Resubmissions

26/07/2024, 08:34

240726-kgh6wa1bkf 6

26/07/2024, 08:30

240726-kd4y6sxakk 6

Errors

Reason
could not process APK: binary.Read: invalid type [2]uint16
Reason
could not process APK: binary.Read: invalid type [2]uint16

General

  • Target

    2024-05-17--мегафиш--pllaymarket.zip

  • Size

    254.0MB

  • MD5

    828f2dff7ff202c4136664d7d079a43e

  • SHA1

    77d0c9b1cd47a5daa31e366bc89a8be27487ab8b

  • SHA256

    5d47d71da455d8bd54cf9b01e10ca96ab70136e721747648793ed8815a38d93a

  • SHA512

    f25e055720df17be6dd1a4acf785b91f087b78c1b14befa7cffd18bfa3942f2ea359b42500496fabd26f485f490a8769f5e36f6595330328f7a00e32b32ecad8

  • SSDEEP

    6291456:V5rEQep03a/XBb7xQkWxWdgVxLRS+5lwmyP8vVlwO6z5Xx38Ia:/IQ8BbLWxW2hqmyP8daXx3a

Score
6/10

Malware Config

Signatures

  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 5 IoCs

Files

  • 2024-05-17--мегафиш--pllaymarket.zip
    .zip

    Password: infected

  • ПО TELE2 (1).apk
    .apk android arch:arm64 arch:arm

    Password: infected

    com.carriez.flutter_hbb

    com.carriez.flutter_hbb.MainActivity


  • ПО TELE2.apk
    .apk android arch:arm64 arch:arm

    Password: infected

    com.carriez.flutter_hbb

    com.carriez.flutter_hbb.MainActivity


  • ПО Yota.apk
    .apk android arch:arm64 arch:arm

    Password: infected

    com.carriez.flutter_hbb

    com.carriez.flutter_hbb.MainActivity


  • ПО МТС.apk
    .apk android arch:arm64 arch:arm

    Password: infected

    com.carriez.flutter_hbb

    com.carriez.flutter_hbb.MainActivity


  • ПО Мегафон.apk
    .apk android arch:arm64 arch:arm

    Password: infected

    com.carriez.flutter_hbb

    com.carriez.flutter_hbb.MainActivity


  • ПО ЦБ.apk
    .apk android arch:arm64 arch:arm

    Password: infected

    com.carriez.flutter_hbb

    com.carriez.flutter_hbb.MainActivity


  • Поддержка Банк Казани_.apk
    .apk android arch:arm64 arch:arm

    Password: infected

    com.carriez.flutter_hbb

    com.carriez.flutter_hbb.MainActivity


  • Поддержка ГПБ.apk
    .apk android arch:arm64 arch:arm

    Password: infected

    com.carriez.flutter_hbb

    com.carriez.flutter_hbb.MainActivity


  • Поддержка ПСБ.apk
    .apk android arch:arm64 arch:arm

    com.carriez.flutter_hbb

    com.carriez.flutter_hbb.MainActivity


  • РенПО.apk
    .apk android arch:arm64 arch:arm

    com.carriez.flutter_hbb

    com.carriez.flutter_hbb.MainActivity


  • ТиньПО.apk
    .apk android arch:arm64 arch:arm

    com.carriez.flutter_hbb

    com.carriez.flutter_hbb.MainActivity