yoomoney-wallet-a[.]apk

Sharing

Copy URL Twitter E-mail

General

Target

yoomoney-wallet-a.apk
Size

216.9MB
MD5

3990b7fe3e12aabff0c9a25d128d9479
SHA1

34b7798a60b50a56bd1d2a5c4e7743076acafed3
SHA256

3400fe17d492cfce619a4af1de517e5c1aac0f75bda6f4de0439583a62437fc5
SHA512

3d9867b1850cc5252964190012fd77dca0233848df2c5843a952d4ed0027448784b1b47cab9cf45800019bc21d871600aeeaaf33928c7141581e48a81da9acad
SSDEEP

1572864:bHEZTMZ2EMEe7b7h3GzH3MSk5o/ybYPSFs9ExyzAfn6inuxxjg1O2IE:bk7EMfdWzH8SYoqbxysfn6YSx9E

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by remote views services to bind with the system. Allows apps to share and display views across different processes.	android.permission.BIND_REMOTEVIEWS
Required by NFC services to bind with the system. Allows apps to interact with NFC hardware.	android.permission.BIND_NFC_SERVICE

Requests dangerous framework permissions 11 IoCs

description	ioc
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Required to be able to access the camera device.	android.permission.CAMERA
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an application to read image files from external storage.	android.permission.READ_MEDIA_IMAGES
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE

Files

yoomoney-wallet-a.apk
.apk android arch:arm64 arch:arm arch:x86 arch:x64

ru.yoo.money

ru.yoo.money.entryPoint.presentation.EntryPointActivity

Activities

ru.yoo.money.entryPoint.presentation.EntryPointActivity

android.intent.action.VIEW
ru.yoo.money.action.MAIN_SCREEN
android.intent.action.MAIN
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW

