander.investimentoV2.features.api.presentation.IntroApiActivity

br.com.santander.investimentoV2.api.INTRO

br.com.santander.modulo.seguros.ui.consultative.activities.MyInsurancesV2Activity

br.com.santander.modulo.seguros.ui.consultative.activities.MyInsurancesV2Activity

br.com.santander.modulo.seguros.ui.contract.activities.ContractActivity

br.com.santander.modulo.seguros.ui.contract.activities.ContractActivity

Permissions

android.permission.GET_TASKS
android.permission.READ_LOGS
android.permission.CAMERA
android.permission.CALL_PHONE
android.permission.ACTION_CALL
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.USE_FINGERPRINT
com.santander.app.permission.MAPS_RECEIVE
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.WRITE_EXTERNAL_STORAGE
com.google.android.providers.gsf.permission.READ_GSERVICES
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.READ_PHONE_STATE
android.permission.READ_CONTACTS
android.permission.WRITE_CONTACTS
android.permission.RECORD_AUDIO
android.permission.READ_EXTERNAL_STORAGE
android.permission.WAKE_LOCK
android.permission.SYSTEM_ALERT_WINDOW
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.BLUETOOTH
android.permission.FOREGROUND_SERVICE
android.permission.READ_PRIVILEGED_PHONE_STATE
com.google.android.c2dm.permission.RECEIVE
.permission.C2D_MESSAGE
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
android.permission.GET_ACCOUNTS
android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

Receivers

com.google.ads.conversiontracking.InstallReceiver

com.android.vending.INSTALL_REFERRER

com.santander.app.idsantander.SmsReceiver

com.google.android.gms.auth.api.phone.SMS_RETRIEVED

com.google.android.gms.gcm.GcmReceiver

com.google.android.c2dm.intent.RECEIVE

com.adjust.sdk.AdjustReferrerReceiver

com.android.vending.INSTALL_REFERRER

com.google.android.gms.measurement.AppMeasurementInstallReferrerReceiver

com.android.vending.INSTALL_REFERRER

com.google.android.gms.measurement.AppMeasurementReceiver

com.google.android.gms.measurement.UPLOAD
com.android.vending.INSTALL_REFERRER

com.google.android.gms.analytics.CampaignTrackingReceiver

com.android.vending.INSTALL_REFERRER

com.google.android.gms.analytics.AnalyticsReceiver

com.google.android.gms.analytics.ANALYTICS_DISPATCH

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

Services

com.santander.app.notification.NotificationService

com.google.android.c2dm.intent.RECEIVE

br.com.santander.msgsdk.gcm.InstanceIDListenerService

com.google.android.gms.iid.InstanceID

com.google.firebase.iid.FirebaseInstanceIdService

com.google.firebase.INSTANCE_ID_EVENT

Resubmissions

Sharing

General

Malware Config

Signatures

Files

com.viberotion1414.app

com.viberotion1414.app.MainActivity

Activities

com.viberotion1414.app.MainActivity

Permissions

Receivers

com.google.firebase.iid.FirebaseInstanceIdReceiver

androidx.profileinstaller.ProfileInstallReceiver

Services

com.viberotion1414.app.MyAccessibilityService

com.viberotion1414.app.FirebaseService

com.google.firebase.messaging.FirebaseMessagingService

com.santander.app

com.santander.app.splash.SplashScreenActivity

Activities

com.santander.app.splash.SplashScreenActivity

com.santander.app.deeplink.DeepLinkActivity

br.com.santander.investimentoV2.features.api.presentation.IntroApiActivity

br.com.santander.modulo.seguros.ui.consultative.activities.MyInsurancesV2Activity

br.com.santander.modulo.seguros.ui.contract.activities.ContractActivity

Permissions

Receivers

com.google.ads.conversiontracking.InstallReceiver

com.santander.app.idsantander.SmsReceiver

com.google.android.gms.gcm.GcmReceiver

com.adjust.sdk.AdjustReferrerReceiver

com.google.android.gms.measurement.AppMeasurementInstallReferrerReceiver

com.google.android.gms.measurement.AppMeasurementReceiver

com.google.android.gms.analytics.CampaignTrackingReceiver

com.google.android.gms.analytics.AnalyticsReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

Services

com.santander.app.notification.NotificationService

br.com.santander.msgsdk.gcm.InstanceIDListenerService

com.google.firebase.iid.FirebaseInstanceIdService