nubank muito sus[.]apk

General

Target

nubank muito sus.apk
Size

65.3MB
MD5

346c7603be8abe51295ee8cc28e12682
SHA1

78eeadb2ea1d4b7948147795204e0529a680ca7b
SHA256

a5b79969587710746e6b35182b894746f6d500b6d8ddcb69f8f539a152d2ec80
SHA512

e8db451cb3dfe82068bb4b1d94d12900c6f105b34b1ad1a311b31fa711ebe14d706e906701db68e4249034faa6b1c9d0d0557c0db71240272076847fa5d17df5
SSDEEP

1572864:v6X16orz3lonwkfmLeOfGqPxZqyIH+EGU+E8zYVpKN1SfhS:ipLlopAeOGGZqymPAEbWSfhS

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 13 IoCs

description	ioc
Required to be able to access the camera device.	android.permission.CAMERA
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows the app to answer an incoming phone call.	android.permission.ANSWER_PHONE_CALLS
Allows read access to the device's phone number(s).	android.permission.READ_PHONE_NUMBERS
Allows an application to read the user's call log.	android.permission.READ_CALL_LOG
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access location in the background.	android.permission.ACCESS_BACKGROUND_LOCATION
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read image files from external storage.	android.permission.READ_MEDIA_IMAGES

Files

nubank muito sus.apk
.apk android

com.nu.production

br.com.nubank.app.SplashScreenActivity

Activities

br.com.nubank.app.platform_channels.universal_link.UniversalLinkActivity

android.intent.action.VIEW

br.com.nubank.app.platform_channels.sessions.TapToPaySessionShortcutActivity

android.intent.action.VIEW

br.com.nubank.shell.screens.emailvalidation.sending.EmailValidationSendActivity

android.intent.action.VIEW

br.com.nubank.app.SamsungPixActivity

android.intent.action.Pix

br.com.nubank.app.AppToAppActivity

com.nu.staging_alpha.action.DIGITAL_WALLETS_ACTIVATE_TOKEN
com.nu.production.action.DIGITAL_WALLETS_ACTIVATE_TOKEN

br.com.nubank.app.SplashScreenActivity

android.intent.action.MAIN
android.intent.action.VIEW
android.intent.action.VIEW

androidx.test.core.app.InstrumentationActivityInvoker$BootstrapActivity

android.intent.action.MAIN

androidx.test.core.app.InstrumentationActivityInvoker$EmptyActivity

android.intent.action.MAIN

androidx.test.core.app.InstrumentationActivityInvoker$EmptyFloatingActivity

android.intent.action.MAIN

br.com.nubank.shell.screens.recoverpassword.RecoverPasswordActivity

android.intent.action.VIEW

com.nu.activity.rewards.deep_link.RewardsDeepLinkActivity

android.intent.action.VIEW

Permissions

android.permission.QUERY_ALL_PACKAGES
com.google.android.gms.permission.AD_ID
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.CAMERA
android.permission.VIBRATE
android.permission.WAKE_LOCK
android.permission.INTERNET
android.permission.NFC
android.permission.READ_PHONE_STATE
android.permission.ANSWER_PHONE_CALLS
android.permission.READ_PHONE_NUMBERS
android.permission.READ_CALL_LOG
android.permission.READ_EXTERNAL_STORAGE
android.permission.RECORD_AUDIO
android.permission.USE_FINGERPRINT
android.permission.FOREGROUND_SERVICE
android.permission.POST_NOTIFICATIONS
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_BACKGROUND_LOCATION
com.google.android.providers.gsf.permission.READ_GSERVICES
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_MEDIA_IMAGES
com.google.android.c2dm.permission.RECEIVE
android.permission.USE_BIOMETRIC
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
android.permission.RECEIVE_BOOT_COMPLETED
com.nu.production.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
android.permission.REORDER_TASKS
android.permission.QUERY_ALL_PACKAGES

Receivers

dev.fluttercommunity.plus.share.SharePlusPendingIntent

EXTRA_CHOSEN_COMPONENT

br.com.nubank.phone_channel_support.AloProtegidoBroadcastReceiver

android.intent.action.PHONE_STATE

br.com.nubank.shell.application.push.UpdateReceiver

android.intent.action.SCREEN_OFF

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

com.facebook.CurrentAccessTokenExpirationBroadcastReceiver

com.facebook.sdk.ACTION_CURRENT_ACCESS_TOKEN_CHANGED

com.facebook.AuthenticationTokenManager$CurrentAuthenticationTokenChangedBroadcastReceiver

com.facebook.sdk.ACTION_CURRENT_AUTHENTICATION_TOKEN_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY
android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW
android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.TIME_SET
android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.work.diagnostics.REQUEST_DIAGNOSTICS

androidx.profileinstaller.ProfileInstallReceiver

androidx.profileinstaller.action.INSTALL_PROFILE
androidx.profileinstaller.action.SKIP_FILE

Services

br.com.nubank.shell.application.push.NotificationMessagesListenerService

com.google.firebase.MESSAGING_EVENT

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

Android Permissions

nubank muito sus.apk

Permissions

android.permission.QUERY_ALL_PACKAGES

com.google.android.gms.permission.AD_ID

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.CAMERA

android.permission.VIBRATE

android.permission.WAKE_LOCK

android.permission.INTERNET

android.permission.NFC

android.permission.READ_PHONE_STATE

android.permission.ANSWER_PHONE_CALLS

android.permission.READ_PHONE_NUMBERS

android.permission.READ_CALL_LOG

android.permission.READ_EXTERNAL_STORAGE

android.permission.RECORD_AUDIO

android.permission.USE_FINGERPRINT

android.permission.FOREGROUND_SERVICE

android.permission.POST_NOTIFICATIONS

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_BACKGROUND_LOCATION

com.google.android.providers.gsf.permission.READ_GSERVICES

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_MEDIA_IMAGES

com.google.android.c2dm.permission.RECEIVE

android.permission.USE_BIOMETRIC

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED

com.nu.production.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

android.permission.REORDER_TASKS

android.permission.QUERY_ALL_PACKAGES

Sharing

General

Malware Config

Signatures

Files

com.nu.production

br.com.nubank.app.SplashScreenActivity

Activities

br.com.nubank.app.platform_channels.universal_link.UniversalLinkActivity

br.com.nubank.app.platform_channels.sessions.TapToPaySessionShortcutActivity

br.com.nubank.shell.screens.emailvalidation.sending.EmailValidationSendActivity

br.com.nubank.app.SamsungPixActivity

br.com.nubank.app.AppToAppActivity

br.com.nubank.app.SplashScreenActivity

androidx.test.core.app.InstrumentationActivityInvoker$BootstrapActivity

androidx.test.core.app.InstrumentationActivityInvoker$EmptyActivity

androidx.test.core.app.InstrumentationActivityInvoker$EmptyFloatingActivity

br.com.nubank.shell.screens.recoverpassword.RecoverPasswordActivity

com.nu.activity.rewards.deep_link.RewardsDeepLinkActivity

Permissions

Receivers

dev.fluttercommunity.plus.share.SharePlusPendingIntent

br.com.nubank.phone_channel_support.AloProtegidoBroadcastReceiver

br.com.nubank.shell.application.push.UpdateReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.facebook.CurrentAccessTokenExpirationBroadcastReceiver

com.facebook.AuthenticationTokenManager$CurrentAuthenticationTokenChangedBroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.profileinstaller.ProfileInstallReceiver

Services

br.com.nubank.shell.application.push.NotificationMessagesListenerService

com.google.firebase.messaging.FirebaseMessagingService

Android Permissions

nubank muito sus.apk