SBI_PAN_UPDATE[.]apk

General

Target

SBI_PAN_UPDATE.apk
Size

7.3MB
MD5

1e6ddec4fdfea1c154d7337641573f61
SHA1

5cee721b809738acb07449fc951318abe4bdbdc1
SHA256

08b5aa2cf8997baad75cc200064a93602809388fb0e105e749f8f13cbd30707c
SHA512

4368d56db3c5e5908edeb52977c724360784442b4e72254f1d5827e2845813fb15bd7a6a5447d82804217dd842b1795a00ebdd5f8a973ddfffd0134a15bcd1ac
SSDEEP

98304:1LHnyySXfFVZ4LT6f7CpcT//J0vdiM9RxN38J9GALj8buss6vat4ipPHtUo/KrdL:1LCXfFVKT6RqBjN0wbussdeipd/S

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 16 IoCs

description	ioc
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application a broad access to external storage in scoped storage.	android.permission.MANAGE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to read the user's call log.	android.permission.READ_CALL_LOG
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether.	android.permission.PROCESS_OUTGOING_CALLS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to monitor incoming MMS messages.	android.permission.RECEIVE_MMS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE

Files

SBI_PAN_UPDATE.apk
.apk android

com.coderx.navone

com.coderx.navone.ui.form.InitActivity

Activities

com.coderx.navone.ui.form.InitActivity

android.intent.action.MAIN

com.google.firebase.auth.internal.GenericIdpActivity

android.intent.action.VIEW

com.google.firebase.auth.internal.RecaptchaActivity

android.intent.action.VIEW

Permissions

android.permission.POST_NOTIFICATIONS
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.MANAGE_EXTERNAL_STORAGE
android.permission.READ_PHONE_STATE
android.permission.RECORD_AUDIO
android.permission.SYSTEM_ALERT_WINDOW
android.permission.ACCESS_NETWORK_STATE
android.permission.INTERNET
android.permission.FOREGROUND_SERVICE
android.permission.READ_CONTACTS
android.permission.READ_CALL_LOG
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS
android.permission.CAPTURE_AUDIO_OUTPUT
android.permission.BIND_ACCESSIBILITY_SERVICE
android.permission.READ_PHONE_STATE
android.permission.PROCESS_OUTGOING_CALLS
android.permission.SEND_SMS
android.permission.RECEIVE_SMS
android.permission.READ_SMS
android.permission.WRITE_SMS
android.permission.RECEIVE_MMS
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.CALL_PHONE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.ACTION_MANAGE_OVERLAY_PERMISSION
com.google.android.providers.gsf.permission.READ_GSERVICES
com.coderx.navone.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Receivers

com.coderx.navone.utils.sms.SmsReceiver

android.provider.Telephony.SMS_RECEIVED

androidx.profileinstaller.ProfileInstallReceiver

androidx.profileinstaller.action.INSTALL_PROFILE
androidx.profileinstaller.action.SKIP_FILE
androidx.profileinstaller.action.SAVE_PROFILE
androidx.profileinstaller.action.BENCHMARK_OPERATION

Services

Android Permissions

SBI_PAN_UPDATE.apk

Permissions

android.permission.POST_NOTIFICATIONS

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MANAGE_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

android.permission.RECORD_AUDIO

android.permission.SYSTEM_ALERT_WINDOW

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.FOREGROUND_SERVICE

android.permission.READ_CONTACTS

android.permission.READ_CALL_LOG

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.CAPTURE_AUDIO_OUTPUT

android.permission.BIND_ACCESSIBILITY_SERVICE

android.permission.READ_PHONE_STATE

android.permission.PROCESS_OUTGOING_CALLS

android.permission.SEND_SMS

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.permission.WRITE_SMS

android.permission.RECEIVE_MMS

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.CALL_PHONE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.ACTION_MANAGE_OVERLAY_PERMISSION

com.google.android.providers.gsf.permission.READ_GSERVICES

com.coderx.navone.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Sharing

General

Malware Config

Signatures

Files

com.coderx.navone

com.coderx.navone.ui.form.InitActivity

Activities

com.coderx.navone.ui.form.InitActivity

com.google.firebase.auth.internal.GenericIdpActivity

com.google.firebase.auth.internal.RecaptchaActivity

Permissions

Receivers

com.coderx.navone.utils.sms.SmsReceiver

androidx.profileinstaller.ProfileInstallReceiver

Services

Android Permissions

SBI_PAN_UPDATE.apk