ru.yoo.money.view.WalletActivity

android.intent.action.SEARCH
com.google.android.gms.actions.SEARCH_ACTION

ru.yoo.money.linkGoogle.LinkGoogleDeeplinkActivity

com.google.android.payments.standard.AUTHENTICATE_V1
android.intent.action.VIEW

ru.yoo.money.appwidget.setup.ui.BaseWidgetSetupActivity

android.appwidget.action.APPWIDGET_CONFIGURE

ru.yoo.money.payments.payment.ShowcasePaymentsActivity

ru.yoo.money.action.SHOW_MART
ru.yoo.money.action.SHOWCASE

ru.yoo.money.tokenTransfer.startTransfer.presentation.StartTransferActivity

ru.yoo.money.PROCESS_YOO_MONEY_TRANSFER_DATA_ACTION

ru.yoo.money.web.webview.WebViewDefaultActivity

android.intent.action.VIEW

ru.yoo.money.sberId.identification.SberIdIdentificationActivity

android.intent.action.VIEW

com.vk.superapp.logs.SuperappDebugLogsActivity

android.intent.action.VIEW

ru.yoomoney.sdk.auth.socialAccounts.sberId.SberIdActivity

android.intent.action.VIEW

ru.yoomoney.sdk.auth.socialAccounts.esia.EsiaActivity

android.intent.action.VIEW

com.vk.auth.oauth.vk.VkExternalOauthActivity

android.intent.action.VIEW

com.yandex.metrica.push.core.notification.MetricaPushDummyActivity

com.yandex.metrica.push.action.NOTIFICATION_ACTION

Permissions

android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.INTERNET
android.permission.READ_CONTACTS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.USE_FINGERPRINT
android.permission.CAMERA
com.google.android.c2dm.permission.RECEIVE
android.permission.VIBRATE
ru.yoo.money.permission.PROVIDER_SERVICE
com.yandex.yphone.permission.WRITE
android.permission.MANAGE_ACCOUNTS
android.permission.AUTHENTICATE_ACCOUNTS
android.permission.WRITE_SYNC_SETTINGS
com.samsung.android.providers.context.permission.WRITE_USE_APP_FEATURE_SURVEY
android.permission.ACCESS_FINE_LOCATION
android.permission.FOREGROUND_SERVICE
android.permission.ACCESS_COARSE_LOCATION
android.permission.REQUEST_INSTALL_PACKAGES
android.permission.BROADCAST_CLOSE_SYSTEM_DIALOGS
android.permission.READ_MEDIA_IMAGES
android.permission.ACCESS_NETWORK_STATE
android.permission.WAKE_LOCK
android.permission.NFC
com.google.android.gms.permission.ACTIVITY_RECOGNITION
android.permission.POST_NOTIFICATIONS
com.android.launcher.permission.INSTALL_SHORTCUT
android.provider.Telephony.SMS_RECEIVED
android.permission.GET_ACCOUNTS
android.permission.READ_PHONE_STATE
android.permission.ACCESS_WIFI_STATE
com.google.android.gms.permission.AD_ID
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
android.permission.CHANGE_WIFI_STATE
ru.yoo.money.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
ru.yoo.money.permission.PROCESS_PUSH_MSG
ru.yoo.money.permission.PUSH_PROVIDER
android.permission.FLASHLIGHT
ru.sberbank.mobile.sberid.BIND_PERSONALIZATION_SERVICE
com.huawei.permission.ACCESS_HW_KEYSTORE

Receivers

ru.yoo.money.notifications.pushes.AppMetricaSilentPushReceiver

ru.yoo.money.action.ymp.SILENT_PUSH_RECEIVE

ru.yoo.money.services.BootCompletedBroadcastReceiver

android.intent.action.BOOT_COMPLETED

ru.yoo.money.services.LocaleChangedBroadcastReceiver

android.intent.action.LOCALE_CHANGED

ru.yoo.money.notifications.RegistrationReminder

ru.yoo.money.action.CURRENT_ACCOUNT_CHANGED

ru.yoo.money.view.util.LoadMobileSettingsBroadcastReceiver

ru.yoo.money.action.CURRENT_ACCOUNT_CHANGED

ru.yoo.money.appwidget.balance.BalanceWidgetProvider

android.appwidget.action.APPWIDGET_UPDATE
android.appwidget.action.APPWIDGET_DISABLED
android.appwidget.action.APPWIDGET_DELETED
android.appwidget.action.APPWIDGET_ENABLED
ru.yoo.money.action.ACCOUNT_INFO
ru.yoo.money.action.CURRENT_ACCOUNT_CHANGED
ru.yoo.money.action.START_ACTIVITY
ru.yoo.money.action.REDRAW_BALANCE_WIDGET
ru.yoo.money.action.REFRESH_BALANCE_WIDGET
ru.yoo.money.action.LAUNCH_APP

ru.yoo.money.appwidget.spending.SpendingWidgetProvider

android.appwidget.action.APPWIDGET_UPDATE
android.appwidget.action.APPWIDGET_DISABLED
android.appwidget.action.APPWIDGET_DELETED
android.appwidget.action.APPWIDGET_ENABLED
ru.yoo.money.action.CURRENT_ACCOUNT_CHANGED
ru.yoo.money.action.START_ACTIVITY
ru.yoo.money.action.REDRAW_SPENDING_WIDGET
ru.yoo.money.action.REFRESH_SPENDING_WIDGET

ru.yoo.money.appwidget.favorite.FavoritesWidgetProvider

android.appwidget.action.APPWIDGET_UPDATE
android.appwidget.action.APPWIDGET_DISABLED
android.appwidget.action.APPWIDGET_DELETED
android.appwidget.action.APPWIDGET_ENABLED
ru.yoo.money.action.CURRENT_ACCOUNT_CHANGED
ru.yoo.money.action.START_ACTIVITY
ru.yoo.money.action.REDRAW_FAVORITES_WIDGET
ru.yoo.money.action.REFRESH_FAVORITES_WIDGET
ru.yoo.money.action.LAUNCH_APP

ru.yoo.money.appwidget.operation_history.OperationHistoryWidgetProvider

android.appwidget.action.APPWIDGET_UPDATE
android.appwidget.action.APPWIDGET_DISABLED
android.appwidget.action.APPWIDGET_DELETED
android.appwidget.action.APPWIDGET_ENABLED
ru.yoo.money.action.OPERATION_HISTORY
ru.yoo.money.action.CURRENT_ACCOUNT_CHANGED
ru.yoo.money.action.START_ACTIVITY
ru.yoo.money.action.REFRESH_OPERATION_HISTORY_WIDGET
ru.yoo.money.action.LAUNCH_APP

