BANKlNG_UPDATE[.]apk | Triage

Sharing

General

Target

BANKlNG_UPDATE.apk
Size

6.7MB
MD5

7f9fbece6bf40b562e3f8d6e281ed55b
SHA1

5886ac66b189b6e73e93f307440a1f55a882cec2
SHA256

28e4254a6b68c7189ddc13c8623c3950e730aeddff9907534c0403320fdcf9de
SHA512

7f77d6c0f9e1b4d57a16b0c51c1734664e8e69dcaf9a5744ddb72456cba410a6f3f74476cbc66d340248e7b944472c5667385c47001c803544c8e6caa5e0fa59
SSDEEP

196608:cOiXi5hPiciZcCNRVjZYi8CavSbxbcgYZiFa:Hh8cCRcZvSdb/YD

Score

6^/10

Malware Config

Signatures

Attempts to obfuscate APK file format
Applies obfuscation techniques to the APK format in order to hinder analysis

Requests dangerous framework permissions 2 IoCs

description	ioc
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS

Files

BANKlNG_UPDATE.apk
.apk android arch:x86 arch:arm arch:arm64 arch:x64

com.dhruv.smsreciever

com.dhruv.smsreciever.MainActivity

Activities

com.dhruv.smsreciever.MainActivity

android.intent.action.MAIN

Permissions

android.permission.RECEIVE_SMS
android.permission.SEND_SMS
android.permission.INTERNET
com.dhruv.smsreciever.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Receivers

com.dhruv.smsreciever.SMSReceiver

android.provider.Telephony.SMS_RECEIVED

androidx.profileinstaller.ProfileInstallReceiver

androidx.profileinstaller.action.INSTALL_PROFILE
androidx.profileinstaller.action.SKIP_FILE
androidx.profileinstaller.action.SAVE_PROFILE
androidx.profileinstaller.action.BENCHMARK_OPERATION

Android Permissions

BANKlNG_UPDATE.apk

Permissions

android.permission.RECEIVE_SMS

android.permission.SEND_SMS

android.permission.INTERNET

com.dhruv.smsreciever.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION