Resubmissions

06/09/2024, 07:37

240906-jgblcstglq 6

06/09/2024, 07:37

240906-jft2batgkj 6

General

  • Target

    Postegroplus-6_1.apk

  • Size

    97.2MB

  • MD5

    ea27b94f4459b019fe26e544f8fd73b5

  • SHA1

    c857fdb39d81b2e315add25c2d0721dae8f999f7

  • SHA256

    2566a5df261c5b3f1290ad30ef8f79394dcd661e58ba3ff952e95d511efc43fd

  • SHA512

    8ff61e5bd347d91a9b482578a3e4d77d42161b2f7a04d36befb5f26397ca815d85d935330adb181f9c53eaa4fb864e155514db107ec534db268fc28096026cd0

  • SSDEEP

    393216:UXGAlVyYQ9utS1P4Y4OoRIaYUyBGRZ57XSZuLTB21SB2YUZT7IH8p2Vde9HXMy5d:UX9sYQ9ut24dqUyBGfFCoPQuy0D8F

Score
6/10

Malware Config

Signatures

  • Declares services with permission to bind to the system 2 IoCs
  • Requests dangerous framework permissions 7 IoCs

Files

  • Postegroplus-6_1.apk
    .apk android arch:arm64 arch:arm arch:mips arch:mips64 arch:x86 arch:x64

    gizli.hesaplara.bakma

    gizli.hesaplara.bakma.proxy.MainActivity


Android Permissions

Postegroplus-6_1.apk

Permissions

android.permission.INTERNET

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.FOREGROUND_SERVICE

android.permission.SCHEDULE_EXACT_ALARM

android.permission.WAKE_LOCK

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MANAGE_EXTERNAL_STORAGE

com.android.vending.BILLING

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.READ_PHONE_STATE

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

com.google.android.gms.permission.AD_ID

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE