air[.]com[.]ssdsoftwaresolutions[.]clickuz-60004879[.]apk

General

Target

air.com.ssdsoftwaresolutions.clickuz-60004879.apk
Size

45.3MB
MD5

4f385a53d90df20e637b1747d514f779
SHA1

42169ebd8e9a691f73ae0734c78751f8d025d743
SHA256

d36db5b785f2441cce4bbb070a9371a2421faba31c9e1c8fd7a38ba92817374a
SHA512

c4a717c111f684b2a22a7d3f86bb6499f5d1cada62da5e88c0c3f0943929f44fa11480cde5023a9357f60c802d42b46ed6537ec19d80d211f8dd99dbf424f00d
SSDEEP

786432:RyaNOTDubjJqVcIzj5fuqdw6EOTJu8hVhd9pRPREHIwoQG2MdtsNYB+ABsTYmjz1:D6E9gj51w3I7hd9pROIwokhuLBTYn1

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 4 IoCs

description	ioc
Required by quick settings tile services to bind with the system. Allows apps to add custom tiles to the quick settings menu.	android.permission.BIND_QUICK_SETTINGS_TILE
Required by quick settings tile services to bind with the system. Allows apps to add custom tiles to the quick settings menu.	android.permission.BIND_QUICK_SETTINGS_TILE
Required by quick settings tile services to bind with the system. Allows apps to add custom tiles to the quick settings menu.	android.permission.BIND_QUICK_SETTINGS_TILE
Required by NFC services to bind with the system. Allows apps to interact with NFC hardware.	android.permission.BIND_NFC_SERVICE

Requests dangerous framework permissions 18 IoCs

description	ioc
Required to be able to access the camera device.	android.permission.CAMERA
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to read image files from external storage.	android.permission.READ_MEDIA_IMAGES
Allows an application to read video files from external storage.	android.permission.READ_MEDIA_VIDEO
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to access any geographic locations persisted in the user's shared collection.	android.permission.ACCESS_MEDIA_LOCATION
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Required to be able to advertise to nearby Bluetooth devices.	android.permission.BLUETOOTH_ADVERTISE
Required to be able to discover and pair nearby Bluetooth devices.	android.permission.BLUETOOTH_SCAN
Required to be able to connect to paired Bluetooth devices.	android.permission.BLUETOOTH_CONNECT

Files

air.com.ssdsoftwaresolutions.clickuz-60004879.apk
.apk android arch:arm64 arch:arm arch:x86 arch:x64

air.com.ssdsoftwaresolutions.clickuz

uz.click.evo.ui.mainrouter.MainRouterActivity

Activities

uz.click.evo.ui.mainrouter.MainRouterActivity

android.intent.action.MAIN

uz.click.evo.ui.transfer.deeplink.DeeplinkViaBarcode

android.intent.action.VIEW
android.intent.action.VIEW
android.nfc.action.NDEF_DISCOVERED
android.intent.action.VIEW
android.nfc.action.NDEF_DISCOVERED
android.intent.action.VIEW
android.nfc.action.NDEF_DISCOVERED
android.intent.action.VIEW
android.nfc.action.NDEF_DISCOVERED
android.intent.action.VIEW
android.nfc.action.NDEF_DISCOVERED
android.intent.action.VIEW
android.nfc.action.NDEF_DISCOVERED
android.intent.action.VIEW
android.nfc.action.NDEF_DISCOVERED
android.intent.action.VIEW
android.intent.action.VIEW

Permissions

android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.CAMERA
android.permission.USE_FINGERPRINT
android.permission.USE_BIOMETRIC
com.samsung.android.providers.context.permission.WRITE_USE_APP_FEATURE_SURVEY
android.permission.READ_PHONE_STATE
android.permission.VIBRATE
android.permission.READ_EXTERNAL_STORAGE
android.permission.READ_MEDIA_IMAGES
android.permission.READ_MEDIA_VIDEO
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_MEDIA_LOCATION
android.permission.FLAG_GRANT_READ_URI_PERMISSION
android.permission.FLAG_GRANT_WRITE_URI_PERMISSION
android.permission.CALL_PHONE
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
com.fingerprints.service.ACCESS_FINGERPRINT_MANAGER
android.permission.FLASHLIGHT
android.permission.NFC
android.permission.NFC_TRANSACTION_EVENT
android.permission.SYSTEM_ALERT_WINDOW
android.permission.POST_NOTIFICATIONS
android.permission.MANAGE_ACCOUNTS
android.permission.GET_ACCOUNTS
android.permission.READ_SYNC_SETTINGS
android.permission.WRITE_SYNC_SETTINGS
android.permission.AUTHENTICATE_ACCOUNTS
android.permission.USE_CREDENTIALS
android.permission.READ_CONTACTS
android.permission.WRITE_CONTACTS
android.permission.BLUETOOTH
android.permission.BLUETOOTH_ADMIN
android.permission.BLUETOOTH_ADVERTISE
android.permission.BLUETOOTH_SCAN
android.permission.BLUETOOTH_CONNECT
com.google.android.gms.permission.AD_ID
android.permission.ACCESS_WIFI_STATE
android.permission.WAKE_LOCK
com.google.android.c2dm.permission.RECEIVE
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.FOREGROUND_SERVICE
air.com.ssdsoftwaresolutions.clickuz.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Receivers

uz.click.evo.ui.widget.widget.ServiceWidgetApp

android.appwidget.action.APPWIDGET_UPDATE

uz.click.evo.ui.widget.widget.WidgetApp

android.appwidget.action.APPWIDGET_UPDATE

uz.click.evo.ui.verification.broadcast.SMSBroadcastReceiver

com.google.android.gms.auth.api.phone.SMS_RETRIEVED

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY
android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW
android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.TIME_SET
android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.work.diagnostics.REQUEST_DIAGNOSTICS

androidx.profileinstaller.ProfileInstallReceiver

androidx.profileinstaller.action.INSTALL_PROFILE
androidx.profileinstaller.action.SKIP_FILE
androidx.profileinstaller.action.SAVE_PROFILE
androidx.profileinstaller.action.BENCHMARK_OPERATION

Services

uz.click.evo.core.contacts.authentication.AuthenticationService

android.accounts.AccountAuthenticator

uz.click.evo.core.contacts.sync.SyncService

android.content.SyncAdapter

uz.click.evo.core.fcm.EvoMessagingService

com.google.firebase.MESSAGING_EVENT

uz.click.evo.utils.assistentpanel.TransferTileService

android.service.quicksettings.action.QS_TILE

uz.click.evo.utils.assistentpanel.PaymentTileService

android.service.quicksettings.action.QS_TILE

uz.click.evo.utils.assistentpanel.ClickPassTileService

android.service.quicksettings.action.QS_TILE

com.d8corporation.hce.HCEService

android.nfc.cardemulation.action.HOST_APDU_SERVICE

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

Android Permissions

air.com.ssdsoftwaresolutions.clickuz-60004879.apk

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.CAMERA

android.permission.USE_FINGERPRINT

android.permission.USE_BIOMETRIC

com.samsung.android.providers.context.permission.WRITE_USE_APP_FEATURE_SURVEY

android.permission.READ_PHONE_STATE

android.permission.VIBRATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.READ_MEDIA_IMAGES

android.permission.READ_MEDIA_VIDEO

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_MEDIA_LOCATION

android.permission.FLAG_GRANT_READ_URI_PERMISSION

android.permission.FLAG_GRANT_WRITE_URI_PERMISSION

android.permission.CALL_PHONE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

com.fingerprints.service.ACCESS_FINGERPRINT_MANAGER

android.permission.FLASHLIGHT

android.permission.NFC

android.permission.NFC_TRANSACTION_EVENT

android.permission.SYSTEM_ALERT_WINDOW

android.permission.POST_NOTIFICATIONS

android.permission.MANAGE_ACCOUNTS

android.permission.GET_ACCOUNTS

android.permission.READ_SYNC_SETTINGS

android.permission.WRITE_SYNC_SETTINGS

android.permission.AUTHENTICATE_ACCOUNTS

android.permission.USE_CREDENTIALS

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.BLUETOOTH_ADVERTISE

android.permission.BLUETOOTH_SCAN

android.permission.BLUETOOTH_CONNECT

com.google.android.gms.permission.AD_ID

android.permission.ACCESS_WIFI_STATE

android.permission.WAKE_LOCK

com.google.android.c2dm.permission.RECEIVE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

air.com.ssdsoftwaresolutions.clickuz.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Sharing

General

Malware Config

Signatures

Files