ru.yoo.money.appwidget.loyalty_cards.LoyaltyCardWidgetProvider

android.appwidget.action.APPWIDGET_UPDATE
android.appwidget.action.APPWIDGET_DISABLED
android.appwidget.action.APPWIDGET_DELETED
android.appwidget.action.APPWIDGET_ENABLED
ru.yoo.money.action.CURRENT_ACCOUNT_CHANGED
ru.yoo.money.action.START_ACTIVITY
ru.yoo.money.action.REDRAW_LOYALTY_CARDS_WIDGET
ru.yoo.money.action.REFRESH_LOYALTY_CARDS_WIDGET

com.vk.superapp.logs.DebugBroadcastReceiver

android.provider.Telephony.SECRET_CODE

com.vk.superapp.browser.utils.SuperAppLoadingBroadcastReceiver

android.intent.action.DOWNLOAD_COMPLETE

com.yandex.metrica.push.core.notification.MetricaPushBroadcastReceiver

com.yandex.metrica.push.action.NOTIFICATION_ACTION

com.yandex.metrica.push.core.notification.MetricaPushNotificationStatusChangeHandler

android.app.action.APP_BLOCK_STATE_CHANGED
android.app.action.NOTIFICATION_CHANNEL_BLOCK_STATE_CHANGED
android.app.action.NOTIFICATION_CHANNEL_GROUP_BLOCK_STATE_CHANGED

com.yandex.metrica.push.core.notification.TtlBroadcastReceiver

com.yandex.metrica.push.action.EXPIRED_BY_TTL_ACTION

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY
android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW
android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.TIME_SET
android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.work.diagnostics.REQUEST_DIAGNOSTICS

androidx.profileinstaller.ProfileInstallReceiver

androidx.profileinstaller.action.INSTALL_PROFILE
androidx.profileinstaller.action.SKIP_FILE
androidx.profileinstaller.action.SAVE_PROFILE
androidx.profileinstaller.action.BENCHMARK_OPERATION

com.huawei.hms.support.api.push.PushMsgReceiver

com.huawei.intent.action.PUSH_DELAY_NOTIFY
com.huawei.intent.action.PUSH

com.huawei.hms.support.api.push.PushReceiver

com.huawei.android.push.intent.REGISTRATION
com.huawei.android.push.intent.RECEIVE

Services

ru.yoo.money.notifications.pushes.HmsMessagingServiceImpl

com.huawei.push.action.MESSAGING_EVENT

ru.yoo.money.notifications.pushes.FcmMessagingServiceImpl

com.google.firebase.INSTANCE_ID_EVENT
com.google.firebase.MESSAGING_EVENT

ru.yoo.money.contactless.YmHceService

android.nfc.cardemulation.action.HOST_APDU_SERVICE

com.yandex.metrica.MetricaService

com.yandex.metrica.IMetricaService

com.vk.auth.accountmanager.VkAccountAuthenticatorService

android.accounts.AccountAuthenticator

com.yandex.metrica.ConfigurationService

com.yandex.metrica.configuration.ACTION_INIT

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

com.huawei.hms.support.api.push.service.HmsMsgService

com.huawei.push.msg.NOTIFY_MSG
com.huawei.push.msg.PASSBY_MSG

Android Permissions

yoomoney-wallet-a.apk

Permissions

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.READ_CONTACTS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.USE_FINGERPRINT

android.permission.CAMERA

com.google.android.c2dm.permission.RECEIVE

android.permission.VIBRATE

ru.yoo.money.permission.PROVIDER_SERVICE

com.yandex.yphone.permission.WRITE

android.permission.MANAGE_ACCOUNTS

android.permission.AUTHENTICATE_ACCOUNTS

android.permission.WRITE_SYNC_SETTINGS

com.samsung.android.providers.context.permission.WRITE_USE_APP_FEATURE_SURVEY

android.permission.ACCESS_FINE_LOCATION

android.permission.FOREGROUND_SERVICE

android.permission.ACCESS_COARSE_LOCATION

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.BROADCAST_CLOSE_SYSTEM_DIALOGS

android.permission.READ_MEDIA_IMAGES

android.permission.ACCESS_NETWORK_STATE

android.permission.WAKE_LOCK

android.permission.NFC

com.google.android.gms.permission.ACTIVITY_RECOGNITION

android.permission.POST_NOTIFICATIONS

com.android.launcher.permission.INSTALL_SHORTCUT

android.provider.Telephony.SMS_RECEIVED

android.permission.GET_ACCOUNTS

android.permission.READ_PHONE_STATE

android.permission.ACCESS_WIFI_STATE

com.google.android.gms.permission.AD_ID

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.CHANGE_WIFI_STATE

ru.yoo.money.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

ru.yoo.money.permission.PROCESS_PUSH_MSG

ru.yoo.money.permission.PUSH_PROVIDER

android.permission.FLASHLIGHT

ru.sberbank.mobile.sberid.BIND_PERSONALIZATION_SERVICE

com.huawei.permission.ACCESS_HW_KEYSTORE

Sharing

General

Malware Config

Signatures

Files

ru.yoo.money

ru.yoo.money.entryPoint.presentation.EntryPointActivity

Activities

ru.yoo.money.entryPoint.presentation.EntryPointActivity

ru.yoo.money.view.WalletActivity

ru.yoo.money.linkGoogle.LinkGoogleDeeplinkActivity

ru.yoo.money.appwidget.setup.ui.BaseWidgetSetupActivity

ru.yoo.money.payments.payment.ShowcasePaymentsActivity

ru.yoo.money.tokenTransfer.startTransfer.presentation.StartTransferActivity

ru.yoo.money.web.webview.WebViewDefaultActivity

ru.yoo.money.sberId.identification.SberIdIdentificationActivity

com.vk.superapp.logs.SuperappDebugLogsActivity

ru.yoomoney.sdk.auth.socialAccounts.sberId.SberIdActivity

ru.yoomoney.sdk.auth.socialAccounts.esia.EsiaActivity

com.vk.auth.oauth.vk.VkExternalOauthActivity

com.yandex.metrica.push.core.notification.MetricaPushDummyActivity

Permissions

Receivers

ru.yoo.money.notifications.pushes.AppMetricaSilentPushReceiver

ru.yoo.money.services.BootCompletedBroadcastReceiver

ru.yoo.money.services.LocaleChangedBroadcastReceiver

ru.yoo.money.notifications.RegistrationReminder

ru.yoo.money.view.util.LoadMobileSettingsBroadcastReceiver

ru.yoo.money.appwidget.balance.BalanceWidgetProvider

ru.yoo.money.appwidget.spending.SpendingWidgetProvider

ru.yoo.money.appwidget.favorite.FavoritesWidgetProvider

ru.yoo.money.appwidget.operation_history.OperationHistoryWidgetProvider

ru.yoo.money.appwidget.loyalty_cards.LoyaltyCardWidgetProvider

com.vk.superapp.logs.DebugBroadcastReceiver

com.vk.superapp.browser.utils.SuperAppLoadingBroadcastReceiver

com.yandex.metrica.push.core.notification.MetricaPushBroadcastReceiver

com.yandex.metrica.push.core.notification.MetricaPushNotificationStatusChangeHandler

com.yandex.metrica.push.core.notification.TtlBroadcastReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.profileinstaller.ProfileInstallReceiver

com.huawei.hms.support.api.push.PushMsgReceiver

com.huawei.hms.support.api.push.PushReceiver

Services

ru.yoo.money.notifications.pushes.HmsMessagingServiceImpl

ru.yoo.money.notifications.pushes.FcmMessagingServiceImpl

ru.yoo.money.contactless.YmHceService

com.yandex.metrica.MetricaService

com.vk.auth.accountmanager.VkAccountAuthenticatorService

com.yandex.metrica.ConfigurationService

com.google.firebase.messaging.FirebaseMessagingService

com.huawei.hms.support.api.push.service.HmsMsgService

Android Permissions

yoomoney-wallet-a.apk