General

  • Target

    Почта_Mail.ru_v.14.9.0.35374(35374)(5.0-12.0)(arm7a,arm64-8a,x86,x86-64).apk

  • Size

    98.8MB

  • MD5

    6ad1fb9c8605fb56bf0f1c1062f6eff1

  • SHA1

    a3418ea2d1ff1a74ceaae4365c588364d54d0871

  • SHA256

    da3310bf675d7488f774e155d1a40a9638b9ad61c30016c76a8b2a38d7780218

  • SHA512

    eddbb2fce63af64ae82c670def23f18b8fac38862d7fff96b235bc8842f3de0658d2163ee96d875b826710a3bfed6f9854a6c97d4b7b46dba74692ca167e0c7a

  • SSDEEP

    3145728:wFi3p0HBx42W2GRmPEACcAZ7W4xGDW8fHPH:ws6yfm+7W4Yrv

Score
6/10

Malware Config

Signatures

  • Declares services with permission to bind to the system 2 IoCs
  • Requests dangerous framework permissions 8 IoCs

Files

  • Почта_Mail.ru_v.14.9.0.35374(35374)(5.0-12.0)(arm7a,arm64-8a,x86,x86-64).apk
    .apk android arch:arm64 arch:arm arch:x86 arch:x64

    ru.mail.mailapp

    ru.mail.mailapp.SplashScreenActivity


Android Permissions

Почта_Mail.ru_v.14.9.0.35374(35374)(5.0-12.0)(arm7a,arm64-8a,x86,x86-64).apk

Permissions

android.permission.FOREGROUND_SERVICE

android.permission.INTERNET

android.permission.VIBRATE

android.permission.WAKE_LOCK

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_CONTACTS

com.google.android.gallery3d.permission.GALLERY_PROVIDER

com.android.gallery3d.permission.GALLERY_PROVIDER

android.permission.USE_FINGERPRINT

android.permission.GET_ACCOUNTS

android.permission.USE_CREDENTIALS

android.permission.MANAGE_ACCOUNTS

android.permission.AUTHENTICATE_ACCOUNTS

android.permission.WRITE_SETTINGS

android.permission.WRITE_CONTACTS

android.permission.READ_SYNC_STATS

android.permission.READ_SYNC_SETTINGS

android.permission.WRITE_SYNC_SETTINGS

ru.mail.mailapp.permission.C2D_MESSAGE

com.google.android.c2dm.permission.RECEIVE

android.permission.GET_ACCOUNTS

android.permission.WAKE_LOCK

android.permission.USE_FULL_SCREEN_INTENT

android.permission.READ_EXTERNAL_STORAGE

android.permission.RECEIVE_BOOT_COMPLETED

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.ACCESS_WIFI_STATE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

ru.mail.mailapp.permission.PROCESS_PUSH_MSG

ru.mail.mailapp.permission.PUSH_PROVIDER

android.permission.REQUEST_INSTALL_PACKAGES

com.huawei.appmarket.service.commondata.permission.GET_COMMON_DATA

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.CHANGE_NETWORK_STATE