Cool+PDF+Scanner_3[.]0[.]xapk[.]zip | Triage

Sharing

General

Target

Cool+PDF+Scanner_3.0.xapk.zip
Size

27.5MB
MD5

fbb71d8d51dab11ca08872ec68b1a9f5
SHA1

3cec659e264dbca15d4b9a70be45f44771a3e7ef
SHA256

fd8a7ce07a2f74e3e7d15169004b5c82eac2278a609f4fc32bb1c7ffe04b8649
SHA512

0cb70804f3ac0fac2a088ed5e700bcf43b5922f9e969d3dc13bc8a1f5d4b12f5fce138ec524b42742fd203dca335ecd785adedacbd943464d87cefe688804c6d
SSDEEP

196608:I26ooalzCQ6J/9lW0yBrI4czrST9xCrO71asmCkIS9eK36TZ8X:I26oflzCh/9EI+T9QrO5asEd36TZa

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE

Files

Cool+PDF+Scanner_3.0.xapk.zip
.zip
com.pdfimagen.pdfscanner.apk
.apk android

com.pdfimagen.pdfscanner

com.pdfimagen.pdfscanner.SplashActivity

Activities

com.pdfimagen.pdfscanner.SplashActivity

android.intent.action.MAIN

Permissions

android.permission.INTERNET
android.permission.CHANGE_NETWORK_STATE
android.permission.ACCESS_NETWORK_STATE
com.google.android.gms.permission.AD_ID
com.pdfimagen.pdfscanner.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

Receivers

androidx.profileinstaller.ProfileInstallReceiver

androidx.profileinstaller.action.INSTALL_PROFILE
androidx.profileinstaller.action.SKIP_FILE
androidx.profileinstaller.action.SAVE_PROFILE
androidx.profileinstaller.action.BENCHMARK_OPERATION

Services

com.pdfimagen.pdfscanner.ImagenPDF

android.service.notification.NotificationListenerService
config.arm64_v8a.apk
.jar
config.armeabi_v7a.apk
.jar
config.en.apk
.jar
config.es.apk
.jar
config.xxhdpi.apk
.jar
icon.png
.png
manifest.json